Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
File:                     5fmtISzWWrTuK46bP4uDPDkA6n0.cer (raw, json)
Hash identifier:          Q8zXVzANL7wJjRyln41+vGfRdhTDFiHMh5zFUcK2G3U=
Subject key identifier:   E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB2F4046E0444DD360346E5C1BE426
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58209
                          IP: 217.18.81.0/24
                          IP: 2a0e:5e40::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:2f:40:46:e0:44:4d:d3:60:34:6e:5c:1b:e4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:31:18:11:12:85:ea:6d:5e:fd:be:bf:43:
                    66:80:e3:3f:00:e9:c8:b6:1d:33:2d:79:40:fb:82:
                    07:a0:0e:67:6b:8b:f9:0e:b9:12:93:38:a7:3d:3b:
                    58:a5:88:d3:a7:72:ec:2b:18:7e:1d:f2:84:ad:4a:
                    d7:be:9a:5a:6f:38:8f:10:a1:d8:e9:aa:44:fe:e9:
                    4d:f8:50:ce:5f:d2:20:c2:85:02:92:d6:b6:e5:38:
                    e0:17:4a:81:05:56:cb:66:28:fb:74:54:e1:20:6e:
                    af:c6:43:ff:72:87:fb:1b:e1:2e:22:6f:00:55:df:
                    83:2f:02:6f:e3:85:c6:77:d4:6f:06:08:47:3e:02:
                    c9:71:2f:ea:8a:7c:7f:05:63:18:e9:47:4f:f1:cb:
                    3d:8d:1e:e8:b6:5d:72:74:82:23:32:88:c2:cd:8a:
                    c0:24:33:4a:76:5b:8a:5d:82:da:18:d7:d6:52:53:
                    05:35:26:5e:97:89:76:89:4a:74:b7:12:ee:26:ce:
                    5c:c2:d2:07:46:a4:95:c9:f0:17:91:91:f2:1d:d9:
                    45:0e:fc:d6:95:47:0e:d7:35:d9:c2:a9:41:1f:9c:
                    4c:54:25:7d:ad:b8:7a:1f:cf:55:80:41:d2:0f:d1:
                    f3:dd:c8:e2:ac:dc:bc:0a:4e:0a:0e:07:11:9d:55:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.18.81.0/24
                IPv6:
                  2a0e:5e40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58209

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:54:22:61:b4:fa:e1:42:53:7c:3b:15:39:3c:e5:a7:fd:
         60:76:61:af:0b:0c:65:c1:07:0e:84:17:d9:78:96:97:c6:7d:
         82:44:32:aa:06:ca:55:9a:f3:29:b0:57:8a:a4:f3:65:c5:d5:
         c0:cb:33:64:0e:47:c8:f0:f2:63:2c:98:a3:e6:f6:cb:5f:be:
         70:62:df:73:b6:8a:60:3c:18:b8:86:73:bc:72:88:55:9c:63:
         26:be:f4:3f:5f:91:cd:dc:2d:44:6d:c5:78:99:49:ee:04:5b:
         42:03:8f:27:c0:27:13:29:81:fe:b6:80:03:56:cf:4f:df:12:
         13:7e:2c:a1:16:3b:41:46:96:34:74:1c:a9:e8:3e:fd:f9:12:
         dd:f1:cf:aa:d2:0b:e6:b0:6f:52:84:15:b0:3b:f3:f8:16:92:
         99:29:5e:2a:be:04:1a:4a:7c:dd:58:7f:ef:76:9f:27:05:7c:
         03:1e:b4:91:b6:b0:63:e2:05:74:4f:3e:ba:df:98:6f:fb:5d:
         1b:57:07:8c:e4:bc:37:fb:d9:ce:92:a7:0f:33:3d:37:4a:05:
         b7:95:66:8f:62:5d:5c:29:5c:48:33:49:74:be:c8:97:21:0e:
         dc:70:7c:34:79:18:db:ca:ac:0e:f6:30:71:b0:d0:61:27:38:
         6c:bf:da:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi+y9ARuBETdNgNG5cG+QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWY5YWQyMTJjZDY1YWI0ZWUyYjhlOWIzZjhiODMzYzM5MDBlYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeQxGBESheptXv2+v0NmgOM/AOnI
th0zLXlA+4IHoA5na4v5DrkSkzinPTtYpYjTp3LsKxh+HfKErUrXvppabziPEKHY
6apE/ulN+FDOX9IgwoUCkta25TjgF0qBBVbLZij7dFThIG6vxkP/cof7G+EuIm8A
Vd+DLwJv44XGd9RvBghHPgLJcS/qinx/BWMY6UdP8cs9jR7otl1ydIIjMojCzYrA
JDNKdluKXYLaGNfWUlMFNSZel4l2iUp0txLuJs5cwtIHRqSVyfAXkZHyHdlFDvzW
lUcO1zXZwqlBH5xMVCV9rbh6H89VgEHSD9Hz3cjirNy8Ck4KDgcRnVVDXwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOX5rSEs1lq07iuOmz+Lgzw5AOp9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2Y4MDky
Ni1lOWE5LTQxZjktOTVhMC05YjgxM2EyMDAyYWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvZjgwOTI2
LWU5YTktNDFmOS05NWEwLTliODEzYTIwMDJhYS8xLzVmbXRJU3pXV3JUdUs0NmJQ
NHVEUERrQTZuMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA2RJRMA0EAgACMAcDBQMqDl5AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDjYTANBgkqhkiG9w0BAQsFAAOCAQEAo7NUImG0+uFC
U3w7FTk85af9YHZhrwsMZcEHDoQX2XiWl8Z9gkQyqgbKVZrzKbBXiqTzZcXVwMsz
ZA5HyPDyYyyYo+b2y1++cGLfc7aKYDwYuIZzvHKIVZxjJr70P1+RzdwtRG3FeJlJ
7gRbQgOPJ8AnEymB/raAA1bPT98SE34soRY7QUaWNHQcqeg+/fkS3fHPqtIL5rBv
UoQVsDvz+BaSmSleKr4EGkp83Vh/73afJwV8Ax60kbawY+IFdE8+ut+Yb/tdG1cH
jOS8N/vZzpKnDzM9N0oFt5Vmj2JdXClcSDNJdL7IlyEO3HB8NHkY28qsDvYwcbDQ
YSc4bL/aYA==
-----END CERTIFICATE-----