Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
File:                     BPD3XK7T8miFrGVjD_qu53pw69k.cer (raw, json)
Hash identifier:          4FvmqFs4Fawlh4trOJtP9r7agmc9g18MxvuaZ8xG3fo=
Subject key identifier:   04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214453D8C3CFCB24488829135D93A55D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207356
                          IP: 185.16.248.0/24
                          IP: 2a10:280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:53:d8:c3:cf:cb:24:48:88:29:13:5d:93:a5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:47:97:ad:85:f6:a5:83:35:cb:65:b6:bf:
                    3e:04:85:14:38:84:28:27:8c:54:bc:7a:52:b4:14:
                    bf:a7:05:bd:03:e3:09:7a:d2:09:1e:26:2a:e1:39:
                    30:76:e6:3c:98:54:27:48:83:fe:82:fa:3b:20:93:
                    8e:08:85:49:54:01:c4:99:53:44:c6:bd:85:c2:0e:
                    82:41:9e:bf:b7:11:e7:d0:9d:f1:e4:98:5e:1a:8e:
                    69:d9:49:92:cc:40:cd:6e:25:6e:b4:bb:da:71:5f:
                    c2:8a:65:1d:16:8a:25:dd:ce:f9:a2:a0:ef:18:b4:
                    45:eb:88:6c:c1:a0:cd:2b:70:58:46:69:2c:e2:85:
                    28:96:1a:eb:6b:80:31:51:fa:7b:7a:5e:b7:cf:5b:
                    2b:44:b9:4d:b1:21:f2:4c:06:35:75:78:69:cb:b9:
                    cf:eb:f5:0f:25:7c:cc:2d:75:98:af:2f:92:69:34:
                    92:fe:f2:21:48:b9:5c:0f:5c:7e:c6:a6:ac:d5:80:
                    de:09:e1:e5:36:03:9e:ca:b5:6b:fc:1e:11:e1:84:
                    dc:24:5e:8d:e3:e4:ac:f2:96:dc:a1:a4:4b:bd:d3:
                    8a:f5:3a:a5:76:b2:70:c4:3d:0a:19:5e:63:7e:f8:
                    f3:a0:47:64:47:63:ed:37:94:db:3a:16:a5:c1:32:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.248.0/24
                IPv6:
                  2a10:280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207356

    Signature Algorithm: sha256WithRSAEncryption
         42:31:06:87:9d:bf:a6:9c:28:e3:05:55:2e:f8:f9:fc:55:c1:
         63:e1:db:14:20:e3:d2:e8:54:f3:88:c9:40:74:9b:c8:2f:1c:
         4e:35:3f:18:4f:5b:36:65:4c:a8:fd:09:1d:82:39:92:27:7a:
         c7:36:7e:17:d0:59:a3:05:df:b8:69:bf:ef:dc:85:1c:52:fe:
         cd:c9:df:26:f8:a7:cf:f0:7d:eb:80:60:dc:7e:da:28:70:ff:
         c4:e6:ac:ae:e0:34:4e:4e:6f:db:1b:91:8d:e6:4a:6f:94:84:
         89:59:c6:e4:75:3e:83:4f:54:f1:b0:d8:6d:f8:b9:b9:8c:bb:
         ec:16:be:72:1a:dd:5c:94:10:c5:0a:86:4a:a5:59:3f:55:72:
         01:0c:47:31:c4:9d:d3:46:38:68:96:ef:05:54:1c:68:24:c0:
         ec:9a:a1:a4:ff:ed:d2:e8:39:46:94:8e:f1:b5:12:a3:a1:e8:
         fe:6c:0c:d1:34:d8:37:78:02:3c:03:42:59:40:97:55:8e:62:
         89:24:e7:7d:0c:72:8b:a7:25:fa:3e:52:03:6e:a4:34:dd:0e:
         86:26:68:09:a6:0b:96:e2:f0:4b:27:a6:a1:8c:1b:e5:21:41:
         f7:75:be:b8:66:42:eb:c5:a5:73:23:f7:dd:90:7b:05:18:00:
         f2:04:32:95
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhRFPYw8/LJEiIKRNdk6VdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGYwZjc1Y2FlZDNmMjY4ODVhYzY1NjMwZmZhYWVlNzdhNzBlYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtHl62F9qWDNctltr8+BIUUOIQo
J4xUvHpStBS/pwW9A+MJetIJHiYq4TkwduY8mFQnSIP+gvo7IJOOCIVJVAHEmVNE
xr2Fwg6CQZ6/txHn0J3x5JheGo5p2UmSzEDNbiVutLvacV/CimUdFool3c75oqDv
GLRF64hswaDNK3BYRmks4oUolhrra4AxUfp7el63z1srRLlNsSHyTAY1dXhpy7nP
6/UPJXzMLXWYry+SaTSS/vIhSLlcD1x+xqas1YDeCeHlNgOeyrVr/B4R4YTcJF6N
4+Ss8pbcoaRLvdOK9TqldrJwxD0KGV5jfvjzoEdkR2PtN5TbOhalwTJjRwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFATw91yu0/JohaxlYw/6rud6cOvZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2FjODU4
Ny1kYjBkLTRmZTEtYTM5ZC00NTJlZjZhYmUwMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvYWM4NTg3
LWRiMGQtNGZlMS1hMzlkLTQ1MmVmNmFiZTAwZi8xL0JQRDNYSzdUOG1pRnJHVmpE
X3F1NTNwdzY5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuRD4MA0EAgACMAcDBQMqEAKAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMp/DANBgkqhkiG9w0BAQsFAAOCAQEAQjEGh52/ppwo
4wVVLvj5/FXBY+HbFCDj0uhU84jJQHSbyC8cTjU/GE9bNmVMqP0JHYI5kid6xzZ+
F9BZowXfuGm/79yFHFL+zcnfJvinz/B964Bg3H7aKHD/xOasruA0Tk5v2xuRjeZK
b5SEiVnG5HU+g09U8bDYbfi5uYy77Ba+chrdXJQQxQqGSqVZP1VyAQxHMcSd00Y4
aJbvBVQcaCTA7JqhpP/t0ug5RpSO8bUSo6Ho/mwM0TTYN3gCPANCWUCXVY5iiSTn
fQxyi6cl+j5SA26kNN0OhiZoCaYLluLwSyemoYwb5SFB93W+uGZC68WlcyP33ZB7
BRgA8gQylQ==
-----END CERTIFICATE-----