Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.cer (raw, json)
Hash identifier:          8kQijo0qEbYDj2yE0hRFicaxkVEJQb/vZfEUOeXXjCo=
Subject key identifier:   84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B6148EF6C4D9C1CA8FE7C8AE145CBC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12363
                          AS: 206191
                          IP: 195.110.96.0/19
                          IP: 2a0e:f080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:14:8e:f6:c4:d9:c1:ca:8f:e7:c8:ae:14:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:f5:ef:92:6c:9e:e7:41:c3:0f:03:94:dd:
                    79:13:15:72:72:45:2c:e5:b7:85:59:a2:dc:42:64:
                    d2:3d:44:17:7c:c3:79:35:48:ed:e9:09:5d:7e:b5:
                    63:cf:f8:40:9b:4c:0c:8c:7c:7e:01:3f:fe:3b:1f:
                    b3:a6:3f:40:f5:b6:a7:f0:8a:97:a3:d1:02:22:0a:
                    12:7b:c5:70:cf:86:9e:89:60:14:fd:1c:9b:fd:05:
                    2e:42:37:d3:56:14:8d:3a:96:ad:93:f9:39:c5:63:
                    e5:c2:b4:8d:c5:ba:e8:c8:61:f2:2b:b7:d3:9d:ea:
                    43:3a:9d:05:64:68:9c:fd:ca:51:1c:62:9b:cf:7f:
                    c9:c5:db:a7:af:50:14:c0:41:ec:81:3d:50:00:7c:
                    07:83:0f:ec:22:96:02:b2:ff:69:3c:05:f6:4a:7c:
                    4b:e8:43:5d:e6:cb:e6:a2:99:7b:87:a5:b5:45:44:
                    bb:7e:58:90:7e:af:85:a9:43:c2:2f:43:27:6f:fa:
                    4f:95:68:68:6d:9b:6e:e1:d6:43:60:d9:17:0d:f6:
                    f6:99:29:60:59:c6:5a:5c:b2:40:fa:56:cd:c2:9a:
                    e6:60:02:21:4c:60:67:9c:92:4e:e9:8f:05:04:57:
                    29:5c:b2:d8:b4:c9:4c:1f:e6:aa:1a:b4:78:b5:05:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.110.96.0/19
                IPv6:
                  2a0e:f080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12363
                  206191

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:27:42:a1:50:ea:cd:db:07:40:40:4f:c9:69:27:72:7e:
         e9:42:6f:b8:ab:f9:1f:5f:2c:6b:53:d9:fc:d3:9f:55:3d:e9:
         5c:a6:cf:49:17:84:5e:a5:af:25:fe:2b:24:21:28:08:53:5e:
         c1:8f:ac:88:04:6d:65:c2:b3:78:89:04:25:d2:84:fb:41:a5:
         e5:f9:7e:0b:5c:d8:47:eb:80:5c:e4:01:ab:bc:73:92:60:16:
         48:58:d4:cc:b7:e7:37:ab:21:a8:55:94:bf:ed:10:8a:9a:12:
         ad:88:8c:67:2f:69:49:1c:05:68:56:e3:ce:60:3b:96:a0:ea:
         74:09:ce:4a:fa:f9:d2:8b:f3:35:2b:a0:07:8a:14:3b:e0:5a:
         f5:0e:49:63:b7:2c:80:a4:be:a5:ff:b3:7c:85:f5:ea:47:45:
         a2:82:ad:2f:74:33:42:23:a5:d8:0f:70:05:d7:4e:78:03:4b:
         53:fb:46:79:d4:eb:4f:4f:b2:41:ce:d3:4e:d2:75:9e:69:ee:
         78:3e:d3:cd:29:fe:5f:aa:6e:86:55:10:2d:f4:af:5b:82:1c:
         08:cc:b0:cf:7f:fc:f6:82:f9:0a:3a:8f:5b:31:bc:1d:a5:b9:
         9d:c3:fb:8d:32:e4:cc:34:35:6c:f8:19:ab:1d:77:55:ca:48:
         70:65:42:a5
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZQnthSO9sTZwcqP58iuFFy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGRiNzQ3YjI4OTcxN2EwNjg0Y2Q2YWM4MjMwN2FhNjdiYjJkN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/175JsnudBww8DlN15ExVyckUs
5beFWaLcQmTSPUQXfMN5NUjt6QldfrVjz/hAm0wMjHx+AT/+Ox+zpj9A9ban8IqX
o9ECIgoSe8Vwz4aeiWAU/Ryb/QUuQjfTVhSNOpatk/k5xWPlwrSNxbroyGHyK7fT
nepDOp0FZGic/cpRHGKbz3/Jxdunr1AUwEHsgT1QAHwHgw/sIpYCsv9pPAX2SnxL
6ENd5svmopl7h6W1RUS7fliQfq+FqUPCL0Mnb/pPlWhobZtu4dZDYNkXDfb2mSlg
WcZaXLJA+lbNwprmYAIhTGBnnJJO6Y8FBFcpXLLYtMlMH+aqGrR4tQVWJQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFITbdHsolxegaEzWrIIweqZ7ste7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzcxNDJi
MS03MDkxLTRkM2EtYmQ2ZC05ZmU3ZWU5YzAzNjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNzE0MmIx
LTcwOTEtNGQzYS1iZDZkLTlmZTdlZTljMDM2OC8xL2hOdDBleWlYRjZCb1ROYXNn
akI2cG51eTE3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQFw25gMA0EAgACMAcDBQAqDvCAMB4GCCsGAQUF
BwEIAQH/BA8wDaALMAkCAjBLAgMDJW8wDQYJKoZIhvcNAQELBQADggEBAH9EJ0Kh
UOrN2wdAQE/JaSdyfulCb7ir+R9fLGtT2fzTn1U96Vymz0kXhF6lryX+KyQhKAhT
XsGPrIgEbWXCs3iJBCXShPtBpeX5fgtc2EfrgFzkAau8c5JgFkhY1My35zerIahV
lL/tEIqaEq2IjGcvaUkcBWhW485gO5ag6nQJzkr6+dKL8zUroAeKFDvgWvUOSWO3
LICkvqX/s3yF9epHRaKCrS90M0IjpdgPcAXXTngDS1P7RnnU609PskHO007SdZ5p
7ng+080p/l+qboZVEC30r1uCHAjMsM9//PaC+Qo6j1sxvB2luZ3D+40y5Mw0NWz4
Gasdd1XKSHBlQqU=
-----END CERTIFICATE-----