Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
File:                     kfWJGibPpDaiPn4f-XZki-5573c.cer (raw, json)
Hash identifier:          CkE6C5bIAjS/au0qL+DU/nV9ZOjTvmtiP4d3exmBKbM=
Subject key identifier:   91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C89CED2F3B411377D0EE7E035BADA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203108
                          IP: 185.144.220.0/22
                          IP: 2a07:5b00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:89:ce:d2:f3:b4:11:37:7d:0e:e7:e0:35:ba:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:1c:e7:3f:ab:31:d2:c4:48:5b:a2:5d:77:
                    eb:84:5d:d0:f0:5f:d1:8d:17:9a:4d:56:42:2b:2f:
                    2f:ed:31:c6:45:bf:d5:76:76:d8:aa:16:8f:90:88:
                    ba:3a:9a:08:c4:52:b0:5a:1d:58:c1:6b:ce:dc:14:
                    fa:c0:f9:a0:b1:10:25:8c:e9:b6:47:6c:1e:0d:75:
                    54:f8:ba:6c:08:89:aa:9f:e6:ea:ad:12:12:72:10:
                    9b:f6:26:32:c6:f1:f6:67:ac:f8:51:c9:f1:e6:11:
                    1d:ee:6b:68:8e:1d:37:48:73:08:03:8e:6f:7a:4b:
                    87:da:21:7a:08:77:5e:de:6e:24:e4:b1:c1:22:3b:
                    7a:1b:2b:71:5f:52:e1:66:86:b6:c8:cc:2a:d8:ae:
                    7c:0c:95:99:e2:a3:06:85:78:17:2e:b7:5c:10:47:
                    82:af:87:c8:53:80:13:74:8f:ee:5b:b4:fc:17:bb:
                    41:71:be:79:10:11:34:8c:8c:54:97:68:af:8e:2a:
                    ba:6a:18:bb:bf:1a:a9:01:ca:64:06:a0:bf:34:db:
                    02:14:11:ec:e0:1b:da:26:af:f2:11:3a:e0:f8:be:
                    9a:c9:f8:3a:20:b6:b3:6f:e4:6e:82:60:9d:0b:94:
                    64:d9:30:33:1f:54:a9:27:d8:c3:75:89:30:65:42:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.220.0/22
                IPv6:
                  2a07:5b00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203108

    Signature Algorithm: sha256WithRSAEncryption
         2c:b2:aa:f7:a6:71:33:20:8a:12:6a:2d:a0:a7:c1:49:f7:55:
         23:ec:45:71:22:0c:52:96:1e:d1:95:5f:d8:e5:da:64:d4:69:
         ab:18:23:0f:db:f7:1f:f8:21:6e:47:9a:e5:85:be:2a:99:6f:
         5d:ff:f9:3a:bd:9c:ac:00:7d:da:af:e0:58:d0:b7:13:bb:7d:
         b2:e6:14:74:e2:61:6d:41:25:9a:1e:1d:9f:87:87:46:83:53:
         17:20:15:45:5f:9a:80:ed:b9:51:95:13:76:d5:3a:b6:44:fc:
         aa:4d:e4:dd:fa:09:ae:75:a1:77:56:8a:c7:3b:05:a1:27:48:
         76:59:56:99:29:02:a5:d5:87:1f:4d:a9:59:6f:46:c6:13:e5:
         7c:ff:8c:68:b7:82:08:1e:4f:3c:65:34:c9:9d:2c:9c:68:54:
         ab:47:11:73:e3:41:f1:45:c4:a2:0c:4b:7b:7d:1e:3c:6a:c7:
         b9:07:5b:82:0d:09:59:f0:df:f3:66:e3:bf:8f:c8:92:fe:f5:
         4b:16:3f:43:67:91:b6:28:dd:4b:cd:5c:2c:40:63:4d:81:af:
         b1:00:0d:6c:58:04:0b:b0:01:8d:d4:63:7f:e2:a8:fc:21:e1:
         a2:6c:80:c9:15:f4:92:a7:9f:20:67:d2:42:45:29:4e:cb:0a:
         2f:05:94:6e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjInO0vO0ETd9DufgNbraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWY1ODkxYTI2Y2ZhNDM2YTIzZTdlMWZmOTc2NjQ4YmVlNzllZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Ac5z+rMdLESFuiXXfrhF3Q8F/R
jReaTVZCKy8v7THGRb/VdnbYqhaPkIi6OpoIxFKwWh1YwWvO3BT6wPmgsRAljOm2
R2weDXVU+LpsCImqn+bqrRISchCb9iYyxvH2Z6z4Ucnx5hEd7mtojh03SHMIA45v
ekuH2iF6CHde3m4k5LHBIjt6GytxX1LhZoa2yMwq2K58DJWZ4qMGhXgXLrdcEEeC
r4fIU4ATdI/uW7T8F7tBcb55EBE0jIxUl2ivjiq6ahi7vxqpAcpkBqC/NNsCFBHs
4BvaJq/yETrg+L6ayfg6ILazb+RugmCdC5Rk2TAzH1SpJ9jDdYkwZUJ+ZwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJH1iRomz6Q2oj5+H/l2ZIvuee93MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzdmMWI3
NC1jOGQ3LTRhMGQtOGEzOS1kYWE3MzkwYjViYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvN2YxYjc0
LWM4ZDctNGEwZC04YTM5LWRhYTczOTBiNWJhNy8xL2tmV0pHaWJQcERhaVBuNGYt
WFpraS01NTczYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZDcMA0EAgACMAcDBQMqB1sAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMZZDANBgkqhkiG9w0BAQsFAAOCAQEALLKq96ZxMyCK
EmotoKfBSfdVI+xFcSIMUpYe0ZVf2OXaZNRpqxgjD9v3H/ghbkea5YW+KplvXf/5
Or2crAB92q/gWNC3E7t9suYUdOJhbUElmh4dn4eHRoNTFyAVRV+agO25UZUTdtU6
tkT8qk3k3foJrnWhd1aKxzsFoSdIdllWmSkCpdWHH02pWW9GxhPlfP+MaLeCCB5P
PGU0yZ0snGhUq0cRc+NB8UXEogxLe30ePGrHuQdbgg0JWfDf82bjv4/Ikv71SxY/
Q2eRtijdS81cLEBjTYGvsQANbFgEC7ABjdRjf+Ko/CHhomyAyRX0kqefIGfSQkUp
TssKLwWUbg==
-----END CERTIFICATE-----