Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
File:                     ORxdMzEUXsjicYdvgEIge50Ay2Q.cer (raw, json)
Hash identifier:          KBz5VXXVN7q2gfYKFBB99rmbFYBC9k3ObD1G2pAmHwg=
Subject key identifier:   39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428237F3154283048D9E930500DB87233
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204352
                          IP: 185.249.104.0/22
                          IP: 2a0c:1c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:7f:31:54:28:30:48:d9:e9:30:50:0d:b8:72:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=391c5d3331145ec8e271876f8042207b9d00cb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:91:5d:90:91:33:18:53:85:0c:79:65:12:
                    27:1a:54:e0:a9:57:71:05:9b:2e:0a:cf:1d:73:0b:
                    14:f7:ed:63:6d:c3:06:43:97:ef:47:ea:9a:20:11:
                    af:95:22:dd:33:14:c4:d4:4e:55:3f:8d:0b:dc:52:
                    fd:c3:f3:90:05:81:29:a1:38:fa:ad:58:c0:1a:38:
                    bb:a0:31:87:44:b4:64:d0:96:22:a1:6a:57:21:2c:
                    21:8d:38:41:2b:33:60:29:67:48:83:c8:25:ee:56:
                    4f:cc:d3:d2:17:b6:43:e3:25:1f:64:74:d7:b8:f9:
                    fd:36:a2:55:fc:9b:82:c1:bc:d7:7a:d4:34:01:05:
                    b4:ca:4d:ce:5d:c8:0a:2b:93:94:da:17:ae:0c:6b:
                    67:63:b7:83:41:2d:35:94:40:70:1e:3a:2c:ae:bf:
                    fc:d1:ce:2c:81:4d:71:e0:9f:aa:57:cf:95:a2:82:
                    60:d7:ef:0b:8f:57:53:c9:27:24:8d:40:de:d9:29:
                    d1:89:e5:cd:0a:4c:8f:5e:04:32:80:d3:81:fb:42:
                    64:b1:ac:68:41:7c:ca:e5:2f:57:92:fd:fa:fb:86:
                    57:e4:f2:9e:77:ad:29:77:f4:64:8d:b1:41:ba:33:
                    32:ae:e2:34:5b:ab:ce:52:41:8a:7c:fe:03:ce:76:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.104.0/22
                IPv6:
                  2a0c:1c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204352

    Signature Algorithm: sha256WithRSAEncryption
         a3:81:cd:2a:04:24:91:ba:92:12:3a:9a:55:06:1d:93:4f:cd:
         34:a6:56:87:be:0d:6e:e4:c9:76:4a:dd:bc:f6:87:80:69:aa:
         e4:ea:a9:e4:0f:ab:83:d4:55:80:25:f7:6f:5f:de:21:9e:fb:
         27:d8:e3:37:81:84:ac:c2:41:46:e1:74:fe:dc:87:11:7d:33:
         29:1e:57:ac:38:14:d0:dc:cf:5b:e8:bc:6f:f7:95:61:03:7e:
         81:bb:ec:bb:31:be:c9:0e:86:41:f1:15:ae:7d:c3:5e:30:a1:
         a8:63:d2:79:12:81:19:24:b0:2a:89:51:a7:f7:21:08:3a:00:
         fe:3c:ec:23:e3:6f:56:7f:52:af:80:c9:50:ef:d4:c1:d1:1a:
         e9:f1:42:b7:42:80:92:57:02:d9:f7:a4:42:7b:8f:a7:a6:6f:
         8e:33:bd:0b:82:72:da:81:86:77:a9:21:7c:88:ed:71:48:8e:
         53:a2:4a:4f:d3:09:8b:3b:87:e4:69:5c:09:33:ba:46:70:b7:
         29:84:8d:b6:ae:06:11:9c:4c:7b:79:d6:19:8e:8a:9c:e9:31:
         b8:50:16:6a:97:78:57:46:f0:05:04:c0:9d:2e:a0:a8:d6:62:
         e5:70:23:6b:ff:cb:a6:3b:e6:4a:e9:f0:4a:d9:f3:b1:34:6e:
         3d:19:7f:c7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQoI38xVCgwSNnpMFANuHIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFjNWQzMzMxMTQ1ZWM4ZTI3MTg3NmY4MDQyMjA3YjlkMDBjYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZyRXZCRMxhThQx5ZRInGlTgqVdx
BZsuCs8dcwsU9+1jbcMGQ5fvR+qaIBGvlSLdMxTE1E5VP40L3FL9w/OQBYEpoTj6
rVjAGji7oDGHRLRk0JYioWpXISwhjThBKzNgKWdIg8gl7lZPzNPSF7ZD4yUfZHTX
uPn9NqJV/JuCwbzXetQ0AQW0yk3OXcgKK5OU2heuDGtnY7eDQS01lEBwHjosrr/8
0c4sgU1x4J+qV8+VooJg1+8Lj1dTySckjUDe2SnRieXNCkyPXgQygNOB+0Jksaxo
QXzK5S9Xkv36+4ZX5PKed60pd/RkjbFBujMyruI0W6vOUkGKfP4DznYd8QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDkcXTMxFF7I4nGHb4BCIHudAMtkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzA1ODYy
NC1kZTc3LTQyMjQtYjU0MC1jYTMzNTBlNzYwY2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvMDU4NjI0
LWRlNzctNDIyNC1iNTQwLWNhMzM1MGU3NjBjYi8xL09SeGRNekVVWHNqaWNZZHZn
RUlnZTUwQXkyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufloMA0EAgACMAcDBQMqDAHAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMeQDANBgkqhkiG9w0BAQsFAAOCAQEAo4HNKgQkkbqS
EjqaVQYdk0/NNKZWh74NbuTJdkrdvPaHgGmq5Oqp5A+rg9RVgCX3b1/eIZ77J9jj
N4GErMJBRuF0/tyHEX0zKR5XrDgU0NzPW+i8b/eVYQN+gbvsuzG+yQ6GQfEVrn3D
XjChqGPSeRKBGSSwKolRp/chCDoA/jzsI+NvVn9Sr4DJUO/UwdEa6fFCt0KAklcC
2fekQnuPp6ZvjjO9C4Jy2oGGd6khfIjtcUiOU6JKT9MJizuH5GlcCTO6RnC3KYSN
tq4GEZxMe3nWGY6KnOkxuFAWapd4V0bwBQTAnS6gqNZi5XAja//LpjvmSunwStnz
sTRuPRl/xw==
-----END CERTIFICATE-----