Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.cer (raw, json)
Hash identifier:          yQ3c11dMBm3Lu9kGiaefhiFc3V7jpGdph9ITpRdEFh4=
Subject key identifier:   4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420681F94CCF0A74EC4BE514E32AF3A15
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50578
                          IP: 91.238.50.0/24
                          IP: 2001:678:260::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:1f:94:cc:f0:a7:4e:c4:be:51:4e:32:af:3a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:4b:db:51:e3:20:cc:19:05:34:1b:89:e1:
                    86:3e:ee:f1:fa:65:1b:4d:40:01:df:68:d8:f5:f1:
                    37:32:f1:08:2e:ee:e5:73:52:c1:07:af:f0:3d:78:
                    c3:67:09:10:2c:97:43:db:15:43:e3:7f:ee:bb:fd:
                    a3:b8:52:f0:30:44:6f:d9:ad:36:35:e7:10:14:8d:
                    ef:f3:a1:3f:f7:eb:52:70:21:4b:ca:ee:a8:ca:a9:
                    c4:80:68:55:55:a0:f4:de:55:98:dc:06:df:69:75:
                    a3:48:3c:e2:bb:04:07:81:52:bd:7f:53:d0:ea:1a:
                    2b:7e:08:65:db:12:09:ca:4d:7f:5a:8c:6c:bc:87:
                    6d:c7:f0:df:21:df:83:4f:77:5e:dd:3d:9d:b9:b7:
                    30:4f:42:43:50:3b:81:13:5b:f9:ad:4a:85:9d:bd:
                    7c:e3:43:ce:78:09:3f:9b:89:da:b0:bc:1d:5e:8a:
                    b3:71:0d:14:c5:88:7f:f5:1f:6e:dc:a0:8f:72:a5:
                    3c:79:29:0f:0b:7a:90:27:a8:bf:3e:25:48:be:b8:
                    00:2e:ae:3c:09:8f:d9:09:5e:6d:d9:17:ea:fc:4c:
                    d7:7d:fa:12:f6:02:a7:d2:5f:f2:11:91:e1:d5:ed:
                    3d:cd:f8:71:6c:22:0b:71:2d:8b:88:0d:f3:6f:88:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.50.0/24
                IPv6:
                  2001:678:260::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50578

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:a0:16:34:35:a8:3d:eb:a0:cc:24:92:e5:52:82:bd:11:
         bc:25:b0:99:8f:98:0d:46:0d:21:40:be:7b:56:16:ea:33:f1:
         cd:ff:56:68:ee:2c:7b:d5:f1:ae:e6:b3:a5:cc:c7:c9:70:df:
         e9:45:48:8d:a0:48:25:65:82:2f:e4:51:e3:7d:70:f6:3c:62:
         9d:17:db:1e:45:bd:5c:e2:0e:d7:b6:47:45:32:2f:4b:8a:18:
         fc:44:2f:3a:ac:af:b8:e7:15:26:f5:79:fb:43:84:f2:86:7a:
         e6:a2:72:b7:bd:ad:99:ae:6b:a4:f5:aa:35:45:10:1b:69:4a:
         80:ef:de:05:df:7d:24:ab:37:20:19:bb:47:d1:49:a9:b9:4b:
         5d:0f:7e:5a:0e:a0:4f:61:11:2d:ae:55:8c:99:3d:d5:74:ca:
         78:41:6c:d7:59:9d:a5:57:bb:00:7e:8f:ca:ac:1c:4c:48:71:
         75:b8:db:f3:f8:88:7e:74:bb:c3:8d:ba:ee:d1:0f:91:32:75:
         16:bf:ff:93:6d:d3:72:db:db:02:3c:84:e7:f3:ae:73:cc:c0:
         70:76:eb:4c:3b:fd:64:84:f2:8d:8e:31:a3:59:b3:03:40:01:
         b3:c3:80:0b:5e:e3:cb:d7:40:1e:dc:3d:eb:fb:23:37:ab:f1:
         29:d6:88:31
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQgaB+UzPCnTsS+UU4yrzoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI5NTJlZDFjZDdhMzgwM2NmNGRiZmQzNDBlYTc0OTYzMjY4YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJL21HjIMwZBTQbieGGPu7x+mUb
TUAB32jY9fE3MvEILu7lc1LBB6/wPXjDZwkQLJdD2xVD43/uu/2juFLwMERv2a02
NecQFI3v86E/9+tScCFLyu6oyqnEgGhVVaD03lWY3AbfaXWjSDziuwQHgVK9f1PQ
6horfghl2xIJyk1/WoxsvIdtx/DfId+DT3de3T2dubcwT0JDUDuBE1v5rUqFnb18
40POeAk/m4nasLwdXoqzcQ0UxYh/9R9u3KCPcqU8eSkPC3qQJ6i/PiVIvrgALq48
CY/ZCV5t2Rfq/EzXffoS9gKn0l/yEZHh1e09zfhxbCILcS2LiA3zb4gADQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFE25Uu0c16OAPPTb/TQOp0ljJougMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2M0ZjJl
Mi0wMTg4LTRhNDMtODUwMy1kMjYwMWNjMTIzNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYzRmMmUy
LTAxODgtNGE0My04NTAzLWQyNjAxY2MxMjM3Ny8xL1RibFM3UnpYbzRBODlOdjlO
QTZuU1dNbWk2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW+4yMA8EAgACMAkDBwAgAQZ4AmAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAMWSMA0GCSqGSIb3DQEBCwUAA4IBAQBDu6AWNDWo
PeugzCSS5VKCvRG8JbCZj5gNRg0hQL57VhbqM/HN/1Zo7ix71fGu5rOlzMfJcN/p
RUiNoEglZYIv5FHjfXD2PGKdF9seRb1c4g7XtkdFMi9Lihj8RC86rK+45xUm9Xn7
Q4TyhnrmonK3va2Zrmuk9ao1RRAbaUqA794F330kqzcgGbtH0UmpuUtdD35aDqBP
YREtrlWMmT3VdMp4QWzXWZ2lV7sAfo/KrBxMSHF1uNvz+Ih+dLvDjbru0Q+RMnUW
v/+TbdNy29sCPITn865zzMBwdutMO/1khPKNjjGjWbMDQAGzw4ALXuPL10Ae3D3r
+yM3q/Ep1ogx
-----END CERTIFICATE-----