Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
File:                     FXaJHPKx2OxWwDvHqW3pWKDgADI.cer (raw, json)
Hash identifier:          no2l2D7nfoUDnVP+sUesid6wZgylUOfJeCYMwFzQW30=
Subject key identifier:   15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE7A86B32A6B27E2D4F4EE1506DB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214423
                          IP: 195.95.248.0/24
                          IP: 2001:678:c60::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e7:a8:6b:32:a6:b2:7e:2d:4f:4e:e1:50:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:67:14:51:41:38:f6:4b:00:4a:9f:a9:c0:
                    9d:a0:36:38:c8:ea:82:c1:89:b6:26:07:5c:1d:c2:
                    e8:54:39:27:83:8f:05:67:cd:93:95:fc:19:37:0f:
                    25:09:20:b6:2f:fd:1c:52:4f:30:c4:65:22:5d:a8:
                    f3:0f:a2:01:e3:2c:9e:96:cd:48:c1:c8:fd:75:17:
                    29:cd:e2:dd:3a:a8:f8:c0:70:47:4b:d0:7e:c3:aa:
                    93:a3:38:68:f3:8d:44:79:3f:9c:fc:7a:a2:49:31:
                    08:dc:9e:98:cb:d0:63:84:51:9c:2e:a6:d6:90:12:
                    f1:ad:56:78:3a:62:2d:31:c3:d7:2f:66:56:49:f8:
                    3e:6c:09:0c:c0:db:a1:d6:4c:21:9e:e0:d8:b5:51:
                    5f:b0:77:8a:12:81:cb:dd:fd:92:c6:6f:28:aa:9a:
                    ed:7c:d6:31:d8:bf:4e:26:c6:fe:43:00:e5:1a:9f:
                    ab:81:6c:07:d3:6d:57:1e:55:0f:22:d0:bf:cf:eb:
                    1f:06:76:bf:42:8e:25:ca:e1:3d:29:d0:80:66:15:
                    9d:04:cb:a1:e7:a0:ff:1d:9b:15:ee:f6:ea:1f:1c:
                    aa:a4:27:87:eb:6e:9d:8a:63:d5:89:c7:e2:90:ee:
                    3b:e6:bd:97:d1:27:8b:4a:6f:e9:0f:d6:30:a3:d0:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.248.0/24
                IPv6:
                  2001:678:c60::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214423

    Signature Algorithm: sha256WithRSAEncryption
         08:10:d2:3c:92:68:6f:08:53:57:02:45:cc:a6:9b:2a:99:64:
         4c:98:de:95:57:da:9b:dc:9a:c0:3d:6b:d3:52:85:d5:99:3c:
         46:7f:cb:66:fe:be:12:49:c4:f6:59:12:65:b8:6a:0c:c5:1a:
         98:29:b3:22:8f:16:35:45:88:58:b1:a5:a4:dd:55:d8:2f:b2:
         3a:33:40:1b:47:ff:10:16:f5:a1:f6:3a:51:15:33:86:75:e0:
         d3:5e:64:48:4a:f0:f7:f1:a5:c8:ba:b9:ea:a7:21:97:cb:9f:
         33:1b:4b:d4:47:87:07:3d:59:78:c2:89:2c:6c:a4:f1:71:6c:
         c7:15:40:97:40:39:e6:d3:70:f1:2a:ee:13:a8:62:cf:a7:57:
         31:ba:cf:1a:09:2c:a3:70:ea:1f:e8:1c:93:e2:7a:5a:92:a3:
         03:cd:85:d6:5a:cb:5a:63:5b:ca:92:fd:44:b2:b1:6f:15:15:
         97:c7:fb:45:f0:7e:1b:54:35:cf:6f:92:e6:f9:43:cb:39:7f:
         c6:f3:87:48:ff:43:a3:06:1a:bf:45:78:03:5d:55:2b:d0:04:
         71:79:ce:54:8d:83:85:45:7e:a9:b1:6a:05:6d:3e:2c:34:68:
         95:8f:e6:59:da:a1:37:44:42:7d:9f:b6:5a:a6:83:1b:ea:7b:
         f8:bc:8d:bb
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQiH+eoazKmsn4tT07hUG2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc2ODkxY2YyYjFkOGVjNTZjMDNiYzdhOTZkZTk1OGEwZTAwMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRBnFFFBOPZLAEqfqcCdoDY4yOqC
wYm2JgdcHcLoVDkng48FZ82TlfwZNw8lCSC2L/0cUk8wxGUiXajzD6IB4yyels1I
wcj9dRcpzeLdOqj4wHBHS9B+w6qTozho841EeT+c/HqiSTEI3J6Yy9BjhFGcLqbW
kBLxrVZ4OmItMcPXL2ZWSfg+bAkMwNuh1kwhnuDYtVFfsHeKEoHL3f2Sxm8oqprt
fNYx2L9OJsb+QwDlGp+rgWwH021XHlUPItC/z+sfBna/Qo4lyuE9KdCAZhWdBMuh
56D/HZsV7vbqHxyqpCeH626dimPVicfikO475r2X0SeLSm/pD9Ywo9ACQwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFBV2iRzysdjsVsA7x6lt6Vig4AAyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzFiZjVm
YS1mNjliLTQxN2MtYmMwYi01ZDViYjdmZTU3MWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMWJmNWZh
LWY2OWItNDE3Yy1iYzBiLTVkNWJiN2ZlNTcxYS8xL0ZYYUpIUEt4Mk94V3dEdkhx
VzNwV0tEZ0FESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAw1/4MA8EAgACMAkDBwAgAQZ4DGAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDA0WXMA0GCSqGSIb3DQEBCwUAA4IBAQAIENI8kmhv
CFNXAkXMppsqmWRMmN6VV9qb3JrAPWvTUoXVmTxGf8tm/r4SScT2WRJluGoMxRqY
KbMijxY1RYhYsaWk3VXYL7I6M0AbR/8QFvWh9jpRFTOGdeDTXmRISvD38aXIurnq
pyGXy58zG0vUR4cHPVl4woksbKTxcWzHFUCXQDnm03DxKu4TqGLPp1cxus8aCSyj
cOof6ByT4npakqMDzYXWWstaY1vKkv1EsrFvFRWXx/tF8H4bVDXPb5Lm+UPLOX/G
84dI/0OjBhq/RXgDXVUr0ARxec5UjYOFRX6psWoFbT4sNGiVj+ZZ2qE3REJ9n7Za
poMb6nv4vI27
-----END CERTIFICATE-----