Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
File:                     mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer (raw, json)
Hash identifier:          h/vnER6zlxZU1A6KwzXGRI/oS9k79jvBwPVF13SUVxw=
Subject key identifier:   99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC610469585F14016FE540F9EA6753
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212208
                          IP: 93.93.152.0/21
                          IP: 2a06:8b80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:61:04:69:58:5f:14:01:6f:e5:40:f9:ea:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:6e:9e:7a:dc:60:16:71:70:df:f3:e0:72:
                    b9:68:b1:97:7b:1a:8f:55:b3:d5:35:13:9c:fa:95:
                    9e:d2:e0:63:c1:9c:87:f2:1d:6f:68:71:2a:d3:a4:
                    79:b4:3e:c1:5f:dd:cd:d6:d1:86:83:a5:50:44:9e:
                    85:94:68:46:68:d0:4d:80:80:3b:e2:c1:6e:5b:cd:
                    a0:d2:77:58:0a:52:38:8f:5f:d2:aa:08:03:58:fa:
                    06:6e:a1:e5:1f:2f:3a:1d:c4:b7:3b:80:60:ae:fb:
                    d2:1d:6c:80:a0:3e:b4:81:14:a0:f1:17:48:21:62:
                    ab:dc:96:31:f6:3a:c1:35:36:45:fa:c1:99:c1:ba:
                    35:8d:ce:16:73:c9:ec:5b:92:01:b0:73:2b:2c:a3:
                    fa:b5:93:63:3c:f0:a8:a2:53:04:06:87:16:70:17:
                    c0:74:a1:fc:69:8a:c6:e8:c6:ed:5f:12:6d:c2:76:
                    f4:5e:7e:9b:08:20:fa:21:ea:74:bc:15:94:c4:58:
                    77:75:29:70:3d:fd:96:14:c8:07:4f:86:f1:32:a9:
                    cf:dd:74:bd:d5:e8:33:8e:73:08:4e:f3:79:b3:7f:
                    31:45:1f:9a:81:78:d6:2f:5b:b7:ce:ca:c1:93:87:
                    86:47:dd:10:64:e4:a3:66:f9:54:ff:e2:ae:8e:5a:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.152.0/21
                IPv6:
                  2a06:8b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212208

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:af:f0:24:77:06:16:0f:2d:12:25:ae:2f:26:95:46:a7:
         91:96:08:e6:a1:3b:45:13:0e:ce:58:82:ff:ef:07:63:b6:ca:
         81:28:e2:98:52:cf:4a:17:54:6c:80:51:61:b5:b7:56:4f:09:
         8b:fa:ee:ca:c1:80:a5:39:c3:60:bb:f4:67:fa:ba:5a:90:11:
         1d:bf:1b:a9:cd:e6:37:d3:dd:a9:ad:53:20:df:34:2e:fd:2b:
         2d:5a:6c:57:00:b2:38:c7:20:77:ca:09:cc:a5:70:cf:ac:1c:
         57:ab:9b:b3:7e:c0:20:94:2c:23:b2:05:0b:4b:1d:ad:75:18:
         4a:79:4a:91:ed:52:25:d6:84:07:ac:79:99:cd:2d:2d:31:c0:
         53:cf:f3:bd:b3:cd:98:c0:b7:f1:fd:7c:df:6f:dc:c7:6b:ed:
         79:c2:a7:a2:69:d3:5e:f3:18:88:5d:2a:2f:13:d3:0a:88:5e:
         df:d6:35:72:75:f8:18:01:70:f8:e3:94:ce:48:b9:cb:53:32:
         2d:ec:ba:ea:2c:be:cf:d8:8c:b8:c2:fa:67:4b:88:a2:de:2c:
         76:b6:37:36:48:04:89:e4:a4:ee:48:bf:74:81:64:e9:24:55:
         f7:2f:98:d5:c1:eb:1b:f3:f4:d5:ab:b9:d6:47:c4:83:47:d0:
         63:7a:d7:f6
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/GEEaVhfFAFv5UD56mdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTA2Y2UyYjFhOTgwZmJkMWVmOTljM2Y1NjUzNjhhZDYyMWJjNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqutunnrcYBZxcN/z4HK5aLGXexqP
VbPVNROc+pWe0uBjwZyH8h1vaHEq06R5tD7BX93N1tGGg6VQRJ6FlGhGaNBNgIA7
4sFuW82g0ndYClI4j1/SqggDWPoGbqHlHy86HcS3O4BgrvvSHWyAoD60gRSg8RdI
IWKr3JYx9jrBNTZF+sGZwbo1jc4Wc8nsW5IBsHMrLKP6tZNjPPCoolMEBocWcBfA
dKH8aYrG6MbtXxJtwnb0Xn6bCCD6Iep0vBWUxFh3dSlwPf2WFMgHT4bxMqnP3XS9
1egzjnMITvN5s38xRR+agXjWL1u3zsrBk4eGR90QZOSjZvlU/+KujlqjXQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJkGzisamA+9HvmcP1ZTaK1iG8T0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2Y5NmRj
ZS0zYTQ5LTQ1NzEtYjk2Mi1hMmZlNDk5MWEwMzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZjk2ZGNl
LTNhNDktNDU3MS1iOTYyLWEyZmU0OTkxYTAzNy8xL21RYk9LeHFZRDcwZS1ad19W
bE5vcldJYnhQUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXV2YMA0EAgACMAcDBQMqBouAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM88DANBgkqhkiG9w0BAQsFAAOCAQEASLSv8CR3BhYP
LRIlri8mlUankZYI5qE7RRMOzliC/+8HY7bKgSjimFLPShdUbIBRYbW3Vk8Ji/ru
ysGApTnDYLv0Z/q6WpARHb8bqc3mN9Pdqa1TIN80Lv0rLVpsVwCyOMcgd8oJzKVw
z6wcV6ubs37AIJQsI7IFC0sdrXUYSnlKke1SJdaEB6x5mc0tLTHAU8/zvbPNmMC3
8f1832/cx2vtecKnomnTXvMYiF0qLxPTCohe39Y1cnX4GAFw+OOUzki5y1MyLey6
6iy+z9iMuML6Z0uIot4sdrY3NkgEieSk7ki/dIFk6SRV9y+Y1cHrG/P01au51kfE
g0fQY3rX9g==
-----END CERTIFICATE-----