Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.cer (raw, json)
Hash identifier:          DYeu2/qgT5flt+mkxk7iDp6F7Y2+Gvy6SUzPmjx5ybc=
Subject key identifier:   3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5C8F22A813315B2B5BC8824A35CD3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206350
                          IP: 185.186.204.0/22
                          IP: 2a0b:d580::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c8:f2:2a:81:33:15:b2:b5:bc:88:24:a3:5c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:f9:42:20:e9:6a:ac:e5:cd:f9:a7:20:b9:
                    e2:b1:0c:3a:63:e5:9b:80:91:b0:3a:fd:27:f6:d9:
                    a7:bd:e9:c0:de:5e:24:e8:f4:15:ea:5b:d3:ac:60:
                    85:06:ba:b9:92:39:75:9a:a5:b4:f1:6e:64:40:cf:
                    7a:4a:5e:c1:d4:4b:0a:77:83:c2:b2:b9:a6:e5:5b:
                    8e:65:bf:8b:67:59:8b:d8:c0:07:31:35:f2:a5:e5:
                    9a:07:e0:75:8e:68:49:f0:74:e7:f5:0f:d2:04:5a:
                    d8:c0:20:5b:0e:72:ae:a5:43:b3:c7:11:d0:a6:ac:
                    fa:dd:f7:b7:3f:ab:a2:25:8c:73:24:25:85:c9:29:
                    22:25:1b:c5:8b:e9:d1:22:5d:3e:e8:f5:b1:8f:ab:
                    4f:9c:ac:a7:5c:42:5a:00:90:74:b0:c3:fe:ca:69:
                    ab:cb:7c:81:44:7c:a4:d3:e2:fb:42:f0:42:3f:ff:
                    e6:18:62:e4:cd:53:2c:8a:c5:7a:6d:53:4f:97:4a:
                    6a:d7:89:6b:3a:65:7b:b7:86:45:1b:2f:01:ba:c5:
                    d6:58:0a:35:3c:d1:84:c5:b0:d1:72:b2:7d:e1:72:
                    cc:c9:cd:fe:3f:3c:ac:75:37:82:99:c3:a5:78:f8:
                    d8:41:7e:de:74:d3:2f:99:ee:d7:93:2a:0c:3f:b6:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.204.0/22
                IPv6:
                  2a0b:d580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206350

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:9e:ef:a2:9c:84:ce:88:7e:c2:2b:53:a6:c1:b3:e5:cc:
         c6:13:68:af:d6:87:f5:ed:bb:ba:fb:2c:8d:e5:b4:13:69:8f:
         02:e7:a0:8f:b5:a6:ee:d4:07:e4:72:3a:1b:48:dc:3e:42:39:
         7b:7c:74:31:f0:8e:0e:fa:f2:cb:8b:6d:3c:97:9b:09:a5:b4:
         ab:48:7d:6e:1c:a9:26:1e:53:60:1e:9a:04:f9:d8:73:47:99:
         91:f4:12:17:45:58:19:8c:40:03:79:ec:7d:58:fd:4f:1b:54:
         0e:ed:2c:53:8c:b8:9d:78:15:96:03:87:41:14:9b:c3:34:5f:
         8b:d5:60:f9:0c:a5:69:64:9a:fc:63:79:2d:dc:17:4b:21:a0:
         0a:a8:50:f4:14:4d:6a:e5:ff:0f:8e:24:77:ad:64:ca:1d:3c:
         e9:66:c8:ab:22:83:93:53:ea:2a:e4:92:7f:d3:dd:2b:c9:37:
         2b:bb:bf:de:cf:be:25:14:7b:cc:33:5f:c8:fa:d5:a9:97:53:
         22:16:2c:42:17:7f:8b:f3:d6:7e:1f:41:6c:ce:6c:c7:23:fa:
         82:32:fb:9b:76:88:da:f8:2a:66:dd:d5:9a:fd:52:d0:26:fc:
         08:ad:46:c4:8a:b8:3a:b2:5c:50:78:c1:35:f4:99:77:c4:6e:
         0b:53:1c:35
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1cjyKoEzFbK1vIgko1zTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjBjZDQ0ZWJiZTNkMGQ2YTA3MmU3NTEwM2YyMzE2MDY5OTVmNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l75QiDpaqzlzfmnILnisQw6Y+Wb
gJGwOv0n9tmnvenA3l4k6PQV6lvTrGCFBrq5kjl1mqW08W5kQM96Sl7B1EsKd4PC
srmm5VuOZb+LZ1mL2MAHMTXypeWaB+B1jmhJ8HTn9Q/SBFrYwCBbDnKupUOzxxHQ
pqz63fe3P6uiJYxzJCWFySkiJRvFi+nRIl0+6PWxj6tPnKynXEJaAJB0sMP+ymmr
y3yBRHyk0+L7QvBCP//mGGLkzVMsisV6bVNPl0pq14lrOmV7t4ZFGy8BusXWWAo1
PNGExbDRcrJ94XLMyc3+PzysdTeCmcOlePjYQX7edNMvme7XkyoMP7ZppwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDsM1E6749DWoHLnUQPyMWBplfarMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzk3MWYw
OC1lNTdjLTQwOGEtYjc3Ni1mN2RhM2I4NzMyYmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvOTcxZjA4
LWU1N2MtNDA4YS1iNzc2LWY3ZGEzYjg3MzJiZi8xL093elVUcnZqME5hZ2N1ZFJB
X0l4WUdtVjlxcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubrMMA0EAgACMAcDBQMqC9WAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMmDjANBgkqhkiG9w0BAQsFAAOCAQEAl4+e76KchM6I
fsIrU6bBs+XMxhNor9aH9e27uvssjeW0E2mPAuegj7Wm7tQH5HI6G0jcPkI5e3x0
MfCODvryy4ttPJebCaW0q0h9bhypJh5TYB6aBPnYc0eZkfQSF0VYGYxAA3nsfVj9
TxtUDu0sU4y4nXgVlgOHQRSbwzRfi9Vg+QylaWSa/GN5LdwXSyGgCqhQ9BRNauX/
D44kd61kyh086WbIqyKDk1PqKuSSf9PdK8k3K7u/3s++JRR7zDNfyPrVqZdTIhYs
Qhd/i/PWfh9BbM5sxyP6gjL7m3aI2vgqZt3Vmv1S0Cb8CK1GxIq4OrJcUHjBNfSZ
d8RuC1McNQ==
-----END CERTIFICATE-----