Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer
File:                     __48efMne-a_MrCqZ5PfjuT8aT8.cer (raw, json)
Hash identifier:          KQ0vGEUk9eA9yOIqPO4DPxgqsyQiqTENTFns2Z4plus=
Subject key identifier:   FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D61463DEAFFA5B9D8F2694DE603E9162
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Mar 2025 05:30:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56390
                          IP: 195.3.218.0/24
                          IP: 2001:67c:2bf0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d6:14:63:de:af:fa:5b:9d:8f:26:94:de:60:3e:91:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 05:30:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:b6:ea:58:0a:08:e7:a1:fe:25:4e:1c:59:
                    7f:26:78:f5:5f:46:e9:38:e0:48:ed:fc:3c:6d:6b:
                    bb:9a:a4:91:7a:33:4a:c0:94:2a:48:33:66:cb:fc:
                    95:df:6f:77:76:e7:b5:ea:b6:da:17:eb:2f:2e:09:
                    e1:c8:8c:1b:f4:b8:19:81:63:54:0f:42:e9:1c:20:
                    2b:94:94:39:97:f6:3d:b3:27:39:69:31:43:eb:d1:
                    d3:89:f4:e3:dd:a4:9c:3f:44:cd:18:25:3e:a6:f8:
                    83:9a:f4:f8:c5:7b:25:93:50:b1:eb:df:93:fa:a0:
                    1f:8c:9f:e6:ae:46:90:e3:94:1d:9e:67:de:b0:2c:
                    f1:2d:28:29:c5:ef:a1:75:91:34:42:45:15:e6:39:
                    30:f3:48:04:41:a1:8a:ca:18:56:5c:e1:7b:ea:46:
                    f0:c5:e2:91:11:e0:9e:b5:80:1f:ad:ea:55:2c:16:
                    ab:ab:8f:58:4d:1b:47:ff:70:a6:1c:e4:e1:1d:96:
                    c4:2b:c3:1d:cc:89:6b:49:46:4a:55:59:1e:1a:48:
                    27:8d:93:d7:19:24:67:fc:54:32:b0:a1:7a:3c:02:
                    e7:4d:88:35:99:74:6a:83:9e:73:19:c8:60:a6:71:
                    82:04:c5:f0:26:30:b8:0a:30:d4:0b:00:ba:9c:ed:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.3.218.0/24
                IPv6:
                  2001:67c:2bf0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56390

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:55:b0:d2:d3:c4:63:d6:8b:99:70:e3:44:fd:b6:83:5e:
         44:af:7c:82:56:84:d8:86:07:0b:11:d6:e7:25:c0:32:1f:67:
         5f:64:a8:0b:d5:1f:5f:70:04:d3:b3:f3:7a:7c:ae:8d:1a:1a:
         ef:14:e3:8d:60:0d:1c:85:cb:1b:9e:44:80:d3:21:ea:ef:a2:
         8f:ac:a8:52:86:34:25:82:c5:e1:64:3c:89:a4:10:4d:b5:bc:
         db:2d:94:db:26:b2:d4:5a:6b:37:fe:98:b3:d3:53:e4:44:32:
         01:27:ed:65:34:d8:37:01:d0:47:cf:d0:94:7d:dc:60:4f:29:
         15:c1:da:d2:67:df:30:bc:f5:8f:9e:24:a2:00:89:ab:d5:81:
         55:06:fd:c3:a4:53:50:2a:d0:20:be:96:37:3f:66:3d:d6:15:
         43:30:0f:5b:cf:8f:bf:ad:58:9d:1d:4d:b2:07:d6:04:35:c1:
         97:8d:9f:22:2d:aa:2b:03:a2:f1:5a:db:be:f2:1c:1b:06:7c:
         02:eb:71:8e:55:04:bd:ac:26:6e:ac:61:97:c4:13:cc:73:a3:
         20:c6:58:93:0e:08:87:e7:bc:3c:09:b9:c4:32:cc:c0:47:35:
         cf:28:8e:72:ba:b6:87:d3:e2:bf:ae:e8:dc:d3:b4:ef:ff:78:
         a7:99:9e:fa
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZXWFGPer/pbnY8mlN5gPpFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI3MDUzMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmZlM2M3OWYzMjc3YmU2YmYzMmIwYWE2NzkzZGY4ZWU0ZmM2OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGC26lgKCOeh/iVOHFl/Jnj1X0bp
OOBI7fw8bWu7mqSRejNKwJQqSDNmy/yV3293due16rbaF+svLgnhyIwb9LgZgWNU
D0LpHCArlJQ5l/Y9syc5aTFD69HTifTj3aScP0TNGCU+pviDmvT4xXslk1Cx69+T
+qAfjJ/mrkaQ45QdnmfesCzxLSgpxe+hdZE0QkUV5jkw80gEQaGKyhhWXOF76kbw
xeKREeCetYAfrepVLBarq49YTRtH/3CmHOThHZbEK8MdzIlrSUZKVVkeGkgnjZPX
GSRn/FQysKF6PALnTYg1mXRqg55zGchgpnGCBMXwJjC4CjDUCwC6nO0yJwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFP/+PHnzJ3vmvzKwqmeT347k/Gk/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzIyOTU3
ZS1kMzkwLTRiNzktOTZiNC1mMjAyNWQ3YWU4YmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMjI5NTdl
LWQzOTAtNGI3OS05NmI0LWYyMDI1ZDdhZThiZC8xL19fNDhlZk1uZS1hX01yQ3Fa
NVBmanVUOGFUOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwwPaMA8EAgACMAkDBwAgAQZ8K/AwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDANxGMA0GCSqGSIb3DQEBCwUAA4IBAQA45FWw0tPE
Y9aLmXDjRP22g15Er3yCVoTYhgcLEdbnJcAyH2dfZKgL1R9fcATTs/N6fK6NGhrv
FOONYA0chcsbnkSA0yHq76KPrKhShjQlgsXhZDyJpBBNtbzbLZTbJrLUWms3/piz
01PkRDIBJ+1lNNg3AdBHz9CUfdxgTykVwdrSZ98wvPWPniSiAImr1YFVBv3DpFNQ
KtAgvpY3P2Y91hVDMA9bz4+/rVidHU2yB9YENcGXjZ8iLaorA6LxWtu+8hwbBnwC
63GOVQS9rCZurGGXxBPMc6MgxliTDgiH57w8CbnEMszARzXPKI5yuraH0+K/rujc
07Tv/3inmZ76
-----END CERTIFICATE-----