Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer (raw, json)
Hash identifier:          h9dWxZ3H7DJ+Q/ootPfVljfyehPVonJuymvxrY3WghQ=
Subject key identifier:   00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7737D37B520A7DEC4F2A541BD5FF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197923
                          IP: 31.135.176.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:73:7d:37:b5:20:a7:de:c4:f2:a5:41:bd:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:98:23:3d:d2:48:59:1d:64:cf:f5:de:85:
                    19:bd:bc:4f:15:30:10:e3:cd:10:eb:48:97:fa:1e:
                    01:e0:91:35:72:79:fa:cc:27:b8:4c:35:07:97:36:
                    24:14:4c:f3:59:00:70:a8:da:97:7e:99:e7:df:85:
                    03:52:e6:81:99:04:2e:01:73:c6:dc:b4:97:6d:71:
                    bd:ec:7d:e3:3d:96:5e:3f:8c:24:cd:00:bc:82:95:
                    6c:7f:26:88:d4:dd:e1:05:23:99:02:4c:61:73:d3:
                    18:28:cb:cc:fb:4e:d4:8e:5d:e8:a4:78:c9:65:f4:
                    6c:1b:a4:ee:35:db:a5:2f:ad:eb:73:88:0e:6e:9b:
                    a4:9a:77:43:f3:81:ac:e9:fc:84:95:80:ea:0e:cd:
                    56:0b:f3:12:ea:3c:0c:7b:4f:5e:16:04:aa:0f:82:
                    c4:aa:b6:ef:7e:c6:20:04:07:fd:97:7d:c0:4d:35:
                    6d:18:b8:cd:3a:fa:1e:9a:38:6a:35:77:95:88:7e:
                    cb:81:ff:6e:44:b2:3e:45:5f:80:05:e5:65:0f:50:
                    89:ca:85:d0:80:a4:d4:bc:14:4f:9d:ff:db:20:c7:
                    18:3d:cf:95:35:90:e4:a0:46:70:bd:09:43:33:62:
                    b8:bc:aa:d9:4e:c1:2a:ae:b2:b3:53:70:b9:00:e4:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.135.176.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197923

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:cb:e0:62:3d:99:95:78:db:c4:c3:c3:b7:c5:22:c4:d8:
         a9:9d:1f:9e:e2:67:14:14:4d:f6:b9:4c:40:3b:78:0f:47:ac:
         14:ee:5a:41:82:6b:bb:fd:1b:31:82:25:2f:bd:ed:c7:e9:e4:
         60:b2:74:9a:24:3e:5a:49:d4:a7:cd:46:87:bb:05:0b:43:48:
         f1:b1:06:78:8f:cc:85:e3:b0:ca:bf:61:3e:5b:91:f9:67:18:
         05:0c:dc:47:b7:c2:8f:b0:1b:0a:0a:9d:74:b0:f3:60:9d:d8:
         96:2d:af:40:18:a9:72:25:52:10:e8:cc:f6:a8:6d:3d:16:2d:
         ff:46:24:6a:59:04:88:f4:d4:42:2e:67:f4:e8:f9:19:37:b4:
         c7:e7:43:00:81:d3:74:65:1d:dd:f6:de:1e:b0:60:bc:da:ce:
         f3:5d:49:86:63:f1:09:45:4d:a1:bd:7d:41:c3:61:dc:ba:4f:
         bf:ae:99:a8:53:b5:0e:ca:a9:fa:06:f2:d9:7f:de:3e:03:1c:
         f6:f8:18:76:b6:d3:7c:36:f6:dd:43:a6:62:ed:14:26:45:88:
         5c:dd:e8:66:2d:50:62:7e:2a:5a:1b:a1:5f:36:3a:06:58:4f:
         d5:a8:66:b4:d6:1c:2c:18:d8:03:00:10:aa:53:43:14:ec:52:
         b1:34:1f:19
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQj13N9N7Ugp97E8qVBvV/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDA3NTM0ZWI3N2NhYTgzNmY4ZjExODYzMDE2NGUwMjM2ZTVmZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28SYIz3SSFkdZM/13oUZvbxPFTAQ
480Q60iX+h4B4JE1cnn6zCe4TDUHlzYkFEzzWQBwqNqXfpnn34UDUuaBmQQuAXPG
3LSXbXG97H3jPZZeP4wkzQC8gpVsfyaI1N3hBSOZAkxhc9MYKMvM+07Ujl3opHjJ
ZfRsG6TuNdulL63rc4gObpukmndD84Gs6fyElYDqDs1WC/MS6jwMe09eFgSqD4LE
qrbvfsYgBAf9l33ATTVtGLjNOvoemjhqNXeViH7Lgf9uRLI+RV+ABeVlD1CJyoXQ
gKTUvBRPnf/bIMcYPc+VNZDkoEZwvQlDM2K4vKrZTsEqrrKzU3C5AOQFSQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAAHU063fKqDb48RhjAWTgI25f6GMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzQxZTkw
Yy02MWNjLTQ3MGMtYTM4OC02ZDFjOWIxNTNjZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNDFlOTBj
LTYxY2MtNDcwYy1hMzg4LTZkMWM5YjE1M2NmMC8xL0FBZFRUcmQ4cW9Odmp4R0dN
QlpPQWpibF9vWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDH4ewMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMFIzANBgkqhkiG9w0BAQsFAAOCAQEAO9rL4GI9mZV428TDw7fFIsTYqZ0fnuJn
FBRN9rlMQDt4D0esFO5aQYJru/0bMYIlL73tx+nkYLJ0miQ+WknUp81Gh7sFC0NI
8bEGeI/MheOwyr9hPluR+WcYBQzcR7fCj7AbCgqddLDzYJ3Yli2vQBipciVSEOjM
9qhtPRYt/0YkalkEiPTUQi5n9Oj5GTe0x+dDAIHTdGUd3fbeHrBgvNrO811JhmPx
CUVNob19QcNh3LpPv66ZqFO1Dsqp+gby2X/ePgMc9vgYdrbTfDb23UOmYu0UJkWI
XN3oZi1QYn4qWhuhXzY6BlhP1ahmtNYcLBjYAwAQqlNDFOxSsTQfGQ==
-----END CERTIFICATE-----