Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
File:                     rmRaywIXx0oP004XpT297lbwEeU.cer (raw, json)
Hash identifier:          EZOPaL2IpEI/I2hEuj9nepsfUWUN/CWbSowD5gMrheI=
Subject key identifier:   AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428264C97B60974807EB859545FDA3C99
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208887
                          IP: 185.242.192.0/22
                          IP: 2a0c:e380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:4c:97:b6:09:74:80:7e:b8:59:54:5f:da:3c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:9b:71:cc:8b:0d:b4:61:c4:88:e8:ef:db:
                    a5:d9:14:29:8d:e2:fb:8d:11:e2:9b:6e:65:23:f9:
                    52:ad:c4:16:48:61:17:b1:de:a0:87:99:40:f5:a4:
                    27:37:f7:a8:9b:1d:d9:88:42:6a:b0:ec:ca:2f:84:
                    ee:4f:c8:d6:bd:2f:db:5f:93:d6:7a:42:12:52:3c:
                    d1:06:dc:81:76:ed:02:c3:b1:b7:b0:dd:33:d2:a1:
                    93:12:cb:5a:df:86:4d:73:69:79:3b:b9:34:37:72:
                    d3:55:b1:4b:7d:12:a3:d6:ca:aa:b8:15:01:65:65:
                    32:a3:4e:df:72:77:75:d3:94:ae:d8:a4:7b:35:dd:
                    9f:64:18:42:91:53:f9:0d:71:82:a2:dd:93:31:f5:
                    d8:f9:50:3c:62:43:d0:9e:b6:31:c9:15:56:55:3e:
                    95:c6:e6:84:82:05:5a:9f:a5:8e:0b:75:04:c9:75:
                    98:7b:13:13:01:79:ba:30:66:aa:68:8e:e3:d6:9f:
                    33:75:8f:cb:dc:72:41:ee:1b:70:a7:f0:ff:3d:09:
                    fb:b6:9d:31:3e:e1:a6:80:6c:a7:d8:84:c1:14:d7:
                    27:ab:c3:fb:ba:5c:5a:61:85:d4:7a:24:49:af:af:
                    34:c3:e3:9c:0c:d2:c3:90:db:5b:8e:2a:14:50:ad:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.192.0/22
                IPv6:
                  2a0c:e380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208887

    Signature Algorithm: sha256WithRSAEncryption
         28:42:64:af:19:20:ca:f6:16:37:6e:41:65:83:a1:0a:7c:26:
         94:80:9e:bc:7c:33:40:ef:ad:32:98:38:67:e7:66:e9:dd:d9:
         40:c8:03:47:9a:9b:5e:d9:d3:8a:41:53:23:bc:76:78:e2:d2:
         58:73:42:4b:8d:ad:a7:30:7f:f4:e8:ee:be:64:16:0f:97:47:
         aa:5f:20:b1:8c:a3:c0:67:92:cc:1e:d6:38:dd:2f:5b:7b:3c:
         08:fa:a4:76:c5:ab:48:68:d6:c0:19:35:a2:92:df:e1:5f:39:
         c8:ae:4b:15:d1:cd:b2:86:25:14:4c:24:de:46:57:b1:6b:eb:
         5b:83:8a:e1:db:c5:c9:95:7a:70:73:09:2f:7a:13:bb:61:84:
         08:99:e4:e8:04:0c:93:36:18:0b:ef:ee:3a:e8:fc:b1:e7:c9:
         3c:ba:c3:d9:22:5f:89:6b:a6:24:80:11:91:ce:42:7a:a9:96:
         a9:b7:cb:2a:af:e7:c4:0e:fd:73:72:78:4c:31:0e:0a:92:72:
         99:02:77:89:01:ea:a0:3d:9f:c2:9b:f4:c8:52:5a:4c:ab:e8:
         af:b6:da:bc:6f:07:10:20:ea:32:d1:d2:04:27:23:8f:ac:2d:
         51:22:f1:31:f9:40:1e:3c:01:1a:18:2d:9e:77:3b:ba:fd:88:
         e3:93:ef:28
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQoJkyXtgl0gH64WVRf2jyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTY0NWFjYjAyMTdjNzRhMGZkMzRlMTdhNTNkYmRlZTU2ZjAxMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTqbccyLDbRhxIjo79ul2RQpjeL7
jRHim25lI/lSrcQWSGEXsd6gh5lA9aQnN/eomx3ZiEJqsOzKL4TuT8jWvS/bX5PW
ekISUjzRBtyBdu0Cw7G3sN0z0qGTEsta34ZNc2l5O7k0N3LTVbFLfRKj1sqquBUB
ZWUyo07fcnd105Su2KR7Nd2fZBhCkVP5DXGCot2TMfXY+VA8YkPQnrYxyRVWVT6V
xuaEggVan6WOC3UEyXWYexMTAXm6MGaqaI7j1p8zdY/L3HJB7htwp/D/PQn7tp0x
PuGmgGyn2ITBFNcnq8P7ulxaYYXUeiRJr680w+OcDNLDkNtbjioUUK03oQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFK5kWssCF8dKD9NOF6U9ve5W8BHlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzBlZDMz
YS0xZjFkLTQyODEtYWIzOS00MDg5MDEzMGRkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMGVkMzNh
LTFmMWQtNDI4MS1hYjM5LTQwODkwMTMwZGQxOC8xL3JtUmF5d0lYeDBvUDAwNFhw
VDI5N2xid0VlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufLAMA0EAgACMAcDBQAqDOOAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMv9zANBgkqhkiG9w0BAQsFAAOCAQEAKEJkrxkgyvYW
N25BZYOhCnwmlICevHwzQO+tMpg4Z+dm6d3ZQMgDR5qbXtnTikFTI7x2eOLSWHNC
S42tpzB/9OjuvmQWD5dHql8gsYyjwGeSzB7WON0vW3s8CPqkdsWrSGjWwBk1opLf
4V85yK5LFdHNsoYlFEwk3kZXsWvrW4OK4dvFyZV6cHMJL3oTu2GECJnk6AQMkzYY
C+/uOuj8sefJPLrD2SJfiWumJIARkc5CeqmWqbfLKq/nxA79c3J4TDEOCpJymQJ3
iQHqoD2fwpv0yFJaTKvor7bavG8HECDqMtHSBCcjj6wtUSLxMflAHjwBGhgtnnc7
uv2I45PvKA==
-----END CERTIFICATE-----