Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.cer (raw, json)
Hash identifier:          6CEYo39fjSpcABYarAgFq5piR7M3l0CztEaoHHQxzns=
Subject key identifier:   A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6F56EE6E4ABF7A649BAF4618A71CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211668
                          IP: 80.249.132.0/24
                          IP: 2a10:b5c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:f5:6e:e6:e4:ab:f7:a6:49:ba:f4:61:8a:71:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:4e:b2:de:59:7b:5e:bd:43:1a:8c:36:10:
                    e4:96:c1:20:d3:d4:21:35:70:e4:8a:7c:bf:58:3b:
                    68:49:15:d3:04:a8:63:a8:13:2c:8d:ac:c1:2c:03:
                    17:7e:13:fe:f6:b4:7c:63:89:35:60:98:48:c7:c9:
                    21:a1:ef:56:5e:63:26:b6:3b:b7:a0:3c:e6:ca:27:
                    ce:99:e2:6d:69:ba:08:82:0c:6f:b1:17:7e:bf:c5:
                    ac:19:33:b8:5b:55:7b:81:de:3e:1b:3b:3b:15:54:
                    7b:cf:8d:6b:8d:f8:ad:84:58:83:20:1e:1a:93:e1:
                    b7:46:5e:45:c5:80:48:72:53:6c:00:a7:57:c6:a7:
                    4f:64:0b:29:b0:7c:69:75:f9:fd:23:74:8d:a4:97:
                    ec:6f:18:17:a1:cc:93:09:bf:23:b4:16:0e:60:a3:
                    00:9b:ef:6e:d2:60:bb:5b:3d:7b:4a:c4:1b:62:ac:
                    74:3b:0c:7d:f2:fd:3b:be:e8:0c:8f:21:f9:ab:67:
                    ff:d5:a4:cd:1f:14:41:b6:23:46:5d:06:30:b8:d4:
                    d1:41:27:c5:7c:2c:a5:de:64:1f:04:ef:e5:8b:3d:
                    f9:17:33:0d:72:e5:61:27:82:4b:15:74:00:51:74:
                    fb:2c:9f:a9:d8:a1:33:02:5f:84:8b:15:54:66:a0:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.249.132.0/24
                IPv6:
                  2a10:b5c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211668

    Signature Algorithm: sha256WithRSAEncryption
         b0:9d:84:33:29:32:87:e2:5f:e2:27:22:97:2b:32:f7:dd:92:
         72:4b:1e:d6:2e:49:d0:59:d5:aa:9b:ee:b1:2f:36:84:e0:d5:
         93:3e:d6:1e:26:54:76:e5:5e:42:20:ff:22:66:54:bc:b1:28:
         5e:c0:a0:44:72:42:83:38:da:4d:7d:64:93:fc:72:15:88:eb:
         ab:1f:93:7e:30:96:1a:4c:e5:bc:cb:14:0b:09:4c:bc:83:ee:
         73:06:2d:9f:8b:41:97:29:c8:d7:01:c0:0d:5a:2f:42:bb:e1:
         43:06:16:d0:77:87:5c:a3:58:b3:55:13:f2:8a:84:6b:8a:45:
         de:63:0b:c3:86:85:b8:ab:d3:e5:3b:9b:d9:c9:6c:03:6d:0f:
         4b:58:60:b1:cf:bc:25:7f:9a:7a:86:83:25:fa:13:64:92:8b:
         d9:a2:a5:cf:4e:a4:fd:a0:54:29:6d:58:4e:81:ce:db:a2:6d:
         05:b1:8e:c8:84:4d:1b:fd:c5:d2:f5:72:f7:31:83:b9:f6:4e:
         7c:ab:25:69:db:6e:ae:ea:8e:a6:ec:f0:d8:5f:7c:22:db:74:
         f4:5d:26:85:f6:8b:7e:2a:54:f9:05:08:73:cf:22:75:82:c0:
         50:18:f2:b3:f6:5e:93:c5:42:54:85:e1:c9:10:12:e8:51:c8:
         b6:c0:dc:ec
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1vVu5uSr96ZJuvRhinHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmFlMzU2OTY4OWZmNTQyYTkxMWQ3MDk4YjgyNDY2ZTZlYTlmYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WtOst5Ze169QxqMNhDklsEg09Qh
NXDkiny/WDtoSRXTBKhjqBMsjazBLAMXfhP+9rR8Y4k1YJhIx8khoe9WXmMmtju3
oDzmyifOmeJtaboIggxvsRd+v8WsGTO4W1V7gd4+Gzs7FVR7z41rjfithFiDIB4a
k+G3Rl5FxYBIclNsAKdXxqdPZAspsHxpdfn9I3SNpJfsbxgXocyTCb8jtBYOYKMA
m+9u0mC7Wz17SsQbYqx0Owx98v07vugMjyH5q2f/1aTNHxRBtiNGXQYwuNTRQSfF
fCyl3mQfBO/liz35FzMNcuVhJ4JLFXQAUXT7LJ+p2KEzAl+EixVUZqAHYQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKKuNWlon/VCqRHXCYuCRm5uqfyFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1Lzk4ODY3
Yy04NTZlLTQ2YzktODkyNS02ZWE1ZDhiNzU0MTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvOTg4Njdj
LTg1NmUtNDZjOS04OTI1LTZlYTVkOGI3NTQxMS8xL29xNDFhV2lmOVVLcEVkY0pp
NEpHYm02cF9JVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUPmEMA0EAgACMAcDBQMqELXAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM61DANBgkqhkiG9w0BAQsFAAOCAQEAsJ2EMykyh+Jf
4icilysy992Sckse1i5J0FnVqpvusS82hODVkz7WHiZUduVeQiD/ImZUvLEoXsCg
RHJCgzjaTX1kk/xyFYjrqx+TfjCWGkzlvMsUCwlMvIPucwYtn4tBlynI1wHADVov
QrvhQwYW0HeHXKNYs1UT8oqEa4pF3mMLw4aFuKvT5Tub2clsA20PS1hgsc+8JX+a
eoaDJfoTZJKL2aKlz06k/aBUKW1YToHO26JtBbGOyIRNG/3F0vVy9zGDufZOfKsl
adturuqOpuzw2F98Itt09F0mhfaLfipU+QUIc88idYLAUBjys/Zek8VCVIXhyRAS
6FHItsDc7A==
-----END CERTIFICATE-----