Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
File:                     l3d1zogEaVmWznfH02gbnCQbNi8.cer (raw, json)
Hash identifier:          rzHiTJYjIcdQjC8+XimTfM5yarSZ70l49hhYXxleNPs=
Subject key identifier:   97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D65BE3CF5615CD5079DCDB63088B0B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.45.16.0/22
                          IP: 2a01:7960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:5b:e3:cf:56:15:cd:50:79:dc:db:63:08:8b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=977775ce8804695996ce77c7d3681b9c241b362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:8d:fa:5d:9f:36:42:81:cd:56:87:41:7c:
                    00:f0:e1:45:b1:3a:70:74:e1:71:e0:3c:d7:80:c3:
                    6a:2d:36:69:35:9c:66:74:7c:91:46:96:75:2a:d2:
                    15:54:64:c9:59:c6:b4:18:99:26:ca:4d:df:67:2c:
                    dd:65:56:80:ed:c3:d4:1e:66:c8:69:9a:dc:c0:3f:
                    6f:2e:30:27:f2:9f:41:f0:27:ff:e2:75:d1:30:df:
                    77:73:15:d6:10:e4:f2:bb:97:84:89:72:ff:69:d0:
                    ab:e9:2a:31:1d:3f:85:d8:00:9a:28:dd:d1:7a:a8:
                    11:1c:dc:b7:e6:e6:de:ea:d8:5f:cb:b1:86:54:a2:
                    f2:b7:1f:32:21:8d:13:23:a8:ab:1a:90:a0:49:8e:
                    03:80:57:e9:10:34:11:13:98:f9:be:24:b2:07:37:
                    39:40:4e:5b:2b:73:7c:d0:e2:66:4a:c1:62:f1:70:
                    1b:ba:de:7e:99:1d:76:9f:55:f5:14:b5:99:1e:38:
                    5c:5b:a0:c5:ef:06:26:9c:e7:42:e9:9d:7e:bb:f3:
                    47:fa:bd:b4:b7:a8:f2:6f:ed:be:85:fc:54:8a:7f:
                    8f:f8:5b:37:29:02:cb:e1:90:ef:26:6c:61:93:25:
                    0d:29:4a:43:85:78:74:d3:d4:85:a3:e7:87:95:ee:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.16.0/22
                IPv6:
                  2a01:7960::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:8f:fc:e4:0b:ea:06:bb:04:ad:58:61:69:95:8f:89:e1:
         bc:72:df:d1:b6:db:1a:56:c5:e9:44:be:88:80:bd:d0:50:1f:
         51:d3:91:78:14:26:e4:98:f4:83:92:72:ea:b4:8d:98:36:49:
         88:ba:e7:fe:1a:80:70:b4:69:28:4a:21:b4:be:a4:04:69:81:
         ad:5d:8e:be:ba:0f:2a:1f:c7:1f:df:89:58:a9:dc:3f:26:89:
         db:db:7e:11:7f:43:7e:24:40:b4:58:d8:d4:f3:be:59:e4:6b:
         98:01:68:15:f7:4e:25:9f:28:4b:d9:bb:b9:99:48:de:e2:2a:
         7d:26:1d:57:db:fc:82:48:cd:f2:78:e2:66:32:1b:66:b4:f6:
         12:84:ec:f3:7a:d6:ee:eb:df:a8:00:ab:3f:4c:0c:a1:03:b5:
         38:65:ee:2a:9b:80:49:b2:82:3d:34:05:a1:93:30:b5:66:6a:
         f2:fe:73:92:41:5f:e9:cd:a1:ab:52:a1:18:0a:37:1e:36:c0:
         c2:77:20:a9:11:bb:7e:6d:71:b0:e9:8a:2c:ea:2c:1f:0e:64:
         08:57:b3:2f:96:a3:01:48:ba:62:22:d0:20:22:50:c1:e1:26:
         ef:ff:8a:f0:c6:3a:64:66:fb:f5:18:b1:54:47:14:3c:17:11:
         91:0b:61:77
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQg1lvjz1YVzVB53NtjCIsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzc3NzVjZTg4MDQ2OTU5OTZjZTc3YzdkMzY4MWI5YzI0MWIzNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJaN+l2fNkKBzVaHQXwA8OFFsTpw
dOFx4DzXgMNqLTZpNZxmdHyRRpZ1KtIVVGTJWca0GJkmyk3fZyzdZVaA7cPUHmbI
aZrcwD9vLjAn8p9B8Cf/4nXRMN93cxXWEOTyu5eEiXL/adCr6SoxHT+F2ACaKN3R
eqgRHNy35ube6thfy7GGVKLytx8yIY0TI6irGpCgSY4DgFfpEDQRE5j5viSyBzc5
QE5bK3N80OJmSsFi8XAbut5+mR12n1X1FLWZHjhcW6DF7wYmnOdC6Z1+u/NH+r20
t6jyb+2+hfxUin+P+Fs3KQLL4ZDvJmxhkyUNKUpDhXh009SFo+eHle76aQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJd3dc6IBGlZls53x9NoG5wkGzYvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2JjOGUx
MC00NjFlLTRjZTQtOGJlOS02MjM5NzMzYzYxODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYmM4ZTEw
LTQ2MWUtNGNlNC04YmU5LTYyMzk3MzNjNjE4NC8xL2wzZDF6b2dFYVZtV3puZkgw
MmdibkNRYk5pOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS0QMA0EAgACMAcDBQAqAXlgMA0GCSqGSIb3
DQEBCwUAA4IBAQAzDY/85AvqBrsErVhhaZWPieG8ct/RttsaVsXpRL6IgL3QUB9R
05F4FCbkmPSDknLqtI2YNkmIuuf+GoBwtGkoSiG0vqQEaYGtXY6+ug8qH8cf34lY
qdw/Jonb234Rf0N+JEC0WNjU875Z5GuYAWgV904lnyhL2bu5mUje4ip9Jh1X2/yC
SM3yeOJmMhtmtPYShOzzetbu69+oAKs/TAyhA7U4Ze4qm4BJsoI9NAWhkzC1Zmry
/nOSQV/pzaGrUqEYCjceNsDCdyCpEbt+bXGw6Yos6iwfDmQIV7MvlqMBSLpiItAg
IlDB4Sbv/4rwxjpkZvv1GLFURxQ8FxGRC2F3
-----END CERTIFICATE-----