Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
File:                     hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer (raw, json)
Hash identifier:          gv03+UwmNyaCw/Pnv+ZEd03QPU+rDCm3AFDUxtc2j18=
Subject key identifier:   85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BC35D368C3CC3339F1992E3FE2B04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.82.184.0/22
                          IP: 194.176.127.0/24
                          IP: 2a0e:7180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:c3:5d:36:8c:3c:c3:33:9f:19:92:e3:fe:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:a8:d4:55:44:b0:0d:a7:de:e2:c2:60:b0:
                    08:e6:95:10:d3:d4:8d:64:cf:41:9a:e3:80:02:6c:
                    f2:ee:e6:e4:79:02:a3:b5:fe:82:bf:37:01:ef:87:
                    d9:fe:1f:69:9d:f5:f8:30:3c:9b:86:56:0e:43:c4:
                    9e:d1:50:5f:6e:f2:db:f4:4d:5b:b1:ae:40:a5:33:
                    ad:30:10:bd:bd:dd:f7:5a:ad:fd:d6:78:71:fa:b0:
                    af:83:86:fd:32:aa:7e:61:72:4e:93:75:a4:f1:f0:
                    b4:67:b3:83:94:94:48:e7:af:d4:3c:bc:95:eb:53:
                    2b:53:10:c5:87:b3:5a:8b:e1:e5:df:17:c4:52:2d:
                    ae:62:bc:31:b4:97:55:ba:bd:32:3e:77:63:cc:21:
                    52:8a:8e:8c:ad:eb:6c:45:22:c1:d0:1a:ca:44:f9:
                    fb:e7:ac:7c:c0:23:59:4c:b5:25:16:f6:cb:da:83:
                    4b:19:1a:db:c0:96:b5:ee:05:aa:3f:96:d4:7f:94:
                    c2:8f:ac:53:a4:e7:62:03:d5:fa:ed:8a:e0:a2:00:
                    1c:dd:26:1e:df:f8:1c:69:bb:52:0a:af:04:68:e2:
                    ef:f9:9f:38:89:62:19:2e:e6:3f:f6:70:22:45:09:
                    b9:5d:19:d7:23:6e:9b:a2:8c:24:66:66:f0:98:ed:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.184.0/22
                  194.176.127.0/24
                IPv6:
                  2a0e:7180::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:21:fa:03:1f:61:da:45:d5:2a:71:df:f2:d1:92:07:6b:1c:
         d8:3a:90:8c:17:40:5a:7e:0d:4e:95:8d:d1:0c:a6:50:55:b4:
         bf:8a:02:b9:81:2f:31:c8:7f:b5:6a:69:8a:29:c2:4d:16:94:
         f8:7f:06:98:22:46:4f:b1:bc:e1:bd:d6:b0:a9:79:62:e7:07:
         ec:36:12:c3:5b:da:41:61:a1:d2:ed:d2:a3:b8:5b:a6:19:7a:
         6c:7f:d1:bd:7c:1a:66:a6:c6:74:5e:31:28:74:1c:67:4f:a2:
         a5:a1:55:32:81:db:d2:37:8a:5d:8e:9d:ef:88:45:4d:b1:3a:
         cd:9d:6e:fa:e4:3c:cd:3d:7a:e8:d8:ef:77:60:0b:9e:a4:72:
         4e:7e:6d:21:24:e7:a1:69:14:2c:ae:ed:8d:4f:a0:b4:8c:94:
         58:19:9d:34:2d:0b:06:0d:0d:57:1e:7a:8a:c0:f9:da:a8:93:
         e1:7f:a2:61:e7:99:3e:14:4a:54:3c:93:54:13:49:ae:51:3c:
         31:2c:b6:8f:2f:b3:77:82:b6:7c:f8:1e:84:70:65:b7:cc:5e:
         cb:3a:ea:a5:be:c8:f8:21:19:c9:20:5a:be:1e:d4:b0:0b:6b:
         4f:d9:6c:bc:33:ad:10:6c:6a:ed:9a:9c:b5:05:17:86:31:33:
         15:b1:91:3c
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQma8NdNow8wzOfGZLj/isEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWQwNWUwMTdlMzMzZDE3YjNhZWI4YzVkNDk0M2JlOGRjNjdjMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Wo1FVEsA2n3uLCYLAI5pUQ09SN
ZM9BmuOAAmzy7ubkeQKjtf6CvzcB74fZ/h9pnfX4MDybhlYOQ8Se0VBfbvLb9E1b
sa5ApTOtMBC9vd33Wq391nhx+rCvg4b9Mqp+YXJOk3Wk8fC0Z7ODlJRI56/UPLyV
61MrUxDFh7Nai+Hl3xfEUi2uYrwxtJdVur0yPndjzCFSio6MretsRSLB0BrKRPn7
56x8wCNZTLUlFvbL2oNLGRrbwJa17gWqP5bUf5TCj6xTpOdiA9X67YrgogAc3SYe
3/gcabtSCq8EaOLv+Z84iWIZLuY/9nAiRQm5XRnXI26boowkZmbwmO2yCwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzA5NWFj
OS1jM2ZhLTQ2NWQtODMxZC00N2M5NTAzMzZlMmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMDk1YWM5
LWMzZmEtNDY1ZC04MzFkLTQ3Yzk1MDMzNmUyZi8xL2hkQmVBWDR6UFJlenJyakYx
SlE3Nk54bndJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLVK4AwQAwrB/MA0EAgACMAcDBQMqDnGAMA0G
CSqGSIb3DQEBCwUAA4IBAQAQIfoDH2HaRdUqcd/y0ZIHaxzYOpCMF0Bafg1OlY3R
DKZQVbS/igK5gS8xyH+1ammKKcJNFpT4fwaYIkZPsbzhvdawqXli5wfsNhLDW9pB
YaHS7dKjuFumGXpsf9G9fBpmpsZ0XjEodBxnT6KloVUygdvSN4pdjp3viEVNsTrN
nW765DzNPXro2O93YAuepHJOfm0hJOehaRQsru2NT6C0jJRYGZ00LQsGDQ1XHnqK
wPnaqJPhf6Jh55k+FEpUPJNUE0muUTwxLLaPL7N3grZ8+B6EcGW3zF7LOuqlvsj4
IRnJIFq+HtSwC2tP2Wy8M60QbGrtmpy1BReGMTMVsZE8
-----END CERTIFICATE-----