Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
File:                     Pznde9c8PhuifReNVcJvipbNtKk.cer (raw, json)
Hash identifier:          R6hyI7Bsa6Wsj/7u46QN2toYaGyYBbyulP6UDJJY8yY=
Subject key identifier:   3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942825B92BAF91308FC5546F623FC22BB4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198694
                          IP: 92.249.20.0/22
                          IP: 2a13:62c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:b9:2b:af:91:30:8f:c5:54:6f:62:3f:c2:2b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:58:2c:c7:ed:95:b7:94:85:87:22:9a:31:
                    53:bd:80:9b:7d:69:77:f2:01:f1:56:3d:ea:81:66:
                    79:3b:a8:d8:3e:0c:4f:df:9e:ef:c0:ec:5e:68:05:
                    2b:ff:e5:dc:64:49:d4:99:f6:24:94:2c:e0:c2:8e:
                    38:12:3d:9e:75:93:62:46:84:7d:eb:de:1a:e1:93:
                    da:4e:86:a2:51:b7:4d:66:98:2b:5e:a5:fa:26:dc:
                    42:f6:9b:b9:d0:45:c4:9c:5b:3a:6e:fa:2a:ed:02:
                    44:6d:a6:bd:a2:63:42:60:85:4b:3c:17:15:7b:e9:
                    5d:79:02:68:f3:b9:b4:cf:84:97:05:12:e6:12:79:
                    2b:38:15:ee:90:cc:aa:b6:10:be:61:b2:23:e7:aa:
                    3a:f3:3c:b6:fb:65:23:a8:9d:14:0f:02:55:dc:86:
                    b7:a8:9d:96:db:2d:24:a2:cf:54:32:8e:aa:3b:20:
                    b5:1c:0e:ec:2f:84:4d:3b:2d:aa:c0:f8:20:e9:bd:
                    75:c6:ef:2e:51:0b:38:24:c0:08:49:77:d4:2c:d5:
                    f3:68:eb:da:da:25:0b:5b:f5:fe:c0:4f:6f:1c:5c:
                    a3:1d:31:19:d5:37:21:f0:45:0d:b5:95:ae:bd:ec:
                    e7:34:9d:24:1a:67:7b:c7:77:ce:b3:64:5f:e4:54:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.20.0/22
                IPv6:
                  2a13:62c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198694

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:23:a5:c3:5a:c3:5a:fa:90:3d:4e:ec:1b:95:8d:29:58:
         0f:f7:1e:0e:04:9a:02:03:d4:ca:cd:7d:34:06:69:a9:2a:ee:
         16:35:32:7f:6e:0c:36:ef:5d:cb:44:9d:e5:77:a8:70:68:32:
         39:16:7d:5d:37:ea:69:53:32:13:9a:fd:42:9b:01:dc:7c:ba:
         fd:db:c9:d9:2d:d4:d0:29:b9:b8:62:80:19:93:db:19:27:96:
         db:b4:19:03:d2:4b:ff:78:ed:a2:b5:a3:ff:26:7f:7b:6c:b4:
         64:3a:04:cd:66:a3:a4:55:8b:2d:f9:81:a4:c6:a0:cc:ec:05:
         d9:08:80:b2:a5:50:46:f7:15:98:e3:c7:8f:0a:ac:a3:54:e4:
         96:68:fa:1b:b8:41:59:07:c2:f0:80:f2:86:45:94:8f:d3:34:
         c6:86:9e:67:a3:69:52:7b:36:1d:d2:a9:0e:68:99:ce:ac:49:
         22:96:bc:37:b8:0f:e2:b4:18:0f:7e:0b:40:b0:f5:61:75:cb:
         b2:7a:71:39:84:d8:bc:d3:50:73:6e:23:43:22:16:99:00:7c:
         22:7c:59:9c:91:28:7e:30:45:d0:c9:b8:7e:89:54:73:f7:68:
         56:80:c1:ae:da:84:2e:70:59:d8:69:c5:84:f6:31:2e:c0:af:
         29:77:f5:82
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQoJbkrr5Ewj8VUb2I/wiu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjM5ZGQ3YmQ3M2MzZTFiYTI3ZDE3OGQ1NWMyNmY4YTk2Y2RiNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWdYLMftlbeUhYcimjFTvYCbfWl3
8gHxVj3qgWZ5O6jYPgxP357vwOxeaAUr/+XcZEnUmfYklCzgwo44Ej2edZNiRoR9
694a4ZPaToaiUbdNZpgrXqX6JtxC9pu50EXEnFs6bvoq7QJEbaa9omNCYIVLPBcV
e+ldeQJo87m0z4SXBRLmEnkrOBXukMyqthC+YbIj56o68zy2+2UjqJ0UDwJV3Ia3
qJ2W2y0kos9UMo6qOyC1HA7sL4RNOy2qwPgg6b11xu8uUQs4JMAISXfULNXzaOva
2iULW/X+wE9vHFyjHTEZ1Tch8EUNtZWuveznNJ0kGmd7x3fOs2Rf5FQeywIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFD853XvXPD4bon0XjVXCb4qWzbSpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzYyMWVk
ZC0xYjVhLTQ2YWMtYmExMy0wNGY5ZTYxNmFmNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNjIxZWRk
LTFiNWEtNDZhYy1iYTEzLTA0ZjllNjE2YWY2MC8xL1B6bmRlOWM4UGh1aWZSZU5W
Y0p2aXBiTnRLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCXPkUMA0EAgACMAcDBQMqE2LAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMIJjANBgkqhkiG9w0BAQsFAAOCAQEAAv4jpcNaw1r6
kD1O7BuVjSlYD/ceDgSaAgPUys19NAZpqSruFjUyf24MNu9dy0Sd5XeocGgyORZ9
XTfqaVMyE5r9QpsB3Hy6/dvJ2S3U0Cm5uGKAGZPbGSeW27QZA9JL/3jtorWj/yZ/
e2y0ZDoEzWajpFWLLfmBpMagzOwF2QiAsqVQRvcVmOPHjwqso1Tklmj6G7hBWQfC
8IDyhkWUj9M0xoaeZ6NpUns2HdKpDmiZzqxJIpa8N7gP4rQYD34LQLD1YXXLsnpx
OYTYvNNQc24jQyIWmQB8InxZnJEofjBF0Mm4folUc/doVoDBrtqELnBZ2GnFhPYx
LsCvKXf1gg==
-----END CERTIFICATE-----