Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer (raw, json)
Hash identifier:          ALPIW91VaTQ4g2F8M95ga5RNispQRR4vpNw95yde2cw=
Subject key identifier:   CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B625049FB765CEE1F5D91F0A3C2284
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.4.4.0/22
                          IP: 2a02:5e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:25:04:9f:b7:65:ce:e1:f5:d9:1f:0a:3c:22:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:9a:e7:e0:be:3d:cb:db:f5:e7:0e:7c:80:
                    d2:a6:c6:51:0e:9b:96:a1:e9:ee:78:c6:a2:fe:00:
                    39:23:dc:17:75:46:4c:b7:83:a9:19:c5:f4:61:91:
                    2c:b0:dc:c9:b4:c2:50:3e:8b:9b:e3:b5:5f:12:38:
                    27:d7:0c:ee:df:81:04:f8:cf:ec:6e:85:de:59:bd:
                    44:33:55:06:3d:e8:78:47:05:43:27:a8:ae:da:b9:
                    6a:ff:bd:c9:f9:d2:8d:0d:ab:12:1a:c7:18:ec:7c:
                    f1:96:8b:b0:bd:16:5a:9c:a5:dc:df:59:d4:1d:a5:
                    38:5b:d6:2f:6a:ac:ad:6d:02:83:f7:d7:cb:92:ae:
                    1e:8c:4c:32:b3:3c:88:21:01:be:b7:38:7f:f3:de:
                    e1:25:5c:46:ff:91:6c:77:28:58:06:9e:ce:74:4a:
                    dc:28:2a:f0:39:6a:f2:89:93:b3:51:56:86:64:5e:
                    c5:7d:d8:d8:07:ac:db:ce:0b:4d:57:31:93:63:ea:
                    31:89:94:15:d8:14:1c:2d:4e:cd:61:04:67:b5:8d:
                    32:33:af:27:c5:09:fd:cb:ec:02:b6:46:a8:6e:1d:
                    b3:e3:78:79:3e:79:85:20:82:cd:c1:11:66:15:5c:
                    54:c7:5c:67:26:2a:9c:4e:25:0b:6b:3a:40:4a:65:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.4.0/22
                IPv6:
                  2a02:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:a0:b7:eb:eb:7e:d1:4f:4b:f4:70:00:cf:77:03:ea:e6:
         0b:b5:8e:7c:27:5e:a4:d2:3d:42:64:f1:9f:07:e4:be:6a:1e:
         5b:70:f9:06:e1:26:f7:de:c3:3a:c2:16:c0:8e:09:ff:bb:ac:
         22:40:b5:d0:2c:70:a4:14:8f:71:14:26:6e:4e:c9:f3:e4:cf:
         7f:21:23:d2:ce:32:fa:7e:c1:90:e1:e1:7d:5d:1a:7e:ad:53:
         8d:37:f6:90:1c:2e:b4:df:ac:31:f7:b7:3a:9d:d4:d1:0c:fb:
         3d:5e:98:07:74:89:23:73:c0:45:d1:6e:f5:b2:ca:34:35:c0:
         8b:62:52:b0:82:14:a2:c4:c1:ec:e1:33:ca:f0:40:4f:7e:89:
         5c:d0:e3:43:76:b8:92:e2:0a:ab:e1:d5:40:26:51:46:dd:2b:
         f3:59:ed:e1:95:46:de:4d:04:28:14:d2:c4:e2:64:1b:64:55:
         25:59:ff:e5:41:d9:88:36:7c:a3:7c:8c:bb:7c:25:5c:44:8c:
         fe:a9:0a:f5:66:cc:cb:ca:a0:dd:66:a5:12:82:68:10:96:ae:
         f0:ee:c4:f0:ea:db:47:b4:38:e1:06:88:49:bf:28:f3:96:6c:
         8a:7b:4f:af:ba:a9:f9:4d:18:14:5f:15:8b:1d:3c:98:7e:74:
         0d:b4:9c:9e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQntiUEn7dlzuH12R8KPCKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTBjMmRhY2FmZGZhNTM5OTdlZDNiMGE3MGRmYmMyNzBhOTMzYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pua5+C+Pcvb9ecOfIDSpsZRDpuW
oenueMai/gA5I9wXdUZMt4OpGcX0YZEssNzJtMJQPoub47VfEjgn1wzu34EE+M/s
boXeWb1EM1UGPeh4RwVDJ6iu2rlq/73J+dKNDasSGscY7HzxlouwvRZanKXc31nU
HaU4W9YvaqytbQKD99fLkq4ejEwyszyIIQG+tzh/897hJVxG/5FsdyhYBp7OdErc
KCrwOWryiZOzUVaGZF7FfdjYB6zbzgtNVzGTY+oxiZQV2BQcLU7NYQRntY0yM68n
xQn9y+wCtkaobh2z43h5PnmFIILNwRFmFVxUx1xnJiqcTiULazpASmVzkwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMoMLayv36U5l+07CnDfvCcKkzv0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzczMzU5
OC03NGU4LTQ3YWEtOGM4ZS05OWVjODhjNDc3NjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNzMzNTk4
LTc0ZTgtNDdhYS04YzhlLTk5ZWM4OGM0Nzc2MC8xL3lnd3RyS19mcFRtWDdUc0tj
Ti04SndxVE9fUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQQEMA0EAgACMAcDBQAqAl5AMA0GCSqGSIb3
DQEBCwUAA4IBAQCV+KC36+t+0U9L9HAAz3cD6uYLtY58J16k0j1CZPGfB+S+ah5b
cPkG4Sb33sM6whbAjgn/u6wiQLXQLHCkFI9xFCZuTsnz5M9/ISPSzjL6fsGQ4eF9
XRp+rVONN/aQHC6036wx97c6ndTRDPs9XpgHdIkjc8BF0W71sso0NcCLYlKwghSi
xMHs4TPK8EBPfolc0ONDdriS4gqr4dVAJlFG3SvzWe3hlUbeTQQoFNLE4mQbZFUl
Wf/lQdmINnyjfIy7fCVcRIz+qQr1ZszLyqDdZqUSgmgQlq7w7sTw6ttHtDjhBohJ
vyjzlmyKe0+vuqn5TRgUXxWLHTyYfnQNtJye
-----END CERTIFICATE-----