Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
File:                     sXLI1PyYbeufzrHw0MrifBwxNcM.cer (raw, json)
Hash identifier:          C3nOgh4tSJhcNwj0+CAHxhLw5zuyiudZTKElVYK//Tw=
Subject key identifier:   B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D8F6EEA45406239AF2C7DD53FA9951
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61310
                          IP: 5.63.176.0/21
                          IP: 2a04:5d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:f6:ee:a4:54:06:23:9a:f2:c7:dd:53:fa:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:e4:77:fa:06:f4:6f:8d:3e:4e:8c:e0:e5:
                    bf:35:21:8b:d9:5a:1e:3a:e7:b0:ba:fc:60:50:b8:
                    46:7d:50:fa:54:e7:de:7e:1b:d3:b7:53:53:8e:cd:
                    a6:30:10:9a:12:4c:59:4d:7c:d7:de:29:3f:8e:94:
                    34:9c:90:52:bc:ae:0c:c7:32:63:4b:1c:fb:85:e4:
                    72:1e:62:a5:2b:eb:fe:8f:e9:da:d9:0a:dc:1d:69:
                    b6:d7:45:4d:12:16:d8:f6:64:fb:eb:5c:4f:97:06:
                    c1:27:4f:5d:99:38:7b:ef:a4:07:4f:9c:0c:82:76:
                    5f:7d:e3:26:58:76:18:c0:57:02:d9:4d:41:ef:c8:
                    f3:e4:6d:df:b9:1f:6f:d0:c7:f1:14:c0:2b:23:84:
                    45:3c:00:e6:44:37:a2:0f:13:43:3f:48:9c:1a:57:
                    b3:a5:ea:9b:38:d3:4d:d5:a5:87:2b:c2:22:c4:16:
                    2c:8e:ac:a7:63:c2:e7:c3:33:79:52:5d:ed:7d:33:
                    17:77:c7:05:01:2d:00:bd:1c:47:7a:c9:9a:c6:69:
                    6b:c4:b3:28:df:cb:61:6c:38:03:67:a3:94:88:54:
                    48:2d:5a:ef:d7:b3:36:c4:fb:75:b5:e7:fc:55:ec:
                    9c:8a:b2:da:2f:f5:48:a5:92:aa:7e:7d:68:3e:f0:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.176.0/21
                IPv6:
                  2a04:5d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61310

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:2a:3b:22:c5:90:57:fb:00:6c:c5:21:a2:03:79:1d:7b:
         a1:df:b3:8b:31:65:2e:37:15:52:fa:be:dd:ad:ad:77:b6:28:
         d0:06:cf:58:5c:83:61:94:7f:15:99:80:69:ac:4d:b1:dd:e4:
         1b:ac:87:64:f8:3b:35:46:66:79:c4:7b:d3:b3:2a:06:88:89:
         5c:61:8e:ab:dd:cf:54:f3:88:19:d2:e2:2e:40:fd:ce:1a:e4:
         ae:c7:3f:d8:e2:6a:b7:67:48:2d:ea:0a:00:9a:18:e9:ad:eb:
         90:3f:0b:09:c0:4b:53:d9:dc:c9:8f:cb:f8:bb:b5:67:ab:24:
         74:28:fc:30:4c:bb:17:2a:ed:30:cc:00:da:43:d3:fc:1c:49:
         36:2c:57:21:bd:97:20:88:55:69:ba:6a:58:c2:8f:28:a6:5a:
         e1:ac:2c:a0:9f:f2:ba:2c:96:73:dd:0d:ae:ed:04:da:b8:9e:
         f8:fc:c2:81:d1:cd:06:0b:19:61:f8:76:87:2f:fc:2e:fa:a5:
         65:8d:61:a2:dc:8d:66:b4:81:c8:3c:9f:01:64:a7:ff:5d:b5:
         67:78:5a:16:5a:fd:40:1e:83:3d:c1:51:70:70:d0:53:8c:97:
         00:0b:68:3e:29:30:45:dd:76:d8:e3:24:b0:92:77:16:72:cc:
         69:cc:ee:28
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2PbupFQGI5ryx91T+plRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTcyYzhkNGZjOTg2ZGViOWZjZWIxZjBkMGNhZTI3YzFjMzEzNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLkd/oG9G+NPk6M4OW/NSGL2Voe
OuewuvxgULhGfVD6VOfefhvTt1NTjs2mMBCaEkxZTXzX3ik/jpQ0nJBSvK4MxzJj
Sxz7heRyHmKlK+v+j+na2QrcHWm210VNEhbY9mT761xPlwbBJ09dmTh776QHT5wM
gnZffeMmWHYYwFcC2U1B78jz5G3fuR9v0MfxFMArI4RFPADmRDeiDxNDP0icGlez
peqbONNN1aWHK8IixBYsjqynY8LnwzN5Ul3tfTMXd8cFAS0AvRxHesmaxmlrxLMo
38thbDgDZ6OUiFRILVrv17M2xPt1tef8VeycirLaL/VIpZKqfn1oPvCmxwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLFyyNT8mG3rn86x8NDK4nwcMTXDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2JiM2I2
Mi0zMzAyLTQ1YWEtOTY4YS1lY2JiM2ZjMGE3MjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYmIzYjYy
LTMzMDItNDVhYS05NjhhLWVjYmIzZmMwYTcyNS8xL3NYTEkxUHlZYmV1ZnpySHcw
TXJpZkJ3eE5jTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBT+wMA0EAgACMAcDBQMqBF2AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDvfjANBgkqhkiG9w0BAQsFAAOCAQEAdd0qOyLFkFf7
AGzFIaIDeR17od+zizFlLjcVUvq+3a2td7Yo0AbPWFyDYZR/FZmAaaxNsd3kG6yH
ZPg7NUZmecR707MqBoiJXGGOq93PVPOIGdLiLkD9zhrkrsc/2OJqt2dILeoKAJoY
6a3rkD8LCcBLU9ncyY/L+Lu1Z6skdCj8MEy7FyrtMMwA2kPT/BxJNixXIb2XIIhV
abpqWMKPKKZa4awsoJ/yuiyWc90Nru0E2rie+PzCgdHNBgsZYfh2hy/8LvqlZY1h
otyNZrSByDyfAWSn/121Z3haFlr9QB6DPcFRcHDQU4yXAAtoPikwRd122OMksJJ3
FnLMaczuKA==
-----END CERTIFICATE-----