Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
File:                     LWNPtoGAIUTwZMGxnxH2qudZbc8.cer (raw, json)
Hash identifier:          F6YqhS+meIv5Z3QT2pAb134yQYJ9U7cUdDBIuna9fjs=
Subject key identifier:   2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD363A6C0A39D034D539E45F4BF114
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203358
                          IP: 185.253.59.0/24
                          IP: 2a12:c140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:36:3a:6c:0a:39:d0:34:d5:39:e4:5f:4b:f1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:15:98:c4:96:4b:72:85:2d:ba:41:5c:5f:
                    f9:5c:8a:a2:a8:c5:7d:08:ce:a1:c8:d7:3e:85:ee:
                    87:eb:3f:14:c7:ab:d8:b7:b5:31:2d:ff:ef:f1:15:
                    de:ac:4c:b6:4c:12:c6:a3:f9:a0:8e:40:83:78:6e:
                    0e:3f:e5:63:9a:45:8d:12:fb:b6:3f:d6:cc:b8:d3:
                    89:ab:3b:8c:6d:24:00:ce:38:9b:3f:4e:ff:c7:5c:
                    0e:cc:e7:43:27:c4:fb:78:6e:15:fc:0b:60:4c:6c:
                    f9:c1:74:dc:9e:fc:39:6e:a9:74:38:7b:cb:71:85:
                    fb:fc:1a:86:e1:64:36:e8:21:5a:b8:fb:cd:16:cd:
                    46:ce:b7:da:9b:cd:5f:3d:ec:7d:18:06:64:c1:f3:
                    af:aa:b1:0d:4e:98:70:4b:b7:d8:27:27:66:e0:2a:
                    61:bd:f3:89:5d:38:63:ab:07:2e:fe:67:e1:0d:cc:
                    b5:0a:dc:a9:c2:9d:56:bc:45:4e:e1:94:ac:40:7b:
                    47:32:b2:70:99:03:fb:be:21:0a:b4:41:94:e3:5b:
                    51:0d:77:94:ab:2f:05:23:01:3c:92:7c:f9:1f:95:
                    55:4a:ac:c2:4b:fb:ea:e0:ce:d7:48:70:13:cb:c0:
                    12:05:0a:22:3a:f0:1e:40:cb:ec:fd:2e:9b:c0:b7:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.59.0/24
                IPv6:
                  2a12:c140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203358

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:b6:e7:e5:92:8e:f2:0e:7f:72:0e:ef:87:05:53:ad:7c:
         f7:21:77:9e:07:cd:5b:a3:6c:61:5f:a3:18:15:ea:ca:96:5b:
         1f:4d:a3:a7:0d:ee:86:4e:1f:75:6d:0e:46:e9:86:c2:02:11:
         73:7c:8e:35:94:44:cc:72:cc:ee:b0:c8:0b:1d:7c:2a:1c:5c:
         ad:27:fb:4f:b9:99:53:53:b3:8f:7c:4a:27:81:6e:aa:19:8b:
         9e:41:84:dd:4d:ee:e1:ac:35:aa:60:de:71:8e:d7:ac:eb:eb:
         31:f7:3c:1b:36:0b:73:56:91:7e:aa:2c:51:ff:f4:3b:c9:27:
         bd:c8:69:dd:ee:fd:77:cc:4f:65:94:5a:ef:30:11:99:bd:c4:
         ba:a2:7d:ed:22:ea:5d:6e:60:3a:84:fc:22:e4:2c:0a:95:14:
         ee:5a:3a:82:a2:6f:b5:25:1e:05:c5:12:ab:b7:d4:43:66:c1:
         53:f3:00:7d:8a:67:b6:57:ac:60:47:20:be:f0:6b:81:d5:48:
         cb:d5:d4:6a:12:97:6b:91:78:ac:a4:02:42:11:b7:5b:3b:d5:
         bb:16:e0:b7:af:49:0b:78:38:3f:db:e5:aa:48:53:78:3e:1f:
         a2:6d:8f:f4:2b:01:54:b4:d3:50:48:54:cc:bb:ee:e9:96:ed:
         94:f3:92:aa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/TY6bAo50DTVOeRfS/EUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDYzNGZiNjgxODAyMTQ0ZjA2NGMxYjE5ZjExZjZhYWU3NTk2ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZgVmMSWS3KFLbpBXF/5XIqiqMV9
CM6hyNc+he6H6z8Ux6vYt7UxLf/v8RXerEy2TBLGo/mgjkCDeG4OP+VjmkWNEvu2
P9bMuNOJqzuMbSQAzjibP07/x1wOzOdDJ8T7eG4V/AtgTGz5wXTcnvw5bql0OHvL
cYX7/BqG4WQ26CFauPvNFs1Gzrfam81fPex9GAZkwfOvqrENTphwS7fYJydm4Cph
vfOJXThjqwcu/mfhDcy1Ctypwp1WvEVO4ZSsQHtHMrJwmQP7viEKtEGU41tRDXeU
qy8FIwE8knz5H5VVSqzCS/vq4M7XSHATy8ASBQoiOvAeQMvs/S6bwLcEJQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFC1jT7aBgCFE8GTBsZ8R9qrnWW3PMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2JhMTk4
Ny01MjJlLTQ5OGMtYTM1OS03NmEwZjdiODQxZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvYmExOTg3
LTUyMmUtNDk4Yy1hMzU5LTc2YTBmN2I4NDFkYy8xL0xXTlB0b0dBSVVUd1pNR3hu
eEgycXVkWmJjOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuf07MA0EAgACMAcDBQMqEsFAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaXjANBgkqhkiG9w0BAQsFAAOCAQEAh3y25+WSjvIO
f3IO74cFU6189yF3ngfNW6NsYV+jGBXqypZbH02jpw3uhk4fdW0ORumGwgIRc3yO
NZREzHLM7rDICx18KhxcrSf7T7mZU1Ozj3xKJ4FuqhmLnkGE3U3u4aw1qmDecY7X
rOvrMfc8GzYLc1aRfqosUf/0O8knvchp3e79d8xPZZRa7zARmb3EuqJ97SLqXW5g
OoT8IuQsCpUU7lo6gqJvtSUeBcUSq7fUQ2bBU/MAfYpntlesYEcgvvBrgdVIy9XU
ahKXa5F4rKQCQhG3WzvVuxbgt69JC3g4P9vlqkhTeD4fom2P9CsBVLTTUEhUzLvu
6ZbtlPOSqg==
-----END CERTIFICATE-----