Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
File:                     Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer (raw, json)
Hash identifier:          av7w2Er60FN2aoZc/FByn0ZGdhSEnC+EGINmp9G4wSg=
Subject key identifier:   4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D7272DBED974C0B2533801CC8F6EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202462
                          IP: 194.113.240.0/23
                          IP: 2001:67c:97c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:72:72:db:ed:97:4c:0b:25:33:80:1c:c8:f6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:fa:5b:e6:4d:45:bf:6e:81:14:23:8e:b2:
                    c2:33:2a:71:f2:5d:7c:ef:06:01:df:40:49:67:75:
                    c8:6a:85:24:25:15:53:ef:34:b6:29:90:39:6a:6d:
                    c9:57:b1:94:83:84:6e:45:9c:93:2f:99:97:07:e1:
                    0f:6f:18:2d:15:fb:17:d5:1d:c6:67:a6:75:ba:5e:
                    53:f9:c7:d4:9b:e1:fa:3b:6e:90:dc:e6:10:9d:9d:
                    a0:dd:86:69:ab:61:f6:b6:ea:47:84:92:e4:cb:9f:
                    a4:2f:ea:7d:91:8f:f2:65:90:87:fd:6f:6f:13:67:
                    49:36:81:5b:13:b6:ff:cd:59:79:87:e0:a0:bb:af:
                    13:a9:3f:4e:07:2e:90:9e:25:45:61:b5:5f:27:08:
                    df:f9:43:62:f7:d0:24:23:6f:37:84:f0:99:a9:5f:
                    81:06:3f:74:94:be:68:0a:49:5d:4f:e0:98:67:46:
                    b0:99:7d:43:fd:64:c7:e8:ce:32:ba:3f:ea:d0:84:
                    7f:1b:8a:11:17:dc:e4:a6:a8:e0:9b:b3:31:90:26:
                    8c:57:24:02:08:a6:96:62:e7:e6:0a:72:e9:84:6b:
                    ff:2c:98:7f:cc:08:50:7e:74:63:91:ce:b6:1a:23:
                    39:c2:41:99:05:b2:e6:21:01:eb:e6:68:71:cd:b2:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.240.0/23
                IPv6:
                  2001:67c:97c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202462

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:ba:3d:75:18:09:32:be:70:11:2e:98:3e:32:5a:09:64:
         74:c3:0b:eb:0e:6f:d2:99:20:e5:b1:a0:41:60:14:17:df:f2:
         1d:e7:36:21:42:fc:ed:2d:1e:5a:09:ff:53:da:0d:3a:f4:1e:
         c1:8d:30:0f:af:6b:93:6e:4c:10:6d:67:8d:d3:dd:40:30:e4:
         f9:07:eb:57:ce:fc:1c:94:76:2c:4e:53:18:96:95:55:63:66:
         5e:e4:06:de:5e:90:1b:5f:d6:98:56:6d:be:29:c3:e6:38:51:
         62:5d:69:87:8e:42:91:45:79:6c:7c:4e:9b:0b:14:ce:46:d3:
         dd:59:39:1c:2d:fa:60:83:03:e9:9b:a4:eb:c4:ea:97:ba:5c:
         1e:84:af:c4:a4:6a:6f:f1:f2:5c:50:0b:3b:ce:9d:e1:49:bd:
         72:b3:5e:43:c2:85:73:99:0e:70:3f:3d:1e:28:82:b7:00:cb:
         dc:5f:fc:f1:2b:bc:24:e0:ad:3c:86:1d:85:2e:12:44:4b:e5:
         18:e9:ef:01:b1:7b:81:92:34:7e:2a:c7:f7:01:73:51:18:83:
         9d:ca:ac:c3:7d:85:29:1c:1f:3a:61:b9:b7:46:54:e7:e1:5b:
         28:31:91:85:9c:ec:52:00:36:2c:d2:35:89:06:fe:6f:cf:2f:
         bc:ee:39:24
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQijXJy2+2XTAslM4AcyPbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTRlMmNmMDAyZDQ1ZmY5YWRlMmFiODY0M2FkYmZlMDgzY2ExMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzD6W+ZNRb9ugRQjjrLCMypx8l18
7wYB30BJZ3XIaoUkJRVT7zS2KZA5am3JV7GUg4RuRZyTL5mXB+EPbxgtFfsX1R3G
Z6Z1ul5T+cfUm+H6O26Q3OYQnZ2g3YZpq2H2tupHhJLky5+kL+p9kY/yZZCH/W9v
E2dJNoFbE7b/zVl5h+Cgu68TqT9OBy6QniVFYbVfJwjf+UNi99AkI283hPCZqV+B
Bj90lL5oCkldT+CYZ0awmX1D/WTH6M4yuj/q0IR/G4oRF9zkpqjgm7MxkCaMVyQC
CKaWYufmCnLphGv/LJh/zAhQfnRjkc62GiM5wkGZBbLmIQHr5mhxzbJivwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEpOLPAC1F/5reKrhkOtv+CDyhLQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzMwODc5
Yy05NzY2LTRhMDUtYWRiZi05YWM4MWVmNDU5MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMzA4Nzlj
LTk3NjYtNGEwNS1hZGJmLTlhYzgxZWY0NTkyYy8xL1NrNHM4QUxVWF9tdDRxdUdR
NjJfNElQS0V0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBwnHwMA8EAgACMAkDBwAgAQZ8CXwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAxbeMA0GCSqGSIb3DQEBCwUAA4IBAQAhvLo9dRgJ
Mr5wES6YPjJaCWR0wwvrDm/SmSDlsaBBYBQX3/Id5zYhQvztLR5aCf9T2g069B7B
jTAPr2uTbkwQbWeN091AMOT5B+tXzvwclHYsTlMYlpVVY2Ze5AbeXpAbX9aYVm2+
KcPmOFFiXWmHjkKRRXlsfE6bCxTORtPdWTkcLfpggwPpm6TrxOqXulwehK/EpGpv
8fJcUAs7zp3hSb1ys15DwoVzmQ5wPz0eKIK3AMvcX/zxK7wk4K08hh2FLhJES+UY
6e8BsXuBkjR+Ksf3AXNRGIOdyqzDfYUpHB86Ybm3RlTn4VsoMZGFnOxSADYs0jWJ
Bv5vzy+87jkk
-----END CERTIFICATE-----