Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
File:                     rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer (raw, json)
Hash identifier:          l7kTVMGr6xpdkOTnh9t6VZXoUrzyQPaCBV9j8wLnAL8=
Subject key identifier:   AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067FFE83C5F3A6319E27066C3CC5F12
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39790
                          IP: 81.91.80.0/20
                          IP: 185.14.224.0/22
                          IP: 2001:1568::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:ff:e8:3c:5f:3a:63:19:e2:70:66:c3:cc:5f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:38:84:ee:ad:66:5b:1c:8b:bb:ef:98:5c:
                    ba:5f:93:51:cf:e8:ad:ec:59:a2:1e:72:19:14:dd:
                    2a:fa:1d:b1:11:7f:35:72:52:91:e7:1f:2c:b9:73:
                    97:80:44:f3:68:c0:53:55:8e:f8:a4:85:05:7d:93:
                    69:f0:98:62:98:18:ed:16:9f:1e:63:4e:64:4c:4e:
                    83:b5:f3:bd:cf:eb:bb:e6:6e:fe:54:08:fe:f9:12:
                    52:ed:c4:80:00:16:9c:f9:48:55:42:0b:36:d1:58:
                    f3:d4:a1:ac:bb:e1:2b:50:02:3d:b2:2f:b4:54:d6:
                    22:ab:45:a9:f0:18:8f:f6:e7:e8:52:62:ac:d7:67:
                    8b:10:1d:2e:6a:a9:53:a6:5a:11:c2:06:1a:8a:57:
                    f7:9e:81:12:2c:af:87:cd:7b:db:28:8d:fd:54:bc:
                    32:69:a1:59:9f:1b:09:ac:08:b3:75:31:51:3f:8d:
                    e4:04:1a:6d:b2:a2:20:2c:67:db:76:55:e7:e8:a4:
                    1d:c2:48:9a:f6:af:9e:8a:f3:9c:20:73:3d:ae:37:
                    37:1d:70:97:a8:d8:b2:a9:e2:ba:e1:f4:47:f3:d6:
                    cb:e1:b1:0c:48:24:26:c9:30:43:c7:78:6b:9b:13:
                    be:08:07:4e:23:99:48:d6:29:8f:50:3b:53:b9:85:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.91.80.0/20
                  185.14.224.0/22
                IPv6:
                  2001:1568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39790

    Signature Algorithm: sha256WithRSAEncryption
         5e:8f:d6:ad:96:df:ba:0a:44:8c:23:38:72:7b:8d:63:fa:07:
         f3:54:21:5b:a6:bb:59:2b:08:95:d7:4c:71:d6:e1:71:36:52:
         fb:5a:8b:f1:1c:d5:97:5f:a2:9a:dd:90:66:a3:5d:c3:4a:64:
         fb:25:5a:d6:e6:78:7a:f8:d2:1b:62:22:ad:58:f0:0d:08:d9:
         94:83:dc:5b:b9:bf:6a:26:a7:da:65:7f:41:10:62:cb:a2:06:
         e7:65:ab:92:31:63:c0:4a:be:03:a9:8f:9e:c0:4d:f1:ea:dd:
         e3:66:88:d4:cd:bf:fd:cc:a7:5f:10:19:61:b8:96:97:00:29:
         00:a1:8f:73:8f:95:54:8e:7e:9c:df:3f:30:87:97:9d:78:cc:
         e4:64:04:a0:35:ae:64:bf:c7:8d:79:2a:d0:fb:93:f7:41:a7:
         07:45:af:eb:99:65:ca:da:95:20:7a:66:e2:d7:4e:00:c9:90:
         a9:9d:3d:b7:3c:b4:57:1f:18:bd:33:7d:6c:56:cf:80:f2:17:
         1b:a9:73:07:8a:23:80:d3:37:cb:32:81:a1:d1:0a:69:1b:63:
         ef:5a:34:c8:96:0f:03:1f:93:d3:10:83:bb:34:a0:7b:a9:ee:
         09:63:e4:2a:25:4b:73:f3:27:f4:83:5b:f7:49:14:e7:01:e3:
         56:94:83:66
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQgZ//oPF86YxnicGbDzF8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzIxMTkxNzhiZmQ5MjNhNGI1ZWM0MDZkOWZlMTQ1MmIyNzc2ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwE4hO6tZlsci7vvmFy6X5NRz+it
7FmiHnIZFN0q+h2xEX81clKR5x8suXOXgETzaMBTVY74pIUFfZNp8JhimBjtFp8e
Y05kTE6DtfO9z+u75m7+VAj++RJS7cSAABac+UhVQgs20Vjz1KGsu+ErUAI9si+0
VNYiq0Wp8BiP9ufoUmKs12eLEB0uaqlTploRwgYailf3noESLK+HzXvbKI39VLwy
aaFZnxsJrAizdTFRP43kBBptsqIgLGfbdlXn6KQdwkia9q+eivOcIHM9rjc3HXCX
qNiyqeK64fRH89bL4bEMSCQmyTBDx3hrmxO+CAdOI5lI1imPUDtTuYVlDwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFKwhGReL/ZI6S17EBtn+FFKyd276MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzJhOGY3
ZS1lNjA1LTQxMTQtOTBlOC1mNjAwZDBmZDAzY2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMmE4Zjdl
LWU2MDUtNDExNC05MGU4LWY2MDBkMGZkMDNjZS8xL3JDRVpGNHY5a2pwTFhzUUcy
ZjRVVXJKM2J2by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQEUVtQAwQCuQ7gMA0EAgACMAcDBQAgARVoMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbbjANBgkqhkiG9w0BAQsFAAOCAQEAXo/W
rZbfugpEjCM4cnuNY/oH81QhW6a7WSsIlddMcdbhcTZS+1qL8RzVl1+imt2QZqNd
w0pk+yVa1uZ4evjSG2IirVjwDQjZlIPcW7m/aian2mV/QRBiy6IG52WrkjFjwEq+
A6mPnsBN8erd42aI1M2//cynXxAZYbiWlwApAKGPc4+VVI5+nN8/MIeXnXjM5GQE
oDWuZL/HjXkq0PuT90GnB0Wv65llytqVIHpm4tdOAMmQqZ09tzy0Vx8YvTN9bFbP
gPIXG6lzB4ojgNM3yzKBodEKaRtj71o0yJYPAx+T0xCDuzSge6nuCWPkKiVLc/Mn
9INb90kU5wHjVpSDZg==
-----END CERTIFICATE-----