Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
File:                     xRCtRomJb7hQznkP3-NE1MAnpa4.cer (raw, json)
Hash identifier:          cHeN+3kwk1/lTLf7/x0v55M5pMwGXCRorqe9483lHkM=
Subject key identifier:   C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBE727E6F82B23B6A2485611D6DB17
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208557
                          IP: 45.129.72.0/22
                          IP: 2a0e:45c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:e7:27:e6:f8:2b:23:b6:a2:48:56:11:d6:db:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:31:6e:1d:74:4f:ea:fb:c1:cc:ec:bf:00:
                    2f:dc:98:bf:f5:41:f9:d1:da:b4:c9:80:ac:64:a8:
                    6e:17:38:22:08:62:06:7e:4a:d2:ac:d6:10:f3:7f:
                    ee:29:f0:7d:98:e5:a1:7f:48:ce:06:f7:b8:dc:db:
                    ff:30:33:8d:44:cd:55:c0:ed:04:98:1e:c4:45:cb:
                    b7:df:65:76:f9:95:3a:c1:fb:53:80:66:25:c6:bf:
                    d0:9f:c1:71:3c:ea:0d:f0:8f:84:a4:fd:cc:98:37:
                    f9:00:58:8d:c7:10:8f:57:35:62:ac:e9:76:19:48:
                    96:97:2a:bf:71:22:72:f3:e6:38:e1:38:52:18:13:
                    d9:93:63:c9:e5:91:82:9b:b0:92:c0:9b:e6:95:35:
                    b7:1e:ea:32:af:18:98:70:2b:a1:7c:ab:16:85:d1:
                    8f:25:36:46:35:ae:7d:25:54:b3:c3:14:86:4f:5d:
                    e2:f2:29:29:f7:c6:88:cc:60:59:82:09:e8:cd:13:
                    8e:1c:d5:5c:05:33:d3:bd:1b:ba:a1:b7:a9:a6:9f:
                    07:94:ae:c6:13:9e:ae:64:4a:bc:8b:13:96:1e:ed:
                    a5:3f:b4:3a:d8:92:9c:96:a7:6f:d5:9f:ce:18:1c:
                    b5:eb:cf:1a:54:ce:a0:44:04:75:8d:71:1e:4c:06:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.72.0/22
                IPv6:
                  2a0e:45c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208557

    Signature Algorithm: sha256WithRSAEncryption
         26:db:b8:a5:72:1a:15:f7:db:61:85:84:1a:89:92:94:46:40:
         83:6a:2b:a0:65:51:45:c0:d3:12:71:98:46:ab:5e:03:cc:c3:
         ec:70:2e:83:45:8b:93:5a:40:5d:b1:4e:09:c9:82:b9:d0:2b:
         d7:af:8d:be:b0:15:28:5b:a7:b9:08:ae:e9:a5:a8:6b:55:c7:
         03:2e:51:96:67:bc:2e:65:36:a5:bb:d1:52:f3:37:35:b8:ad:
         34:0a:08:ff:30:7e:3f:51:64:e2:88:8e:03:51:c6:44:27:d4:
         99:9d:ff:02:d0:a6:6f:7a:08:59:ed:a4:8a:76:5f:bf:a3:9a:
         63:48:ff:7d:d1:b2:9a:85:d5:52:c3:42:4a:14:ab:2c:1a:9b:
         a1:bc:53:84:c2:4f:c3:4b:7f:4a:d4:4a:d0:b0:ef:e2:0d:5e:
         3c:4e:5c:97:99:4c:fb:67:63:9d:8f:34:37:7f:ff:73:f7:d9:
         03:eb:f5:d8:c3:eb:63:5b:fb:da:ab:0c:d5:ce:32:a2:f2:d3:
         25:ef:51:d2:68:a9:48:d2:81:c6:15:27:d6:6b:c5:07:bb:89:
         b5:ea:b9:eb:87:92:83:e4:ba:b4:78:c7:2b:dd:dc:43:35:26:
         cf:c7:3b:fe:ac:9c:70:c8:9d:8f:f3:16:df:6e:59:d1:9d:2d:
         4c:4b:eb:99
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi++cn5vgrI7aiSFYR1tsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTEwYWQ0Njg5ODk2ZmI4NTBjZTc5MGZkZmUzNDRkNGMwMjdhNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhUxbh10T+r7wczsvwAv3Ji/9UH5
0dq0yYCsZKhuFzgiCGIGfkrSrNYQ83/uKfB9mOWhf0jOBve43Nv/MDONRM1VwO0E
mB7ERcu332V2+ZU6wftTgGYlxr/Qn8FxPOoN8I+EpP3MmDf5AFiNxxCPVzVirOl2
GUiWlyq/cSJy8+Y44ThSGBPZk2PJ5ZGCm7CSwJvmlTW3HuoyrxiYcCuhfKsWhdGP
JTZGNa59JVSzwxSGT13i8ikp98aIzGBZggnozROOHNVcBTPTvRu6obeppp8HlK7G
E56uZEq8ixOWHu2lP7Q62JKclqdv1Z/OGBy1688aVM6gRAR1jXEeTAaVdQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMUQrUaJiW+4UM55D9/jRNTAJ6WuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzY1Zjk1
NC0zZjg4LTQzNTctOTY0Mi05YTE2ZDljMGNhZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNjVmOTU0
LTNmODgtNDM1Ny05NjQyLTlhMTZkOWMwY2FmNy8xL3hSQ3RSb21KYjdoUXpua1Az
LU5FMU1BbnBhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYFIMA0EAgACMAcDBQMqDkXAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMurTANBgkqhkiG9w0BAQsFAAOCAQEAJtu4pXIaFffb
YYWEGomSlEZAg2oroGVRRcDTEnGYRqteA8zD7HAug0WLk1pAXbFOCcmCudAr16+N
vrAVKFunuQiu6aWoa1XHAy5Rlme8LmU2pbvRUvM3NbitNAoI/zB+P1Fk4oiOA1HG
RCfUmZ3/AtCmb3oIWe2kinZfv6OaY0j/fdGymoXVUsNCShSrLBqbobxThMJPw0t/
StRK0LDv4g1ePE5cl5lM+2djnY80N3//c/fZA+v12MPrY1v72qsM1c4yovLTJe9R
0mipSNKBxhUn1mvFB7uJteq564eSg+S6tHjHK93cQzUmz8c7/qyccMidj/MW325Z
0Z0tTEvrmQ==
-----END CERTIFICATE-----