Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
File:                     NVyaW8uDQBCKQchiduHLlKYefak.cer (raw, json)
Hash identifier:          RLcDwED0pneTBkiQpQStvuBsrkGgp1lDeHxPS3fkIwg=
Subject key identifier:   35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC7453E613E35394935AB168A5DE29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211175
                          IP: 185.95.67.0/24
                          IP: 2a0d:68c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:74:53:e6:13:e3:53:94:93:5a:b1:68:a5:de:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:69:be:91:3d:18:d8:31:30:06:99:8d:76:
                    31:dc:1d:15:cb:cc:a6:c4:dd:7a:bf:a8:7d:b2:fb:
                    28:8f:59:2a:cf:5f:fa:e5:ad:e1:fa:31:f5:41:12:
                    7b:1e:61:fe:3c:8f:0b:71:3f:ce:4b:c4:5f:2c:27:
                    9a:e4:2b:16:0f:a3:ea:a5:a7:c6:3a:b6:f5:a4:95:
                    76:e2:41:28:3d:f6:16:df:e7:2e:60:4c:56:ba:54:
                    4d:6e:5c:9e:f6:01:8c:2c:86:18:cf:7b:d6:97:42:
                    44:82:a9:7c:41:90:9a:28:1d:ac:a0:d1:5a:0c:dc:
                    bd:7b:57:b4:8d:9b:4f:31:40:66:a8:7f:7f:b0:15:
                    c3:fb:77:fa:ac:06:c5:ae:31:24:26:f2:f5:c9:8f:
                    71:2d:d9:40:ad:d8:a1:5a:75:c7:3f:18:0e:00:a9:
                    b2:e3:7a:ea:4d:a2:f6:a6:16:4c:7a:81:99:7e:c5:
                    de:78:9c:47:b6:a2:f9:21:c7:1b:da:09:b7:40:61:
                    0d:2f:7c:30:7b:3a:72:c0:d7:b2:7f:79:29:37:16:
                    dd:41:a7:af:32:47:6b:4a:2a:a6:ba:97:0b:03:23:
                    59:4e:72:93:fc:5f:3a:13:7f:d4:e4:92:e5:c5:99:
                    db:fe:0f:c5:3a:86:c7:f9:9d:68:3b:6e:8e:ff:ed:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.95.67.0/24
                IPv6:
                  2a0d:68c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211175

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:b2:26:cf:49:f2:c3:8a:85:15:52:49:4b:a3:44:d6:1f:
         00:cc:c3:d3:2b:a3:94:35:43:70:26:51:67:4a:b3:e8:0b:e0:
         7d:de:00:9d:87:6f:03:5e:6d:cc:bf:a9:46:1f:9e:a3:ee:de:
         9f:97:a2:25:5d:5f:40:67:51:8c:75:51:e8:0c:ad:c8:0d:ae:
         96:41:8a:c6:e9:6e:8b:56:64:56:f7:72:65:5b:bd:a4:f2:cf:
         d6:8b:41:8b:e7:de:e6:d7:b5:1e:50:d9:5a:3e:a1:06:99:3b:
         e6:4e:af:92:8b:2d:25:a4:db:1c:52:54:4c:b3:5b:a6:17:be:
         87:2b:ad:4e:12:ae:b8:08:c3:85:4c:e9:ea:b8:a9:d5:92:d3:
         f2:5a:0a:b9:66:ff:5a:7e:2d:2d:43:80:39:34:0e:33:57:14:
         68:b8:22:98:f4:94:3d:93:c4:2a:12:ce:12:cc:73:c5:d8:4b:
         0d:df:20:c1:19:4d:38:e9:ea:6d:e5:a1:dd:60:fd:fe:26:6e:
         e5:35:cf:35:52:a0:ea:b0:f9:9c:9d:08:22:d0:8f:04:55:60:
         93:c9:f7:6c:f1:63:e4:eb:03:2a:05:d4:ef:fd:0b:0a:71:51:
         0b:04:6a:a5:ec:51:a8:52:c2:2c:6a:83:45:ec:8e:16:e8:ad:
         73:53:6c:3a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/HRT5hPjU5STWrFopd4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTVjOWE1YmNiODM0MDEwOGE0MWM4NjI3NmUxY2I5NGE2MWU3ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42NpvpE9GNgxMAaZjXYx3B0Vy8ym
xN16v6h9svsoj1kqz1/65a3h+jH1QRJ7HmH+PI8LcT/OS8RfLCea5CsWD6PqpafG
Orb1pJV24kEoPfYW3+cuYExWulRNblye9gGMLIYYz3vWl0JEgql8QZCaKB2soNFa
DNy9e1e0jZtPMUBmqH9/sBXD+3f6rAbFrjEkJvL1yY9xLdlArdihWnXHPxgOAKmy
43rqTaL2phZMeoGZfsXeeJxHtqL5Iccb2gm3QGENL3wwezpywNeyf3kpNxbdQaev
MkdrSiqmupcLAyNZTnKT/F86E3/U5JLlxZnb/g/FOobH+Z1oO26O/+2ZGwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDVcmlvLg0AQikHIYnbhy5SmHn2pMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzNmNDI2
Zi03OWVlLTRjYjItYWIxNy0zMGQ2NGZmNzBiOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvM2Y0MjZm
LTc5ZWUtNGNiMi1hYjE3LTMwZDY0ZmY3MGI5MC8xL05WeWFXOHVEUUJDS1FjaGlk
dUhMbEtZZWZhay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuV9DMA0EAgACMAcDBQMqDWjAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM45zANBgkqhkiG9w0BAQsFAAOCAQEAXkuyJs9J8sOK
hRVSSUujRNYfAMzD0yujlDVDcCZRZ0qz6Avgfd4AnYdvA15tzL+pRh+eo+7en5ei
JV1fQGdRjHVR6AytyA2ulkGKxului1ZkVvdyZVu9pPLP1otBi+fe5te1HlDZWj6h
Bpk75k6vkostJaTbHFJUTLNbphe+hyutThKuuAjDhUzp6rip1ZLT8loKuWb/Wn4t
LUOAOTQOM1cUaLgimPSUPZPEKhLOEsxzxdhLDd8gwRlNOOnqbeWh3WD9/iZu5TXP
NVKg6rD5nJ0IItCPBFVgk8n3bPFj5OsDKgXU7/0LCnFRCwRqpexRqFLCLGqDReyO
Fuitc1NsOg==
-----END CERTIFICATE-----