Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
File:                     xVfBW97s57ChtHfh4O6L_1P6_gw.cer (raw, json)
Hash identifier:          ya+03uhY/MvYCqIJDmPNlqv/hCB8mehI3NTXnMYsPR4=
Subject key identifier:   C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954D17A3F508DB5BC5C317A31FAD2E8C25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 15:05:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213576
                          IP: 91.213.28.0/24
                          IP: 2001:678:104c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4d:17:a3:f5:08:db:5b:c5:c3:17:a3:1f:ad:2e:8c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 15:05:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:66:d5:de:59:22:fd:50:23:86:52:36:8d:
                    89:3a:14:e9:50:ed:f2:26:21:16:00:73:4d:9f:b9:
                    1c:66:3c:42:0d:73:c6:56:ea:f2:b8:5c:20:61:86:
                    3e:ae:40:92:5d:b2:2e:a2:5d:36:08:05:b4:5e:72:
                    f7:0a:14:4e:23:46:dc:0c:44:57:df:a0:b1:1c:30:
                    2a:2d:8c:64:dd:3e:c7:26:fb:5e:64:b1:22:ba:5e:
                    02:11:cb:23:6f:3f:42:f2:49:4b:d8:3f:85:b2:5d:
                    2e:5e:be:25:1a:de:7e:93:20:6c:6a:a7:c5:c5:95:
                    6d:78:30:2a:3b:0d:cc:2c:17:f1:a2:9f:49:90:4f:
                    c7:00:ad:6c:a3:5b:22:64:e8:e2:21:cf:03:82:a0:
                    65:09:21:28:2e:f5:33:a2:50:cc:6d:e9:81:dc:41:
                    2c:3e:d5:0c:4e:9a:0f:ef:f6:6f:94:69:fb:c4:99:
                    cd:6c:d6:28:51:60:05:53:53:68:a5:a4:72:d9:1b:
                    37:18:7e:6b:e8:a9:b0:4f:d6:3d:58:02:e6:82:f0:
                    26:ac:8d:0c:22:07:4f:2a:bd:8b:49:f8:64:17:90:
                    0e:f8:78:0e:8e:f3:1a:fb:06:7b:c6:7b:17:1f:7d:
                    83:42:0d:09:35:00:03:c6:47:85:0f:dd:81:ba:83:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.28.0/24
                IPv6:
                  2001:678:104c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213576

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:5e:88:fe:3d:4e:2b:55:27:70:f4:80:92:c5:3d:5d:f6:
         36:3c:5e:2c:5a:d6:b2:cd:91:24:fe:48:7a:5a:56:a6:08:88:
         f3:16:52:d8:e0:09:fa:dd:74:90:9b:94:89:63:a1:b6:ea:cf:
         31:46:e4:53:c0:b4:d3:9b:45:4b:46:0c:2c:15:6f:fc:29:3d:
         56:7b:e5:a2:a5:72:39:84:02:2f:68:18:32:ad:ba:c0:0d:9b:
         95:9c:72:88:01:83:76:c9:57:81:94:43:72:72:d6:85:42:cb:
         26:28:ac:5b:9b:8a:a1:5d:c9:db:d5:56:94:ef:94:1e:ac:49:
         9c:32:96:7b:80:0e:4f:06:b5:f4:ef:e9:46:07:c7:97:09:aa:
         32:70:48:0a:86:55:ad:77:9a:eb:32:5b:a8:6b:ad:25:ac:5a:
         d3:33:38:bd:97:b5:43:1f:21:ab:8b:2f:28:c7:4a:18:91:62:
         df:b2:46:cf:7c:10:43:97:85:02:e8:81:69:ce:2b:31:4f:07:
         46:c8:f3:a4:6b:07:22:61:86:38:fa:f1:a5:d5:2e:d7:54:97:
         29:8b:ed:e2:37:f5:db:8f:c7:9e:79:71:eb:e2:5c:1a:2b:c6:
         16:21:6b:24:26:e7:7f:07:53:ed:24:07:b4:92:d3:61:0e:47:
         c6:8b:1e:ed
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZVNF6P1CNtbxcMXox+tLowlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI4MTUwNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTU3YzE1YmRlZWNlN2IwYTFiNDc3ZTFlMGVlOGJmZjUzZmFmZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39tm1d5ZIv1QI4ZSNo2JOhTpUO3y
JiEWAHNNn7kcZjxCDXPGVuryuFwgYYY+rkCSXbIuol02CAW0XnL3ChROI0bcDERX
36CxHDAqLYxk3T7HJvteZLEiul4CEcsjbz9C8klL2D+Fsl0uXr4lGt5+kyBsaqfF
xZVteDAqOw3MLBfxop9JkE/HAK1so1siZOjiIc8DgqBlCSEoLvUzolDMbemB3EEs
PtUMTpoP7/ZvlGn7xJnNbNYoUWAFU1NopaRy2Rs3GH5r6KmwT9Y9WALmgvAmrI0M
IgdPKr2LSfhkF5AO+HgOjvMa+wZ7xnsXH32DQg0JNQADxkeFD92BuoPEZQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFMVXwVve7OewobR34eDui/9T+v4MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzMyYThk
ZC0zOWIzLTQ3OTEtYTVlNC1kYmRiZTE5M2M5NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMzJhOGRk
LTM5YjMtNDc5MS1hNWU0LWRiZGJlMTkzYzk3NC8xL3hWZkJXOTdzNTdDaHRIZmg0
TzZMXzFQNl9ndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW9UcMA8EAgACMAkDBwAgAQZ4EEwwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDA0JIMA0GCSqGSIb3DQEBCwUAA4IBAQALEl6I/j1O
K1UncPSAksU9XfY2PF4sWtayzZEk/kh6WlamCIjzFlLY4An63XSQm5SJY6G26s8x
RuRTwLTTm0VLRgwsFW/8KT1We+WipXI5hAIvaBgyrbrADZuVnHKIAYN2yVeBlENy
ctaFQssmKKxbm4qhXcnb1VaU75QerEmcMpZ7gA5PBrX07+lGB8eXCaoycEgKhlWt
d5rrMluoa60lrFrTMzi9l7VDHyGriy8ox0oYkWLfskbPfBBDl4UC6IFpzisxTwdG
yPOkawciYYY4+vGl1S7XVJcpi+3iN/Xbj8eeeXHr4lwaK8YWIWskJud/B1PtJAe0
ktNhDkfGix7t
-----END CERTIFICATE-----