Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
File:                     CO0aVoa6aCicbP5MfDbgN63hHso.cer (raw, json)
Hash identifier:          6fYlA6m8f3zAZfeQeKTouXXpU+T5PYLEg4SyWXnHvts=
Subject key identifier:   08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019567714412F0D36AAD52A7D22E4563659A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Mar 2025 17:53:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211003
                          IP: 185.253.111.0/24
                          IP: 2a12:1fc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:67:71:44:12:f0:d3:6a:ad:52:a7:d2:2e:45:63:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 17:53:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:0f:23:14:f1:5a:df:be:2d:27:80:d8:6d:
                    e4:26:65:d8:44:4f:6e:8b:17:ad:95:1a:93:a6:e9:
                    76:63:fa:c3:2a:c9:df:09:da:ff:87:8d:10:03:5f:
                    eb:ce:74:a7:82:04:27:fa:f7:3e:aa:80:67:0b:db:
                    3f:38:3b:07:46:c8:ab:fb:77:e2:e4:a9:95:c1:aa:
                    5b:d7:d4:77:7f:f2:71:8b:f3:2a:d8:de:bc:c7:5d:
                    91:24:cb:0e:a4:19:21:b9:35:f0:55:d5:e7:2b:dc:
                    82:91:ab:72:60:a7:62:96:51:b9:26:e9:c3:8a:e3:
                    e3:81:08:c8:63:9a:25:88:7d:b2:27:4d:fa:ea:17:
                    77:58:c6:ce:c0:77:ff:9c:ab:74:98:94:ac:0a:31:
                    8b:ba:82:80:17:ce:88:e2:9e:81:0c:88:15:57:1d:
                    6b:54:c5:5f:cb:bc:03:cf:11:3c:07:99:9f:1a:12:
                    46:09:e9:a5:2a:3a:de:3f:2b:2f:ae:bd:05:64:fb:
                    ef:4d:4d:cc:8b:7d:d0:92:8f:b4:7c:76:1f:fa:8a:
                    67:0b:e0:69:df:73:25:a0:f0:9a:d0:eb:d2:ea:63:
                    8d:f4:42:20:76:29:9b:dd:52:a6:d9:1c:41:fb:8a:
                    27:8a:f1:5b:4e:20:4c:bb:5d:63:56:07:09:a2:0f:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.111.0/24
                IPv6:
                  2a12:1fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211003

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:f9:48:e1:00:ec:09:32:4d:26:20:83:e9:ba:ba:3d:4c:
         2b:1b:5b:5d:d5:ad:77:7a:09:64:cd:91:8d:22:b3:ff:2a:fa:
         41:96:69:69:b5:43:5c:a4:b6:ec:21:0f:e4:19:df:76:f2:64:
         a8:31:6f:e6:ed:1f:2c:cb:44:8f:f7:67:42:c5:5a:0e:3b:60:
         e1:f4:3a:06:a5:a9:8a:8b:dc:41:50:91:91:48:fa:b4:9c:0a:
         14:d2:70:b0:2d:db:76:25:de:2d:17:ed:10:9a:20:17:8a:47:
         55:b0:cf:31:2f:8f:c0:f5:ca:78:6e:b6:d7:e9:72:dc:37:10:
         6c:85:25:88:26:66:fb:b2:10:e9:e9:81:b5:00:36:46:6f:b9:
         13:d4:8a:5c:37:d8:8d:38:c7:c3:70:ab:5e:30:1f:70:de:16:
         0b:f2:ee:ce:98:65:9f:35:4c:5d:33:a0:74:88:bb:12:f5:01:
         89:ab:6e:4c:dd:5f:01:94:3b:72:e3:fd:45:37:f9:f5:80:95:
         0b:39:a5:8b:9b:36:c5:96:7a:c9:5c:e0:43:4e:1c:90:6f:92:
         60:c1:ca:6e:1a:d6:68:3d:91:a0:e4:19:be:15:1b:88:e5:95:
         45:d9:8e:9f:d9:37:62:31:85:89:1f:0b:23:63:47:3f:30:d2:
         ce:66:5f:8f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZVncUQS8NNqrVKn0i5FY2WaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzA1MTc1MzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGVkMWE1Njg2YmE2ODI4OWM2Y2ZlNGM3YzM2ZTAzN2FkZTExZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYPIxTxWt++LSeA2G3kJmXYRE9u
ixetlRqTpul2Y/rDKsnfCdr/h40QA1/rznSnggQn+vc+qoBnC9s/ODsHRsir+3fi
5KmVwapb19R3f/Jxi/Mq2N68x12RJMsOpBkhuTXwVdXnK9yCkatyYKdillG5JunD
iuPjgQjIY5oliH2yJ0366hd3WMbOwHf/nKt0mJSsCjGLuoKAF86I4p6BDIgVVx1r
VMVfy7wDzxE8B5mfGhJGCemlKjrePysvrr0FZPvvTU3Mi33Qko+0fHYf+opnC+Bp
33MloPCa0OvS6mON9EIgdimb3VKm2RxB+4onivFbTiBMu11jVgcJog9FlQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAjtGlaGumgonGz+THw24Det4R7KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2ZjYjc3
My0xZjViLTQ0MjEtYjFkNC05MGFiNzllN2VlMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmNiNzcz
LTFmNWItNDQyMS1iMWQ0LTkwYWI3OWU3ZWUyMy8xL0NPMGFWb2E2YUNpY2JQNU1m
RGJnTjYzaEhzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuf1vMA0EAgACMAcDBQMqEh/AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4OzANBgkqhkiG9w0BAQsFAAOCAQEACon5SOEA7Aky
TSYgg+m6uj1MKxtbXdWtd3oJZM2RjSKz/yr6QZZpabVDXKS27CEP5BnfdvJkqDFv
5u0fLMtEj/dnQsVaDjtg4fQ6BqWpiovcQVCRkUj6tJwKFNJwsC3bdiXeLRftEJog
F4pHVbDPMS+PwPXKeG621+ly3DcQbIUliCZm+7IQ6emBtQA2Rm+5E9SKXDfYjTjH
w3CrXjAfcN4WC/LuzphlnzVMXTOgdIi7EvUBiatuTN1fAZQ7cuP9RTf59YCVCzml
i5s2xZZ6yVzgQ04ckG+SYMHKbhrWaD2RoOQZvhUbiOWVRdmOn9k3YjGFiR8LI2NH
PzDSzmZfjw==
-----END CERTIFICATE-----