Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.cer (raw, json)
Hash identifier:          ZZj80bHxuO36dgoYjnexVszkSAzPCj5yeXTLnwMtBsQ=
Subject key identifier:   33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C119A8F95E0D4CF43171DFB1D864B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47698
                          IP: 91.206.174.0/23
                          IP: 91.208.103.0/24
                          IP: 2001:67c:394::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:11:9a:8f:95:e0:d4:cf:43:17:1d:fb:1d:86:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:14:dd:15:f8:58:4b:5c:db:01:d5:4b:73:
                    27:ec:86:79:ce:a3:b5:94:bf:95:49:c0:06:0d:0c:
                    49:af:ad:69:c2:65:c9:56:07:cc:e4:50:58:f2:27:
                    12:52:ac:2b:b1:de:12:ab:38:67:dc:e1:94:ec:6c:
                    cc:2f:a2:c7:9e:66:96:8c:a3:05:bd:68:f3:6f:92:
                    ba:43:83:78:11:8f:e2:d2:d4:33:2e:ce:78:7f:02:
                    cf:19:e6:72:94:a1:03:8d:f9:9a:90:a6:fb:51:4b:
                    7c:7c:39:9d:9e:e4:c0:62:17:b3:e0:0f:5e:31:ca:
                    f2:e4:e2:79:29:25:e1:18:b9:d6:88:ac:02:4a:32:
                    13:72:5c:52:06:48:f0:b1:d4:b9:3d:a3:80:b2:2f:
                    0c:e5:04:b4:91:f5:b0:6d:fb:d5:14:2b:c8:fd:88:
                    b3:94:5b:2d:b7:b5:45:b0:ca:1c:0b:0e:ca:1f:74:
                    f7:e7:41:1c:d2:9a:be:0e:5f:7b:ab:50:8c:f3:a0:
                    c0:a2:f4:f8:b3:62:36:33:e9:74:51:88:b7:2c:f2:
                    4a:98:68:2b:b0:c5:71:04:2f:bc:17:72:4d:d3:ff:
                    24:e5:e3:b0:c7:b3:37:2e:38:4d:81:e6:52:42:4f:
                    71:f2:b0:48:ba:6a:29:09:3e:e7:d8:2d:b9:c0:9f:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.174.0/23
                  91.208.103.0/24
                IPv6:
                  2001:67c:394::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47698

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:c8:63:7a:a7:2b:2a:d8:f7:6a:e2:39:dd:f0:1b:2d:fd:
         14:3d:68:5c:ae:7b:74:92:a7:e3:2c:f1:6a:e3:38:f6:ab:10:
         21:4e:ef:79:80:78:04:5d:6c:28:fa:eb:1a:f7:7d:9b:8b:f3:
         d8:38:79:18:f3:ce:6a:2e:3d:1e:83:24:23:a2:94:f2:2e:0b:
         af:9f:1b:c6:ff:71:4c:46:8c:ab:2d:38:b9:31:2f:79:60:a1:
         43:61:03:a3:c1:75:d2:6e:06:aa:ec:fa:b0:ee:7f:23:77:d0:
         09:41:0f:c0:af:07:c3:af:d5:4a:e8:c1:7a:81:3d:e3:65:23:
         ef:37:e8:8c:11:66:e1:2e:6c:21:cd:b3:e6:fb:50:62:f9:b1:
         27:7d:86:2c:fa:18:68:7b:48:26:51:0e:a4:84:65:9b:eb:51:
         29:03:a4:f3:e4:c8:f6:c2:94:db:92:a1:2d:e8:97:03:8d:36:
         f5:73:84:92:17:d5:a5:66:4f:d2:ad:ce:02:6f:7f:c4:e8:ef:
         a4:4e:5b:6b:a5:93:96:1c:04:e9:8b:cb:a1:c4:f1:ad:0d:45:
         87:01:bb:51:8d:48:2b:72:31:c3:a4:f9:06:a9:0e:47:c8:14:
         1c:2f:10:2c:7b:53:6f:b2:99:b2:05:6c:63:46:28:55:ce:d2:
         b6:e9:c5:b3
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZQfjBGaj5Xg1M9DFx37HYZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzcxMGNmODFkMjE3NzdhOThkM2Q5OTlkYzFlNmVhZTA1NWY3YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWIU3RX4WEtc2wHVS3Mn7IZ5zqO1
lL+VScAGDQxJr61pwmXJVgfM5FBY8icSUqwrsd4Sqzhn3OGU7GzML6LHnmaWjKMF
vWjzb5K6Q4N4EY/i0tQzLs54fwLPGeZylKEDjfmakKb7UUt8fDmdnuTAYhez4A9e
Mcry5OJ5KSXhGLnWiKwCSjITclxSBkjwsdS5PaOAsi8M5QS0kfWwbfvVFCvI/Yiz
lFstt7VFsMocCw7KH3T350Ec0pq+Dl97q1CM86DAovT4s2I2M+l0UYi3LPJKmGgr
sMVxBC+8F3JN0/8k5eOwx7M3LjhNgeZSQk9x8rBIumopCT7n2C25wJ+xUQIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFDNxDPgdIXd6mNPZmdwebq4FX3w8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzM5Njcw
OS0yMGUxLTRmN2QtOTYzZS0zYjVlODNmNjI2ZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMzk2NzA5
LTIwZTEtNGY3ZC05NjNlLTNiNWU4M2Y2MjZlMy8xL00zRU0tQjBoZDNxWTA5bVoz
QjV1cmdWZmZEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQBW86uAwQAW9BnMA8EAgACMAkDBwAgAQZ8A5Qw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALpSMA0GCSqGSIb3DQEBCwUAA4IBAQAc
J8hjeqcrKtj3auI53fAbLf0UPWhcrnt0kqfjLPFq4zj2qxAhTu95gHgEXWwo+usa
932bi/PYOHkY885qLj0egyQjopTyLguvnxvG/3FMRoyrLTi5MS95YKFDYQOjwXXS
bgaq7Pqw7n8jd9AJQQ/ArwfDr9VK6MF6gT3jZSPvN+iMEWbhLmwhzbPm+1Bi+bEn
fYYs+hhoe0gmUQ6khGWb61EpA6Tz5Mj2wpTbkqEt6JcDjTb1c4SSF9WlZk/Src4C
b3/E6O+kTltrpZOWHATpi8uhxPGtDUWHAbtRjUgrcjHDpPkGqQ5HyBQcLxAse1Nv
spmyBWxjRihVztK26cWz
-----END CERTIFICATE-----