Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
File:                     a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer (raw, json)
Hash identifier:          wsOVw5eFs8GutK84pVvkNRU+DBbNJqvvzXrOWGsbQXQ=
Subject key identifier:   6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01953DC8069FFD3CE04CDFDBC70CB77C4917
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 25 Feb 2025 15:44:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2a04:ba40::/29
                          IP: 2a06:6680::/29
                          IP: 2a11:1240::/29
                          IP: 2a11:43c0::/29
                          IP: 2a11:95c0::/29
                          IP: 2a13:d280::/29
                          IP: 2a13:f680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3d:c8:06:9f:fd:3c:e0:4c:df:db:c7:0c:b7:7c:49:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 25 15:44:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a4:96:0d:72:35:26:ca:ba:d8:ad:1b:1b:39:
                    e3:f4:ea:76:51:12:dd:1d:71:a5:6b:b4:4f:08:a7:
                    f2:19:c8:9d:ce:5f:ef:40:48:e3:c4:9c:8f:94:4f:
                    94:5e:59:77:8d:89:da:3b:65:23:b9:b5:11:6e:8f:
                    bb:e6:dc:76:0e:72:7d:f8:87:81:eb:91:05:fb:8a:
                    19:ca:dc:be:12:89:69:1a:b9:c8:b1:e3:f8:88:ce:
                    68:c3:1b:50:88:03:39:77:40:5c:f6:81:d1:a4:bb:
                    f5:db:b3:20:99:a0:13:4e:8e:3b:d6:39:c5:a8:7d:
                    06:c6:f6:88:6a:61:7c:86:a2:83:a5:81:9c:e0:c2:
                    4b:46:b4:25:7e:52:c8:bd:75:25:d1:b9:b5:c7:3e:
                    1a:e5:23:97:1d:bd:ca:bc:7f:8d:47:ec:ad:31:39:
                    49:cb:59:7e:ee:ef:8c:be:ea:79:5a:21:75:6e:59:
                    fe:f4:a7:31:57:23:26:a6:45:09:29:0c:10:56:29:
                    e9:f5:7d:68:77:b7:16:bc:14:a7:a9:51:fc:8d:2e:
                    05:28:67:57:ec:0c:b7:bc:00:81:f8:2d:4c:be:09:
                    4d:46:c2:3f:cb:e6:07:04:f3:1d:68:c6:49:c8:a4:
                    6c:45:47:e1:98:25:47:41:9d:d6:c3:71:71:89:81:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:ba40::/29
                  2a06:6680::/29
                  2a11:1240::/29
                  2a11:43c0::/29
                  2a11:95c0::/29
                  2a13:d280::/29
                  2a13:f680::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:f0:19:d5:94:8c:1f:fb:60:c3:28:6b:a6:c5:c1:ad:0b:
         9b:e0:1c:66:85:54:40:b6:54:a2:18:ba:61:fa:eb:a3:08:a2:
         5e:6a:b1:fa:c4:da:fd:dd:08:8a:07:92:a3:f0:ae:7e:1b:22:
         e5:bf:23:a6:02:d3:2f:19:c8:93:68:fa:92:85:17:bc:f9:99:
         79:3d:21:a8:d2:b6:b0:4b:b5:a2:ad:5c:de:27:1a:d4:b9:c4:
         3c:46:55:54:db:c9:4d:d0:93:9a:9f:c4:50:7e:cf:8c:e0:26:
         d8:0f:f8:86:d3:30:70:fd:80:a1:cc:de:41:e2:2b:4d:ca:bb:
         92:c4:ec:e1:29:6f:a9:ef:3a:1f:7d:ad:4e:89:47:87:47:a2:
         31:e4:12:f3:a6:ce:0b:81:79:76:8e:80:e4:be:ce:2c:b7:90:
         93:3b:96:ca:3e:33:7c:85:ec:80:70:1a:63:d2:d8:f7:13:af:
         69:ab:35:9d:5f:ea:ae:ea:19:b9:b1:c6:ed:5e:b3:d4:70:8f:
         ba:5c:d1:10:82:f9:66:5f:96:21:ba:88:ce:8d:aa:b8:9e:66:
         53:6d:f4:a3:c6:e1:98:51:8d:bf:da:d4:38:99:1b:18:11:63:
         a6:20:4c:11:74:ab:61:bd:72:00:56:25:c0:e7:b8:95:31:4e:
         2d:71:bd:4e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZU9yAaf/TzgTN/bxwy3fEkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI1MTU0NDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmFhMDVjNmY4ZjliZmQ3MGUzZDQxZmUwNWJhZmM1MGQxMjUzYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qSWDXI1Jsq62K0bGznj9Op2URLd
HXGla7RPCKfyGcidzl/vQEjjxJyPlE+UXll3jYnaO2UjubURbo+75tx2DnJ9+IeB
65EF+4oZyty+EolpGrnIseP4iM5owxtQiAM5d0Bc9oHRpLv127MgmaATTo471jnF
qH0GxvaIamF8hqKDpYGc4MJLRrQlflLIvXUl0bm1xz4a5SOXHb3KvH+NR+ytMTlJ
y1l+7u+Mvup5WiF1bln+9KcxVyMmpkUJKQwQVinp9X1od7cWvBSnqVH8jS4FKGdX
7Ay3vACB+C1MvglNRsI/y+YHBPMdaMZJyKRsRUfhmCVHQZ3Ww3FxiYH38wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGuqBcb4+b/XDj1B/gW6/FDRJTv1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzhmNTEx
OS02ZGNjLTQzYTItOGRhZi1mMzIxMWQ5MTUyMGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvOGY1MTE5
LTZkY2MtNDNhMi04ZGFmLWYzMjExZDkxNTIwZC8xL2E2b0Z4dmo1djljT1BVSC1C
YnI4VU5FbE9fVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF
BwEHAQH/BDswOTA3BAIAAjAxAwUDKgS6QAMFAyoGZoADBQMqERJAAwUDKhFDwAMF
AyoRlcADBQMqE9KAAwUDKhP2gDANBgkqhkiG9w0BAQsFAAOCAQEALzLwGdWUjB/7
YMMoa6bFwa0Lm+AcZoVUQLZUohi6YfrrowiiXmqx+sTa/d0IigeSo/Cufhsi5b8j
pgLTLxnIk2j6koUXvPmZeT0hqNK2sEu1oq1c3ica1LnEPEZVVNvJTdCTmp/EUH7P
jOAm2A/4htMwcP2AoczeQeIrTcq7ksTs4Slvqe86H32tTolHh0eiMeQS86bOC4F5
do6A5L7OLLeQkzuWyj4zfIXsgHAaY9LY9xOvaas1nV/qruoZubHG7V6z1HCPulzR
EIL5Zl+WIbqIzo2quJ5mU230o8bhmFGNv9rUOJkbGBFjpiBMEXSrYb1yAFYlwOe4
lTFOLXG9Tg==
-----END CERTIFICATE-----