Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
File:                     A7sK13ZWE5U7krbL9M2pP5wTcuY.cer (raw, json)
Hash identifier:          cQ4rsZ962VOEBaL5/L7TYx5ZWSexl9Fc5g7iIDrWXtc=
Subject key identifier:   03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB7E38CED6716A3D7982F5B93F36DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213813
                          IP: 2001:67c:fa4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:7e:38:ce:d6:71:6a:3d:79:82:f5:b9:3f:36:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:1c:23:f5:07:d9:4b:54:bb:f6:86:fc:f6:
                    2c:14:69:2f:b3:69:b7:39:42:e9:b5:c8:16:44:7c:
                    2e:fd:56:08:dd:48:aa:c9:14:e7:0d:90:a4:0a:8c:
                    74:c3:ee:23:09:92:1d:67:fb:52:74:ce:9a:52:3f:
                    c3:9c:6a:f0:e4:fc:09:92:55:07:ec:33:37:9c:cb:
                    9e:78:07:5b:60:1f:f0:9e:5b:7e:e7:98:8e:45:83:
                    99:3a:57:0a:02:50:52:1c:b5:ff:74:8e:15:c5:e0:
                    7a:43:4c:a1:4c:4d:97:19:bc:64:01:b7:05:36:cd:
                    51:36:fa:3d:f5:5d:77:08:68:56:23:97:81:87:0b:
                    20:d9:df:96:24:4e:e9:b6:4d:82:99:5a:57:9e:76:
                    e1:62:a6:5a:7a:73:9a:66:88:8b:7b:76:f8:76:7c:
                    96:77:29:9d:eb:48:f7:89:c7:20:d8:5a:eb:ec:0d:
                    a3:89:3a:78:12:70:22:0e:8e:dd:1f:38:8c:be:ee:
                    bc:9a:83:ef:88:ff:01:c4:98:6e:88:b1:4d:f6:90:
                    e1:e4:7e:d1:ad:4e:63:aa:c0:50:98:9d:7e:43:aa:
                    e4:5d:8f:a5:75:8d:21:d5:3d:ed:ab:1c:88:c4:fa:
                    8c:c3:ec:a1:5a:fd:76:8a:52:c3:2a:37:19:bf:bb:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:fa4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213813

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:fd:92:64:d1:29:10:6e:fd:2e:08:d9:ce:5b:ea:b8:d7:
         d5:29:75:fc:56:84:5d:23:e9:a1:31:e3:85:4a:67:fb:0f:24:
         15:de:21:b4:6e:17:04:a9:aa:cd:76:a1:cc:7a:8c:27:87:5d:
         95:60:5d:0e:df:47:76:33:d6:38:28:e1:d7:cc:b6:4d:38:e7:
         47:92:9a:2a:4a:af:77:8e:35:d5:a6:fa:e4:ac:96:8c:25:7e:
         15:a3:00:f5:db:47:d9:d1:40:75:48:7a:66:54:d5:58:49:59:
         5c:ae:3a:76:57:4c:48:2e:0a:21:4b:68:a1:83:25:67:da:08:
         47:70:5d:22:90:b6:aa:ae:43:e9:c0:f3:74:df:95:72:93:97:
         b8:87:41:89:0c:83:93:7a:52:f4:cc:f9:00:65:db:8c:8a:75:
         15:c2:34:a1:ac:d1:df:7c:48:31:17:61:48:76:9c:d1:56:e1:
         d6:69:ed:49:7d:8c:ef:49:c9:0f:bc:a6:93:81:d6:ae:67:85:
         a7:ec:fb:96:f9:25:e3:a2:e1:d3:a1:3e:9c:fe:7e:c2:4a:6a:
         b3:59:79:ae:21:5f:8f:f8:ac:de:8d:63:ca:95:79:67:3c:12:
         d5:73:60:0d:4a:32:d2:48:a9:9c:8b:61:5b:7f:24:98:98:34:
         d2:6c:32:ed
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQi+344ztZxaj15gvW5PzbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2JiMGFkNzc2NTYxMzk1M2I5MmI2Y2JmNGNkYTkzZjljMTM3MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM0cI/UH2UtUu/aG/PYsFGkvs2m3
OULptcgWRHwu/VYI3UiqyRTnDZCkCox0w+4jCZIdZ/tSdM6aUj/DnGrw5PwJklUH
7DM3nMueeAdbYB/wnlt+55iORYOZOlcKAlBSHLX/dI4VxeB6Q0yhTE2XGbxkAbcF
Ns1RNvo99V13CGhWI5eBhwsg2d+WJE7ptk2CmVpXnnbhYqZaenOaZoiLe3b4dnyW
dymd60j3iccg2Frr7A2jiTp4EnAiDo7dHziMvu68moPviP8BxJhuiLFN9pDh5H7R
rU5jqsBQmJ1+Q6rkXY+ldY0h1T3tqxyIxPqMw+yhWv12ilLDKjcZv7t7AQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2JkOWU1
NS1kMjBhLTQyNTktYjcxMi1kNzU4MjU4OWJiNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYmQ5ZTU1
LWQyMGEtNDI1OS1iNzEyLWQ3NTgyNTg5YmI1OS8xL0E3c0sxM1pXRTVVN2tyYkw5
TTJwUDV3VGN1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA+kMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNDNTANBgkqhkiG9w0BAQsFAAOCAQEAN379kmTRKRBu/S4I2c5b6rjX1Sl1
/FaEXSPpoTHjhUpn+w8kFd4htG4XBKmqzXahzHqMJ4ddlWBdDt9HdjPWOCjh18y2
TTjnR5KaKkqvd4411ab65KyWjCV+FaMA9dtH2dFAdUh6ZlTVWElZXK46dldMSC4K
IUtooYMlZ9oIR3BdIpC2qq5D6cDzdN+VcpOXuIdBiQyDk3pS9Mz5AGXbjIp1FcI0
oazR33xIMRdhSHac0Vbh1mntSX2M70nJD7ymk4HWrmeFp+z7lvkl46Lh06E+nP5+
wkpqs1l5riFfj/is3o1jypV5ZzwS1XNgDUoy0kipnIthW38kmJg00mwy7Q==
-----END CERTIFICATE-----