Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
File:                     woWhR044Yn4wGlUb4076RYKlzzk.cer (raw, json)
Hash identifier:          sGLpkVhphW7vJEaLwBfxJS7WGwWF+5kd/AZLNF3LpSE=
Subject key identifier:   C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6BADD15C74F8A9508E5FD845C9771
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201419
                          AS: 201822
                          IP: 81.173.42.0/23
                          IP: 185.62.160.0/22
                          IP: 2a03:520::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:ba:dd:15:c7:4f:8a:95:08:e5:fd:84:5c:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c285a1474e38627e301a551be34efa4582a5cf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:c7:07:5f:73:68:a4:bc:c8:fe:68:df:ac:
                    5e:d9:3f:33:23:16:05:69:4d:26:b5:34:d4:fe:7c:
                    c0:44:8c:2a:18:00:b7:2d:25:3c:6a:b4:6f:e0:24:
                    7d:aa:15:bc:5d:b7:b4:30:31:a1:c2:9f:13:59:15:
                    98:8e:6c:f6:2b:e7:6b:09:8a:e8:4b:cc:4e:ff:dc:
                    d7:7f:0b:3a:3f:28:d3:6c:32:b5:e9:6c:0d:97:07:
                    16:c1:e7:26:3d:59:60:c3:c6:8c:68:73:99:b1:8c:
                    34:7d:6d:b0:08:94:1b:3a:96:fd:dc:c0:0e:0d:2b:
                    3e:38:96:dc:0e:f4:5c:60:27:77:71:2c:8e:1b:04:
                    67:be:f0:e2:03:b9:87:43:08:f2:a4:b7:67:04:16:
                    6a:c6:9c:00:a3:1f:98:3f:56:cc:eb:5a:09:de:9a:
                    a9:a2:4e:c3:ca:34:55:6b:9e:a8:ef:35:6e:43:d4:
                    ce:0b:3a:20:46:d8:f6:48:52:3f:20:42:e2:0f:54:
                    44:6d:89:54:ce:6f:a6:d9:82:14:73:72:83:95:93:
                    ba:64:7f:6f:f3:6c:1b:5a:b3:1e:08:28:8e:fe:03:
                    f2:91:b6:ef:7c:1a:25:01:43:37:81:83:54:90:85:
                    56:1a:f9:05:57:ea:b8:59:18:c3:4c:81:5c:55:74:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.173.42.0/23
                  185.62.160.0/22
                IPv6:
                  2a03:520::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201419
                  201822

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:a0:bc:e4:a2:1f:02:f4:49:e8:63:a5:b0:a3:f2:01:b5:
         ff:5f:1c:25:3b:53:69:e8:42:d1:db:e0:a6:53:6a:db:b5:2b:
         b8:77:08:b2:42:27:07:46:72:e5:46:a2:2b:39:95:43:ec:3f:
         63:63:13:2a:8b:e0:d6:ed:a3:c4:b6:e1:78:ed:97:7c:10:51:
         97:42:8e:51:99:4f:36:cf:ec:9f:3e:85:8c:31:b8:4f:61:75:
         2a:58:08:cf:0e:51:19:12:9f:0d:5f:61:77:73:2b:d0:5e:99:
         7e:ae:dd:7f:60:1f:94:c2:72:7a:37:4c:e6:15:8a:56:8e:87:
         f1:4b:c9:3c:1e:d3:64:b8:6d:6c:dd:86:51:b6:a2:bf:94:bf:
         e4:7e:5b:ad:39:15:81:59:e4:6e:58:93:fe:6e:0e:50:8b:ce:
         9e:97:d0:96:a0:17:16:a5:45:54:57:22:86:f9:1f:54:2d:d4:
         e9:84:99:66:86:3a:7d:fc:3c:7c:8f:ed:8b:28:8d:c0:b8:f5:
         19:ac:de:2d:f0:c3:7d:8e:76:98:59:82:ce:e0:9c:04:65:d1:
         f2:97:ce:58:3e:ef:03:d3:ae:42:d0:95:e0:9c:88:af:95:9e:
         7f:48:ae:29:56:31:7e:20:82:4f:7f:31:b5:c5:da:d0:d7:9e:
         2c:50:cc:7c
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQj1rrdFcdPipUI5f2EXJdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjg1YTE0NzRlMzg2MjdlMzAxYTU1MWJlMzRlZmE0NTgyYTVjZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obHB19zaKS8yP5o36xe2T8zIxYF
aU0mtTTU/nzARIwqGAC3LSU8arRv4CR9qhW8Xbe0MDGhwp8TWRWYjmz2K+drCYro
S8xO/9zXfws6PyjTbDK16WwNlwcWwecmPVlgw8aMaHOZsYw0fW2wCJQbOpb93MAO
DSs+OJbcDvRcYCd3cSyOGwRnvvDiA7mHQwjypLdnBBZqxpwAox+YP1bM61oJ3pqp
ok7DyjRVa56o7zVuQ9TOCzogRtj2SFI/IELiD1REbYlUzm+m2YIUc3KDlZO6ZH9v
82wbWrMeCCiO/gPykbbvfBolAUM3gYNUkIVWGvkFV+q4WRjDTIFcVXQ+iQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFMKFoUdOOGJ+MBpVG+NO+kWCpc85MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2I0OWY4
MS04NTM2LTRhNjctODk5Zi1kNWU2Mzg1NmQ1NWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYjQ5Zjgx
LTg1MzYtNGE2Ny04OTlmLWQ1ZTYzODU2ZDU1ZC8xL3dvV2hSMDQ0WW40d0dsVWI0
MDc2UllLbHp6ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBUa0qAwQCuT6gMA0EAgACMAcDBQMqAwUgMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMSywIDAxReMA0GCSqGSIb3DQEBCwUAA4IB
AQBzC6C85KIfAvRJ6GOlsKPyAbX/XxwlO1Np6ELR2+CmU2rbtSu4dwiyQicHRnLl
RqIrOZVD7D9jYxMqi+DW7aPEtuF47Zd8EFGXQo5RmU82z+yfPoWMMbhPYXUqWAjP
DlEZEp8NX2F3cyvQXpl+rt1/YB+UwnJ6N0zmFYpWjofxS8k8HtNkuG1s3YZRtqK/
lL/kflutORWBWeRuWJP+bg5Qi86el9CWoBcWpUVUVyKG+R9ULdTphJlmhjp9/Dx8
j+2LKI3AuPUZrN4t8MN9jnaYWYLO4JwEZdHyl85YPu8D065C0JXgnIivlZ5/SK4p
VjF+IIJPfzG1xdrQ154sUMx8
-----END CERTIFICATE-----