Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
File:                     9i4OVeXFow7AS9bcRtFUs-S3tfU.cer (raw, json)
Hash identifier:          VQdqvKqKEmTH/X3Rk7uIc7Z3II722yrZry7l3bzn9E0=
Subject key identifier:   F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C112A9C06B416EED6878D0A273AE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201218
                          IP: 78.24.203.0/24
                          IP: 2a12:9040::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:11:2a:9c:06:b4:16:ee:d6:87:8d:0a:27:3a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:8b:d4:6c:e7:ad:e2:02:04:f0:83:2c:02:
                    4b:78:19:d4:29:71:51:4e:8b:73:91:d3:2d:14:1d:
                    ed:3c:76:03:65:8f:23:6b:94:44:76:9b:3b:1f:05:
                    62:6b:21:c6:62:f5:87:29:e8:ce:8e:c3:f1:8f:2e:
                    fa:5d:ba:a6:0d:72:5b:53:4b:64:ce:65:c9:98:0c:
                    d0:05:af:53:9a:f7:23:e2:0d:b8:fb:1c:ab:9d:de:
                    8e:55:80:21:bc:16:44:95:22:fe:04:75:d3:ba:d6:
                    2b:96:37:6a:d3:21:5f:66:91:23:a7:03:19:ab:87:
                    1f:cc:1d:9a:0b:80:69:3b:14:8b:fb:ea:e5:a0:90:
                    af:12:f4:dd:bd:67:f1:79:c3:0e:41:6f:e3:b0:30:
                    8d:2d:d6:83:47:da:65:40:37:5f:72:3d:65:e5:3b:
                    c4:54:36:3c:2f:f8:1a:67:c1:cc:59:a6:8f:3f:07:
                    5d:ba:2b:5f:2b:f7:21:7d:a6:12:59:46:f2:48:d0:
                    d4:43:f8:b5:17:d9:1e:53:99:f5:cd:fe:ea:c7:27:
                    de:5f:2b:07:f3:43:07:c2:39:90:5b:8e:c6:b2:62:
                    dc:6a:15:de:b8:9a:81:1b:76:63:b8:55:8c:a1:21:
                    f6:63:5b:dc:42:41:99:3f:44:f4:18:99:14:e1:0c:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.203.0/24
                IPv6:
                  2a12:9040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201218

    Signature Algorithm: sha256WithRSAEncryption
         91:45:00:7b:74:03:b8:42:ca:60:ef:67:e0:1a:67:9a:4d:e9:
         6f:ae:26:86:7c:9c:d4:2c:57:fa:57:db:5c:f8:7f:86:f8:84:
         a4:60:1e:43:6b:35:e1:a8:57:24:54:ad:c2:17:aa:18:ff:d5:
         df:85:e2:77:75:3a:11:fe:d6:52:f1:d5:11:c4:ab:13:19:c9:
         fa:af:17:6e:04:a8:e3:ea:29:c4:ff:17:52:d7:be:90:fe:51:
         a8:f3:6c:0d:df:7b:a3:ab:3f:fd:26:58:7c:54:a1:b6:47:69:
         83:c8:00:36:93:86:77:54:3a:d5:0a:07:60:c4:19:e4:36:2b:
         73:5c:92:43:f0:68:eb:c7:9d:af:dd:e9:1f:f0:6a:a6:2f:6e:
         e0:c2:7f:af:a1:fc:0b:11:37:8b:9f:98:b0:a6:be:4d:ba:c2:
         48:9a:a5:cd:b6:05:18:75:55:b5:96:13:0c:de:50:84:b7:3e:
         5c:61:ea:da:0c:54:a8:8b:2d:c7:01:29:bb:7b:11:21:ae:0b:
         da:c2:54:18:32:98:9d:58:90:8b:ee:92:8a:e1:25:4c:f2:8a:
         da:00:30:3f:9e:3a:de:14:11:08:39:15:7d:38:ff:34:56:fc:
         46:ae:76:80:f1:80:ee:08:73:94:7a:0e:d2:eb:6d:c1:9f:fc:
         9e:38:da:49
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQmbBEqnAa0Fu7Wh40KJzriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJlMGU1NWU1YzVhMzBlYzA0YmQ2ZGM0NmQxNTRiM2U0YjdiNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtmL1GznreICBPCDLAJLeBnUKXFR
TotzkdMtFB3tPHYDZY8ja5REdps7HwViayHGYvWHKejOjsPxjy76XbqmDXJbU0tk
zmXJmAzQBa9Tmvcj4g24+xyrnd6OVYAhvBZElSL+BHXTutYrljdq0yFfZpEjpwMZ
q4cfzB2aC4BpOxSL++rloJCvEvTdvWfxecMOQW/jsDCNLdaDR9plQDdfcj1l5TvE
VDY8L/gaZ8HMWaaPPwdduitfK/chfaYSWUbySNDUQ/i1F9keU5n1zf7qxyfeXysH
80MHwjmQW47GsmLcahXeuJqBG3ZjuFWMoSH2Y1vcQkGZP0T0GJkU4QwXtwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPYuDlXlxaMOwEvW3EbRVLPkt7X1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2Y5OTdj
OC1kZjcwLTRkN2YtYjg2ZC0xOTJjYjM2OTQyM2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZjk5N2M4
LWRmNzAtNGQ3Zi1iODZkLTE5MmNiMzY5NDIzZi8xLzlpNE9WZVhGb3c3QVM5YmNS
dEZVcy1TM3RmVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAThjLMA0EAgACMAcDBQMqEpBAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMSAjANBgkqhkiG9w0BAQsFAAOCAQEAkUUAe3QDuELK
YO9n4Bpnmk3pb64mhnyc1CxX+lfbXPh/hviEpGAeQ2s14ahXJFStwheqGP/V34Xi
d3U6Ef7WUvHVEcSrExnJ+q8XbgSo4+opxP8XUte+kP5RqPNsDd97o6s//SZYfFSh
tkdpg8gANpOGd1Q61QoHYMQZ5DYrc1ySQ/Bo68edr93pH/Bqpi9u4MJ/r6H8CxE3
i5+YsKa+TbrCSJqlzbYFGHVVtZYTDN5QhLc+XGHq2gxUqIstxwEpu3sRIa4L2sJU
GDKYnViQi+6SiuElTPKK2gAwP5463hQRCDkVfTj/NFb8Rq52gPGA7ghzlHoO0utt
wZ/8njjaSQ==
-----END CERTIFICATE-----