Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
File:                     VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer (raw, json)
Hash identifier:          13dYA+k4T99w971lLbqDcqiYBjibwz/VWcGPPasrqn0=
Subject key identifier:   54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019615DACAA899DD55B2D8E1260CCC4BE4CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 14:43:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199245
                          IP: 147.93.213.0/24
                          IP: 195.85.44.0/24
                          IP: 2a12:b940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:da:ca:a8:99:dd:55:b2:d8:e1:26:0c:cc:4b:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 14:43:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54913026f079cda241aef4514fd353c28330e461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:8d:99:c5:ff:0d:d0:58:dd:d2:b3:8e:d0:
                    6f:87:32:97:a3:49:41:98:f7:a4:cc:3e:1a:4c:c2:
                    8d:3f:84:b9:2a:94:8a:96:88:e9:c3:0b:58:79:05:
                    a6:8d:eb:0d:1b:e8:c0:c7:a3:ff:c7:25:ea:2d:fa:
                    4d:74:fd:31:1b:90:04:86:b3:34:6f:75:a3:38:79:
                    87:14:88:1b:25:b2:ab:d7:a3:f4:06:2d:2e:17:c8:
                    11:61:64:b3:23:b2:76:d8:ad:f1:ce:4a:0b:71:ff:
                    02:c0:ed:f4:eb:53:13:b2:99:1f:ef:00:bc:37:d0:
                    a1:e1:4e:3c:f1:88:04:6d:f9:d9:86:e5:b3:5a:1f:
                    cd:68:88:be:00:26:e9:0a:11:ff:14:73:2d:c4:7d:
                    d8:be:01:f8:98:19:86:d1:ab:ae:48:76:23:75:30:
                    7e:61:06:5a:a6:40:95:3c:01:2a:d9:ad:f8:cc:ed:
                    2d:e3:6c:9e:5a:35:22:ae:65:6f:53:98:71:10:25:
                    d7:e9:c4:f3:a4:82:c0:1a:1c:f4:0d:81:23:1c:5d:
                    29:ec:dd:70:94:6d:71:73:57:9c:fa:62:19:99:d9:
                    13:ba:dd:ae:9f:17:5c:9d:c4:16:93:50:ec:de:58:
                    0d:e9:fd:62:ae:58:84:40:a5:be:39:03:01:94:b3:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.93.213.0/24
                  195.85.44.0/24
                IPv6:
                  2a12:b940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199245

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:84:9f:6a:6e:42:49:4b:54:54:1e:a9:bf:a6:3e:96:17:
         1d:9e:8d:0b:79:60:33:2f:db:2c:0c:a8:17:0f:3e:e6:23:e2:
         f1:5d:52:55:d3:7a:80:9c:28:21:4a:b0:bf:c6:1a:7d:c9:4f:
         15:35:ce:25:6d:34:c8:c5:c7:8e:89:75:53:4e:aa:95:de:77:
         84:77:c2:ef:e8:58:e4:d5:04:cd:4c:f7:e1:71:c9:c1:5a:46:
         25:56:9d:a9:b0:e4:96:ad:1c:13:8b:5c:7d:46:66:3c:4d:f1:
         b9:75:80:35:20:04:ea:74:a6:00:7c:f6:3c:51:bd:69:d3:34:
         fe:42:42:70:47:b6:3e:88:37:6f:56:76:59:44:b4:19:69:be:
         5c:07:f3:44:dd:a2:4f:6e:c7:27:fd:93:a7:54:5f:21:49:b5:
         84:d0:ac:51:eb:e6:bd:cb:77:36:6e:27:e1:ff:5d:b4:24:a0:
         fe:b6:0b:1b:3d:d8:61:15:11:a5:16:fb:bc:a5:06:a0:15:29:
         e1:ed:0e:b7:90:d5:a1:a1:bd:ab:8a:0d:41:eb:52:d3:c2:62:
         83:0e:63:23:d0:70:c2:ad:f8:b4:85:28:9c:58:d7:69:8a:88:
         42:be:6a:f3:fa:3e:93:a6:84:de:7b:9c:26:a3:ef:29:0c:19:
         6e:6c:1a:78
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZYV2sqomd1VstjhJgzMS+TKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDA4MTQ0MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDkxMzAyNmYwNzljZGEyNDFhZWY0NTE0ZmQzNTNjMjgzMzBlNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj2NmcX/DdBY3dKzjtBvhzKXo0lB
mPekzD4aTMKNP4S5KpSKlojpwwtYeQWmjesNG+jAx6P/xyXqLfpNdP0xG5AEhrM0
b3WjOHmHFIgbJbKr16P0Bi0uF8gRYWSzI7J22K3xzkoLcf8CwO3061MTspkf7wC8
N9Ch4U488YgEbfnZhuWzWh/NaIi+ACbpChH/FHMtxH3YvgH4mBmG0auuSHYjdTB+
YQZapkCVPAEq2a34zO0t42yeWjUirmVvU5hxECXX6cTzpILAGhz0DYEjHF0p7N1w
lG1xc1ec+mIZmdkTut2unxdcncQWk1Ds3lgN6f1irliEQKW+OQMBlLMu0wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFSRMCbwec2iQa70UU/TU8KDMORhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzNmNjNk
Zi1iNmY3LTRkNDItYTlhOS0xYTc2Nzg0YTBhMjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvM2Y2M2Rm
LWI2ZjctNGQ0Mi1hOWE5LTFhNzY3ODRhMGEyMS8xL1ZKRXdKdkI1emFKQnJ2UlJU
OU5Ud29NdzVHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAk13VAwQAw1UsMA0EAgACMAcDBQMqErlAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMKTTANBgkqhkiG9w0BAQsFAAOCAQEAHqKE
n2puQklLVFQeqb+mPpYXHZ6NC3lgMy/bLAyoFw8+5iPi8V1SVdN6gJwoIUqwv8Ya
fclPFTXOJW00yMXHjol1U06qld53hHfC7+hY5NUEzUz34XHJwVpGJVadqbDklq0c
E4tcfUZmPE3xuXWANSAE6nSmAHz2PFG9adM0/kJCcEe2Pog3b1Z2WUS0GWm+XAfz
RN2iT27HJ/2Tp1RfIUm1hNCsUevmvct3Nm4n4f9dtCSg/rYLGz3YYRURpRb7vKUG
oBUp4e0Ot5DVoaG9q4oNQetS08Jigw5jI9Bwwq34tIUonFjXaYqIQr5q8/o+k6aE
3nucJqPvKQwZbmwaeA==
-----END CERTIFICATE-----