Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
File:                     XGpfUrAC9ihsHV6yV7tehTNCooQ.cer (raw, json)
Hash identifier:          lUVcryWre9YGZ2per5ydf8aouH53e8WTJq5wucDzzdc=
Subject key identifier:   5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274876831C85AF42BC2BF49BCCAD24EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 33864
                          IP: 84.17.128.0/19
                          IP: 185.137.40.0/22
                          IP: 2a02:1760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:76:83:1c:85:af:42:bc:2b:f4:9b:cc:ad:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:c3:fa:65:cb:c6:0d:f5:cd:f4:3e:c6:30:
                    4b:7b:3b:1f:b6:8c:c4:38:c6:c1:bf:61:18:26:89:
                    24:60:08:5d:e4:d4:f7:6e:bc:70:5e:f8:a2:1e:02:
                    57:11:73:53:a0:98:ce:e7:d3:d7:86:4e:1b:ff:95:
                    f2:ef:db:51:13:2e:3c:aa:5e:db:d7:d3:82:e4:c4:
                    b0:71:e1:52:b8:68:b3:25:b0:8a:8b:fe:fc:f9:27:
                    ef:eb:b0:12:05:6d:35:28:e5:8b:2e:d2:fa:29:2a:
                    88:ff:ec:86:19:06:77:1a:0a:f0:b7:6d:e3:ac:17:
                    64:d8:0e:c8:e2:fc:a8:ae:95:70:bd:94:29:41:e1:
                    55:c8:59:5a:69:3a:ea:57:8d:21:b5:12:cb:4c:0c:
                    0e:33:ab:73:55:33:d1:44:a1:8d:c3:f0:5f:63:62:
                    c5:35:6d:54:4f:8f:e0:cf:e5:bd:21:c7:7f:29:12:
                    c9:f0:9b:65:e9:ca:88:f8:67:5a:9c:55:5b:63:14:
                    47:24:76:d3:90:c3:1e:5c:41:73:25:94:c2:ce:e5:
                    5d:92:f1:cc:bd:99:4a:8c:14:4a:2c:4b:f2:b3:d5:
                    05:83:cd:e8:da:88:8e:fe:ff:6f:6f:03:ee:bd:88:
                    1a:a9:de:80:71:61:12:4c:56:be:92:d7:c6:bd:8f:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.17.128.0/19
                  185.137.40.0/22
                IPv6:
                  2a02:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33864

    Signature Algorithm: sha256WithRSAEncryption
         07:8c:2f:0a:11:74:44:d0:ca:bc:5b:95:f4:b2:93:60:ba:cb:
         1a:9b:d0:1d:57:93:44:57:ee:4f:bc:1b:04:6e:56:b0:fe:0d:
         1b:72:d3:b2:d2:0d:05:66:11:32:cf:1d:85:b2:98:2f:f0:f6:
         9e:f3:41:71:ff:e2:6c:78:b1:99:43:16:6c:19:df:d2:98:5b:
         77:7d:8c:f8:54:f7:a6:22:0c:84:13:33:71:28:82:71:45:ac:
         5d:5d:eb:1a:4f:cf:bb:de:da:a1:07:46:30:4e:e6:b8:49:1b:
         64:6d:0d:08:22:1d:97:ab:25:c3:95:33:9f:5a:e7:22:78:52:
         44:b0:a7:22:3f:d5:b4:7e:0f:d1:6a:b0:5e:25:d8:dd:e4:e4:
         2e:78:81:e8:99:e8:3d:3a:cd:d3:cf:3f:10:fc:95:d7:af:9f:
         64:b8:11:a7:6d:c5:f4:e6:6c:e1:68:b6:dd:2f:9f:b2:f9:a9:
         2c:bc:84:45:15:86:61:f0:46:19:2f:fe:6e:8c:72:8a:f7:bc:
         82:d6:c2:3f:5d:e0:6e:ef:3a:a8:e3:a2:ac:ef:ba:53:6d:c3:
         be:86:12:47:83:b7:e0:d1:1e:8e:88:dc:3f:21:b2:6d:48:27:
         4d:5d:77:1d:c2:a3:1e:20:b6:76:da:a3:57:63:2c:fa:21:c3:
         4a:83:5a:eb
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQnSHaDHIWvQrwr9JvMrSTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzZhNWY1MmIwMDJmNjI4NmMxZDVlYjI1N2JiNWU4NTMzNDJhMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSrD+mXLxg31zfQ+xjBLezsftozE
OMbBv2EYJokkYAhd5NT3brxwXviiHgJXEXNToJjO59PXhk4b/5Xy79tREy48ql7b
19OC5MSwceFSuGizJbCKi/78+Sfv67ASBW01KOWLLtL6KSqI/+yGGQZ3Ggrwt23j
rBdk2A7I4vyorpVwvZQpQeFVyFlaaTrqV40htRLLTAwOM6tzVTPRRKGNw/BfY2LF
NW1UT4/gz+W9Icd/KRLJ8Jtl6cqI+GdanFVbYxRHJHbTkMMeXEFzJZTCzuVdkvHM
vZlKjBRKLEvys9UFg83o2oiO/v9vbwPuvYgaqd6AcWESTFa+ktfGvY+NyQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFxqX1KwAvYobB1esle7XoUzQqKEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2I0ZWNi
MS1hMGY1LTQyNjEtYmNkZS0wOTZjOWMwN2FlMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYjRlY2Ix
LWEwZjUtNDI2MS1iY2RlLTA5NmM5YzA3YWUxOC8xL1hHcGZVckFDOWloc0hWNnlW
N3RlaFROQ29vUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQFVBGAAwQCuYkoMA0EAgACMAcDBQAqAhdgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCESDANBgkqhkiG9w0BAQsFAAOCAQEAB4wv
ChF0RNDKvFuV9LKTYLrLGpvQHVeTRFfuT7wbBG5WsP4NG3LTstINBWYRMs8dhbKY
L/D2nvNBcf/ibHixmUMWbBnf0phbd32M+FT3piIMhBMzcSiCcUWsXV3rGk/Pu97a
oQdGME7muEkbZG0NCCIdl6slw5Uzn1rnInhSRLCnIj/VtH4P0WqwXiXY3eTkLniB
6JnoPTrN088/EPyV16+fZLgRp23F9OZs4Wi23S+fsvmpLLyERRWGYfBGGS/+boxy
ive8gtbCP13gbu86qOOirO+6U23DvoYSR4O34NEejojcPyGybUgnTV13HcKjHiC2
dtqjV2Ms+iHDSoNa6w==
-----END CERTIFICATE-----