Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.cer (raw, json)
Hash identifier:          Axw0qCz7jDxnW3SgsKtmemcOEKHjp6vZovdp1Sn3mUk=
Subject key identifier:   E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3A766F492A603511EB3F1C177E986
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44819
                          IP: 217.67.96.0/20
                          IP: 2a02:d78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:a7:66:f4:92:a6:03:51:1e:b3:f1:c1:77:e9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:85:c1:ba:27:4e:d4:3b:a0:e5:51:7f:8c:
                    52:c3:86:bb:ee:ec:4e:ab:0b:f2:30:6f:2a:e7:02:
                    d8:66:54:38:c2:87:e6:e1:1e:0e:22:88:0e:38:3f:
                    ce:86:0a:ba:e9:dc:04:a5:36:dd:c9:fc:f4:83:71:
                    bd:0a:f6:83:28:12:25:d5:04:e8:22:bf:c7:74:0b:
                    16:9f:5b:32:66:56:c4:a9:ad:af:d9:af:ac:36:79:
                    b0:5f:0a:69:5e:21:6e:98:5b:1d:b8:50:e4:cc:58:
                    99:e9:7a:39:f6:1a:f6:62:a3:54:7e:b1:6c:e2:9b:
                    5d:5d:38:5b:6f:01:dc:1c:04:3c:36:27:48:73:ab:
                    ec:44:4e:4d:6c:96:19:45:ed:09:a1:fc:b2:f0:39:
                    8e:0d:22:81:b8:e6:19:a2:25:dd:e7:8e:55:53:e4:
                    e6:e7:15:b1:d8:9c:8a:9e:05:da:d0:cd:2c:8b:7d:
                    18:63:c4:53:58:10:4e:bb:d0:f2:64:28:eb:ba:d3:
                    ba:06:98:02:4f:d5:be:5a:77:27:bf:1b:f9:42:a4:
                    78:a1:30:02:ca:c2:87:e0:d8:97:5c:2f:0e:eb:1a:
                    b2:93:e2:13:cf:a3:fe:79:fa:63:b6:6c:a9:5a:46:
                    d5:9e:a3:1b:db:5c:77:8a:db:21:57:e6:04:ea:f8:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.67.96.0/20
                IPv6:
                  2a02:d78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44819

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:15:a9:c0:01:94:a6:16:21:42:ba:63:26:98:dc:11:ab:
         d9:6d:84:63:d0:2a:5a:24:5d:c7:b5:6a:ec:33:36:1c:bf:6d:
         09:10:c6:ca:86:71:ff:db:ae:70:48:38:3d:d2:90:a2:c6:61:
         d3:bf:e2:3c:69:bb:84:d8:3c:1f:8b:da:60:77:45:05:bd:12:
         55:f4:f7:44:9a:4c:2b:9e:b7:1f:ad:20:bb:d6:0f:f8:16:9e:
         70:5f:fd:aa:68:32:81:41:97:6e:a1:a4:4e:24:8f:5f:8e:08:
         77:c9:c2:c4:97:4a:35:4e:ea:06:b2:67:e3:98:22:d5:bb:fb:
         b9:d7:b7:e8:71:7d:52:45:a5:db:1b:9c:cc:30:38:36:e3:14:
         71:d9:e7:43:83:29:e3:e0:be:a7:ef:83:21:42:6d:07:6e:de:
         08:c4:33:ee:f1:e5:05:0f:cf:68:9a:06:2d:bb:cb:08:35:09:
         22:41:a8:21:40:7b:34:4d:81:9e:f3:2a:c9:2a:d7:c2:a2:39:
         22:f5:1b:37:55:16:6a:5f:d4:89:aa:63:f2:2e:b5:5a:0c:12:
         9b:01:b5:e9:9c:95:6e:bc:8d:bf:80:6c:52:8f:1f:d9:a6:5c:
         e7:df:86:02:3e:77:75:ad:b2:12:19:1b:c9:ee:ac:d0:4c:94:
         22:12:83:90
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQks6dm9JKmA1Ees/HBd+mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQ2YWMxMjA1M2YxNDg2YjNkZTc3ZjFjODcwYjU2YjlkZmMzOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWWFwbonTtQ7oOVRf4xSw4a77uxO
qwvyMG8q5wLYZlQ4wofm4R4OIogOOD/Ohgq66dwEpTbdyfz0g3G9CvaDKBIl1QTo
Ir/HdAsWn1syZlbEqa2v2a+sNnmwXwppXiFumFsduFDkzFiZ6Xo59hr2YqNUfrFs
4ptdXThbbwHcHAQ8NidIc6vsRE5NbJYZRe0Jofyy8DmODSKBuOYZoiXd545VU+Tm
5xWx2JyKngXa0M0si30YY8RTWBBOu9DyZCjrutO6BpgCT9W+Wncnvxv5QqR4oTAC
ysKH4NiXXC8O6xqyk+ITz6P+efpjtmypWkbVnqMb21x3itshV+YE6vjGiwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOXWrBIFPxSGs9538chwtWud/DkTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2U2MmM0
Zi01ZWUyLTRmZTAtOTU0MC1iMTAzZmE0NzQzYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZTYyYzRm
LTVlZTItNGZlMC05NTQwLWIxMDNmYTQ3NDNiOS8xLzVkYXNFZ1VfRklhejNuZnh5
SEMxYTUzOE9STS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQE2UNgMA0EAgACMAcDBQAqAg14MBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCvEzANBgkqhkiG9w0BAQsFAAOCAQEAMOgVqcABlKYW
IUK6YyaY3BGr2W2EY9AqWiRdx7Vq7DM2HL9tCRDGyoZx/9uucEg4PdKQosZh07/i
PGm7hNg8H4vaYHdFBb0SVfT3RJpMK563H60gu9YP+BaecF/9qmgygUGXbqGkTiSP
X44Id8nCxJdKNU7qBrJn45gi1bv7ude36HF9UkWl2xuczDA4NuMUcdnnQ4Mp4+C+
p++DIUJtB27eCMQz7vHlBQ/PaJoGLbvLCDUJIkGoIUB7NE2BnvMqySrXwqI5IvUb
N1UWal/Uiapj8i61WgwSmwG16ZyVbryNv4BsUo8f2aZc59+GAj53da2yEhkbye6s
0EyUIhKDkA==
-----END CERTIFICATE-----