Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
File:                     U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer (raw, json)
Hash identifier:          qs3T1EG082TRibQzeaaFUeBEy1TMcbS3JNKYUbfSfBQ=
Subject key identifier:   53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443C190FE5B03349F5E1B7A39E22B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.16.132.0/22
                          IP: 185.77.160.0/22
                          IP: 2a03:d740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3c:19:0f:e5:b0:33:49:f5:e1:b7:a3:9e:22:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:e1:68:6d:03:f8:e7:a8:5c:46:12:4b:03:
                    23:8a:29:0c:1f:e9:91:73:03:7d:d1:b1:8e:f9:ee:
                    1c:7f:9c:7c:85:11:20:80:61:de:05:81:13:e5:4c:
                    8c:3a:c9:a9:1d:d4:f3:f7:92:f7:0a:e5:87:c6:2f:
                    3e:60:8a:a1:dc:de:41:c4:36:21:bc:c4:a8:d2:9b:
                    c7:39:11:df:34:2f:25:f7:1b:b5:54:bb:9b:10:80:
                    cc:70:34:09:65:20:ca:f7:7c:69:ed:ce:07:21:ff:
                    26:f7:d8:8b:2a:05:ec:b5:70:c2:ab:71:48:a0:e1:
                    44:ab:30:b0:24:0c:ee:e0:50:dc:0e:e0:8f:44:db:
                    d9:59:de:a8:f8:0c:46:c2:b0:e1:32:62:ee:cc:09:
                    0b:4f:e8:3d:a0:cb:7a:6d:bf:39:b1:1d:7b:0a:d3:
                    9a:8f:b8:dd:d8:aa:04:7e:a9:8e:88:22:de:cd:5f:
                    4c:3d:9c:74:4b:7a:13:9c:54:f4:03:09:4b:c4:c3:
                    4e:c5:65:4d:1f:48:18:06:56:60:e1:42:e1:60:32:
                    5d:53:59:27:13:3f:00:26:fe:79:17:82:49:3d:09:
                    f5:c2:7e:42:2d:78:23:02:ee:48:76:a5:ca:80:0b:
                    3d:bf:50:54:5b:4f:e4:4c:b4:df:bf:c0:54:1c:a7:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.132.0/22
                  185.77.160.0/22
                IPv6:
                  2a03:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:4c:ca:90:18:c9:b5:9f:08:0f:da:60:45:e7:10:19:20:
         05:7e:4b:f7:85:28:fe:2e:c4:7e:a8:e7:0b:49:76:29:71:5d:
         6e:7a:0a:67:29:45:03:1c:b4:26:3f:31:1f:2f:11:4d:57:cf:
         ff:4a:b8:07:32:6b:fa:5c:7a:52:a3:5e:44:1a:61:da:13:84:
         7a:df:f9:9d:c9:23:c4:c6:0d:71:83:ad:99:b6:0d:45:2c:ed:
         b7:2f:8e:25:df:cf:78:9e:cc:32:79:c8:d5:02:84:59:eb:e1:
         76:81:58:89:66:3c:dc:ab:f8:25:05:99:b5:93:50:95:53:cb:
         38:5e:11:44:70:81:e1:59:82:91:55:a1:18:0d:46:83:83:23:
         53:a1:1a:ab:20:55:9e:9c:b1:d7:01:63:b0:f5:19:8e:b3:c9:
         62:21:96:22:15:7b:55:a6:e1:07:fc:ba:88:83:7e:30:a6:ee:
         77:6f:60:e8:3d:9b:c6:c9:5d:e1:73:bb:00:a5:da:06:92:1a:
         1a:9b:45:9c:d9:89:41:1c:54:ea:54:96:6e:a4:6b:b0:df:e1:
         bf:69:b5:56:15:2f:e3:ef:19:5f:5a:d6:00:9d:bb:8a:43:53:
         d2:9e:3e:97:7e:44:78:d4:f3:2b:94:e1:94:26:b3:c5:ae:8e:
         c3:c7:75:2e
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQhRDwZD+WwM0n14bejniKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzkzYWI5M2U4NTcwMWE3M2VmNGQ1ZTAwZWQ2ZWI5ODkzOTM3Mzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoDhaG0D+OeoXEYSSwMjiikMH+mR
cwN90bGO+e4cf5x8hREggGHeBYET5UyMOsmpHdTz95L3CuWHxi8+YIqh3N5BxDYh
vMSo0pvHORHfNC8l9xu1VLubEIDMcDQJZSDK93xp7c4HIf8m99iLKgXstXDCq3FI
oOFEqzCwJAzu4FDcDuCPRNvZWd6o+AxGwrDhMmLuzAkLT+g9oMt6bb85sR17CtOa
j7jd2KoEfqmOiCLezV9MPZx0S3oTnFT0AwlLxMNOxWVNH0gYBlZg4ULhYDJdU1kn
Ez8AJv55F4JJPQn1wn5CLXgjAu5IdqXKgAs9v1BUW0/kTLTfv8BUHKen9wIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFFOTq5PoVwGnPvTV4A7W65iTk3OUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2FkNzY2
Mi03M2ZmLTQ1OTQtOGUzMC01OWE3ZWZkMzg0YzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvYWQ3NjYy
LTczZmYtNDU5NC04ZTMwLTU5YTdlZmQzODRjMC8xL1U1T3JrLWhYQWFjLTlOWGdE
dGJybUpPVGM1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuRCEAwQCuU2gMA0EAgACMAcDBQAqA9dAMA0G
CSqGSIb3DQEBCwUAA4IBAQCGzkzKkBjJtZ8ID9pgRecQGSAFfkv3hSj+LsR+qOcL
SXYpcV1uegpnKUUDHLQmPzEfLxFNV8//SrgHMmv6XHpSo15EGmHaE4R63/mdySPE
xg1xg62Ztg1FLO23L44l3894nswyecjVAoRZ6+F2gViJZjzcq/glBZm1k1CVU8s4
XhFEcIHhWYKRVaEYDUaDgyNToRqrIFWenLHXAWOw9RmOs8liIZYiFXtVpuEH/LqI
g34wpu53b2DoPZvGyV3hc7sApdoGkhoam0Wc2YlBHFTqVJZupGuw3+G/abVWFS/j
7xlfWtYAnbuKQ1PSnj6XfkR41PMrlOGUJrPFro7Dx3Uu
-----END CERTIFICATE-----