Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
File:                     UAKjP17GaAWRwJf9tKug4Cj0CEU.cer (raw, json)
Hash identifier:          WGC5tMqxhpRVnsKfgiiOHg7eQO8T5RT8wa6izR+dT6I=
Subject key identifier:   50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5729FED7848CB0E31F5A6F0AF35A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58127
                          IP: 185.185.112.0/22
                          IP: 2a0b:5280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:57:29:fe:d7:84:8c:b0:e3:1f:5a:6f:0a:f3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:1f:1c:7e:2b:bf:61:d5:35:11:2b:71:48:
                    e8:69:f2:a1:02:ce:d2:45:b7:12:62:3f:f9:32:6a:
                    3d:91:cc:7b:cc:26:07:03:e9:fb:0b:7b:92:30:9e:
                    89:d0:a4:83:26:c0:ac:f5:98:29:8d:9c:0a:3d:3b:
                    54:07:21:5e:ce:b9:d9:90:b8:ee:01:21:5e:de:50:
                    da:bd:61:6e:9b:5e:d7:45:ef:c0:76:66:a2:d1:1e:
                    9b:70:55:30:b8:aa:bd:8a:76:87:2a:7a:98:a3:99:
                    1b:f1:b5:30:f1:94:41:8e:c8:59:91:1b:69:fc:66:
                    9d:25:9f:60:ed:66:0e:c7:de:7a:da:16:1f:b2:33:
                    43:b0:86:1f:f3:99:0e:c1:a5:df:94:55:6e:cb:50:
                    eb:1b:32:0f:6b:31:1d:01:e7:73:1d:62:4a:29:71:
                    0f:23:a1:74:7e:dd:cf:0b:39:42:cd:91:54:0a:8c:
                    6a:50:25:22:26:8f:9c:23:de:73:8b:4c:e4:77:af:
                    1a:14:24:70:be:57:dd:5c:9b:f9:0b:e8:b5:ee:eb:
                    e8:7d:30:4c:80:26:14:4c:81:f8:8f:5c:c1:36:a9:
                    6c:56:ad:81:b1:80:dc:d4:8b:62:ad:3e:47:66:ca:
                    e6:48:88:20:59:05:f2:86:30:32:fe:8d:e0:c6:26:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.112.0/22
                IPv6:
                  2a0b:5280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58127

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:03:8d:a2:90:8a:2d:b7:9e:af:1c:c5:14:46:99:35:d4:
         4a:29:38:34:84:a7:57:11:a4:31:0f:cb:9a:76:c0:d0:82:93:
         a2:1b:b9:8a:96:b2:d7:54:71:36:a4:1e:82:7e:f4:5a:ff:73:
         a7:41:ee:6d:43:3f:f3:60:3c:38:ef:e9:b9:71:38:d5:ed:69:
         65:d8:28:90:c9:2d:05:54:f7:7f:9f:36:94:a8:76:f1:01:8c:
         72:c7:a3:6b:4d:74:95:0a:85:59:78:cd:65:e7:d9:6f:3a:2b:
         1d:09:3e:34:98:45:ec:82:ce:02:9a:75:9b:0d:07:5d:d6:f7:
         85:6c:a4:0e:6c:26:b2:11:6a:e8:db:1b:bc:d8:af:d5:24:88:
         74:e6:4a:7c:4f:3f:ed:a4:c9:25:1e:4a:24:e7:a4:9a:a1:ed:
         2a:11:7f:e4:52:e6:59:57:de:de:d1:55:21:12:e5:72:36:3f:
         10:44:8f:01:1f:0b:e5:5e:9c:e8:ba:24:90:52:ba:b0:2a:35:
         69:aa:f5:0c:4c:7f:4d:8c:ca:5b:3b:a5:b1:28:04:7f:b6:e1:
         fd:27:a8:79:45:db:ee:8e:f1:56:69:36:31:39:ce:1d:b2:f0:
         28:87:e1:4f:5d:71:1a:83:8e:c2:4d:e6:e8:71:aa:0e:cd:fc:
         18:73:dd:70
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQf+lcp/teEjLDjH1pvCvNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDAyYTMzZjVlYzY2ODA1OTFjMDk3ZmRiNGFiYTBlMDI4ZjQwODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskMfHH4rv2HVNRErcUjoafKhAs7S
RbcSYj/5Mmo9kcx7zCYHA+n7C3uSMJ6J0KSDJsCs9ZgpjZwKPTtUByFezrnZkLju
ASFe3lDavWFum17XRe/Admai0R6bcFUwuKq9inaHKnqYo5kb8bUw8ZRBjshZkRtp
/GadJZ9g7WYOx9562hYfsjNDsIYf85kOwaXflFVuy1DrGzIPazEdAedzHWJKKXEP
I6F0ft3PCzlCzZFUCoxqUCUiJo+cI95zi0zkd68aFCRwvlfdXJv5C+i17uvofTBM
gCYUTIH4j1zBNqlsVq2BsYDc1ItirT5HZsrmSIggWQXyhjAy/o3gxiaQvwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFACoz9exmgFkcCX/bSroOAo9AhFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzY3YjFl
Yy0yMDhmLTRkNjItOWNiYy1lZGUxZTRiYjYxMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNjdiMWVj
LTIwOGYtNGQ2Mi05Y2JjLWVkZTFlNGJiNjExZS8xL1VBS2pQMTdHYUFXUndKZjl0
S3VnNENqMENFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCublwMA0EAgACMAcDBQMqC1KAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDjDzANBgkqhkiG9w0BAQsFAAOCAQEACQ4DjaKQii23
nq8cxRRGmTXUSik4NISnVxGkMQ/LmnbA0IKTohu5ipay11RxNqQegn70Wv9zp0Hu
bUM/82A8OO/puXE41e1pZdgokMktBVT3f582lKh28QGMcseja010lQqFWXjNZefZ
bzorHQk+NJhF7ILOApp1mw0HXdb3hWykDmwmshFq6NsbvNiv1SSIdOZKfE8/7aTJ
JR5KJOekmqHtKhF/5FLmWVfe3tFVIRLlcjY/EESPAR8L5V6c6LokkFK6sCo1aar1
DEx/TYzKWzulsSgEf7bh/SeoeUXb7o7xVmk2MTnOHbLwKIfhT11xGoOOwk3m6HGq
Ds38GHPdcA==
-----END CERTIFICATE-----