Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.cer (raw, json)
Hash identifier:          jqSu0F0vmHKNFfjHC7+B4Gv03OsAsWYgmwprdEDD0G8=
Subject key identifier:   C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445994D45D3872A07A711A8B8E512AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60023
                          IP: 185.62.52.0/22
                          IP: 2a04:ef40::/29
                          IP: 2a0b:d180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:99:4d:45:d3:87:2a:07:a7:11:a8:b8:e5:12:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:a4:1c:a9:52:0d:08:8b:1a:45:16:ff:eb:
                    2c:41:fa:f2:a7:ef:a1:87:91:06:fa:cb:0f:d4:a7:
                    d4:88:33:d3:dd:ee:ea:74:57:bc:4d:e7:94:35:4f:
                    7e:c7:cb:74:03:a2:60:b2:17:7b:b9:1c:ca:9a:fb:
                    a5:5c:6c:1d:4a:e1:95:80:1d:d2:27:e4:40:ad:be:
                    aa:6b:3d:12:18:81:32:61:cb:e6:bc:50:11:2c:bb:
                    e0:58:21:c1:5f:f0:e4:e9:0f:69:69:c0:22:7a:1f:
                    1f:69:ef:77:72:02:51:15:a5:eb:0b:4c:5d:b7:45:
                    93:51:3b:84:d7:60:44:19:e6:f0:68:62:bb:e8:96:
                    62:86:42:59:e0:e8:b1:e6:50:9c:41:e1:38:fc:f0:
                    fb:e5:55:8c:cc:df:92:ab:d3:79:ea:25:6e:b5:5f:
                    d5:2a:05:30:0a:54:9c:cf:30:8d:9c:77:88:6d:c6:
                    48:92:00:25:85:38:9d:cc:0f:83:3d:6c:21:75:ee:
                    67:c0:7c:8f:b2:f0:9e:ae:7e:57:63:6e:1c:7c:32:
                    ec:52:51:69:ff:40:cd:e5:57:af:18:9f:99:56:f7:
                    4f:ed:d6:10:90:6d:e3:c6:c3:94:04:68:db:9a:52:
                    90:10:d7:87:ba:df:27:30:37:7d:76:85:d6:ec:82:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.52.0/22
                IPv6:
                  2a04:ef40::/29
                  2a0b:d180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60023

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:86:cb:f8:9d:e8:a1:70:b9:ea:17:8f:aa:bf:77:c4:7d:
         cc:ad:d1:a2:40:c7:62:77:cd:ec:a5:c1:c3:7c:bd:42:b1:85:
         85:6e:b7:2f:b3:35:60:ca:ad:f1:46:2a:5b:89:b6:ee:bf:da:
         3e:82:5e:76:09:3d:0a:8c:d3:70:41:5c:9f:b2:df:a7:ad:d8:
         fd:43:9b:8c:4a:9f:e5:4d:0f:a9:6c:45:22:04:3e:fe:d1:74:
         b3:aa:09:12:60:59:5a:37:77:05:d6:6b:2e:a1:a5:ca:f5:22:
         2a:f4:41:e2:52:f7:f4:3e:d3:4f:03:d7:29:1a:9e:6e:26:c9:
         70:ed:5c:b0:d7:57:98:71:9d:da:bb:d7:c4:31:ab:38:3f:5e:
         06:06:5a:03:1c:c0:8c:04:fb:7a:cd:15:d4:6f:e8:fe:8c:f6:
         62:1e:21:60:9f:c8:04:0d:b4:90:df:25:81:2b:80:4b:93:09:
         a9:6f:8c:07:23:08:5c:37:d2:96:97:ca:01:f7:1d:f7:9c:f3:
         24:61:94:f5:f2:04:a6:3b:05:aa:b1:0c:5a:e7:63:97:1d:05:
         11:4c:6a:c4:7e:13:67:8d:fb:a3:fc:11:1c:5a:99:24:64:09:
         61:5e:6d:3a:e1:b7:c1:df:8c:b8:7b:7d:26:83:84:ad:30:e3:
         a3:83:a5:f2
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZQkRZlNRdOHKgenEai45RKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQxYWUyNjEyZDI1MjcxNjdjODNmN2FmYzE2ZjVlNjc0ZDg4YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCmkHKlSDQiLGkUW/+ssQfryp++h
h5EG+ssP1KfUiDPT3e7qdFe8TeeUNU9+x8t0A6Jgshd7uRzKmvulXGwdSuGVgB3S
J+RArb6qaz0SGIEyYcvmvFARLLvgWCHBX/Dk6Q9pacAieh8fae93cgJRFaXrC0xd
t0WTUTuE12BEGebwaGK76JZihkJZ4Oix5lCcQeE4/PD75VWMzN+Sq9N56iVutV/V
KgUwClSczzCNnHeIbcZIkgAlhTidzA+DPWwhde5nwHyPsvCern5XY24cfDLsUlFp
/0DN5VevGJ+ZVvdP7dYQkG3jxsOUBGjbmlKQENeHut8nMDd9doXW7IJNbQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFMRBriYS0lJxZ8g/evwW9eZ02IsPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2VjZGUz
ZS0xZmNmLTQ1MzEtYjBmOS0yNGU3ZTZhZGExZTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvZWNkZTNl
LTFmY2YtNDUzMS1iMGY5LTI0ZTdlNmFkYTFlMi8xL3hFR3VKaExTVW5GbnlEOTZf
QmIxNW5UWWl3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF
BwEHAQH/BCYwJDAMBAIAATAGAwQCuT40MBQEAgACMA4DBQMqBO9AAwUDKgvRgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA6ncwDQYJKoZIhvcNAQELBQADggEBABsK
hsv4neihcLnqF4+qv3fEfcyt0aJAx2J3zeylwcN8vUKxhYVuty+zNWDKrfFGKluJ
tu6/2j6CXnYJPQqM03BBXJ+y36et2P1Dm4xKn+VND6lsRSIEPv7RdLOqCRJgWVo3
dwXWay6hpcr1Iir0QeJS9/Q+008D1ykanm4myXDtXLDXV5hxndq718Qxqzg/XgYG
WgMcwIwE+3rNFdRv6P6M9mIeIWCfyAQNtJDfJYErgEuTCalvjAcjCFw30paXygH3
Hfec8yRhlPXyBKY7BaqxDFrnY5cdBRFMasR+E2eN+6P8ERxamSRkCWFebTrht8Hf
jLh7fSaDhK0w46ODpfI=
-----END CERTIFICATE-----