Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
File:                     Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer (raw, json)
Hash identifier:          gDXHoDlJb7l4HelFqCjvIk8wI9ZY+pMWcW3z5jnkmmY=
Subject key identifier:   4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F6B0A1ADB0BCB7CDE080E15CC3DC7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212311
                          IP: 89.34.170.0/24
                          IP: 2a0f:ecc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6b:0a:1a:db:0b:cb:7c:de:08:0e:15:cc:3d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a1d20be77e12232323c1422fb5198fea0086034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:8c:99:46:24:f6:4c:e6:87:d2:73:cc:8d:
                    af:63:0b:e0:57:1d:c6:b6:fd:ab:78:ff:13:95:89:
                    11:86:34:d2:c9:28:a6:e4:d7:95:02:06:e9:01:c3:
                    5a:c5:84:24:d3:ba:ea:a5:22:0c:41:d1:af:26:c2:
                    d9:9e:97:ac:f1:e8:7c:5d:94:31:d9:ba:b7:14:c3:
                    78:d8:ec:7a:5a:df:c6:ff:3b:06:96:9c:68:bb:a2:
                    65:bf:64:45:c5:84:d7:76:36:57:26:bb:6f:32:1c:
                    b8:d9:43:a1:83:13:fb:86:83:0a:0b:e0:c7:9a:4b:
                    b0:df:8e:09:2f:42:ee:fa:2b:e6:bb:83:a5:ed:dc:
                    c5:aa:9d:5a:b6:82:7c:00:f0:8c:37:31:71:1b:6e:
                    e7:d6:92:cb:8f:a5:f8:5a:83:cd:e8:10:92:85:c9:
                    e9:6c:0d:46:b4:3a:42:42:b5:c0:d5:31:a8:0f:99:
                    01:1b:4b:86:c2:50:96:ee:bd:76:de:cb:fa:9d:07:
                    48:e9:07:77:cd:6a:99:45:8f:db:10:97:c3:97:1c:
                    61:58:ea:85:f3:0b:83:73:24:a4:f4:d3:67:f8:1b:
                    cc:6f:f6:19:36:f1:f1:be:71:bf:72:0b:b1:d1:31:
                    07:55:1d:c5:e9:ed:62:b6:87:e5:7d:b4:01:ab:a4:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.34.170.0/24
                IPv6:
                  2a0f:ecc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212311

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:d8:f4:40:ae:57:4b:1e:85:3c:1f:b0:64:71:a3:09:2d:
         cb:71:4e:88:1d:48:2c:b1:e5:97:c4:a7:72:0c:bf:2a:09:4e:
         88:26:ff:5e:99:8d:0d:d7:b8:af:0c:87:a0:98:8a:1f:ad:9f:
         af:6d:fb:42:14:68:36:c3:1a:84:fa:db:83:cd:d3:83:e8:8a:
         61:14:b3:e6:67:72:64:59:a0:46:1a:f5:d3:72:d5:13:73:a7:
         9c:94:ec:e1:d3:17:19:93:02:01:cd:04:61:d9:be:6a:21:0b:
         4a:46:bc:4e:58:50:f9:94:53:fd:bd:b3:c0:68:9d:72:c5:71:
         39:f4:d5:79:66:b4:26:b7:e6:79:be:de:31:87:6e:95:c1:9a:
         cd:4b:bb:16:3b:1a:e5:cd:14:bd:0f:aa:4e:90:65:3b:9e:35:
         6b:0f:75:29:81:ac:4f:21:c3:b0:ba:79:0c:e5:65:a0:a3:01:
         26:5b:9b:66:9e:6c:28:f6:9a:b4:b6:28:bd:15:e9:f8:4d:65:
         9a:84:f9:5b:06:85:bb:21:fa:33:be:3c:5f:01:6b:b1:86:8c:
         31:d9:0a:68:37:5c:7c:09:87:b6:91:d4:82:82:53:81:6e:15:
         c8:49:9e:0d:60:80:49:17:d4:da:2a:06:c0:06:d2:54:5d:dd:
         ce:4d:ab:50
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlj2sKGtsLy3zeCA4VzD3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTFkMjBiZTc3ZTEyMjMyMzIzYzE0MjJmYjUxOThmZWEwMDg2MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqGMmUYk9kzmh9JzzI2vYwvgVx3G
tv2reP8TlYkRhjTSySim5NeVAgbpAcNaxYQk07rqpSIMQdGvJsLZnpes8eh8XZQx
2bq3FMN42Ox6Wt/G/zsGlpxou6Jlv2RFxYTXdjZXJrtvMhy42UOhgxP7hoMKC+DH
mkuw344JL0Lu+ivmu4Ol7dzFqp1atoJ8APCMNzFxG27n1pLLj6X4WoPN6BCShcnp
bA1GtDpCQrXA1TGoD5kBG0uGwlCW7r123sv6nQdI6Qd3zWqZRY/bEJfDlxxhWOqF
8wuDcySk9NNn+BvMb/YZNvHxvnG/cgux0TEHVR3F6e1itoflfbQBq6RKmwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEodIL534SIyMjwUIvtRmP6gCGA0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzYzYzlk
Yi04YWI5LTRjMWUtYWYyNy1lZDI4ODUxZWNiNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNjNjOWRi
LThhYjktNGMxZS1hZjI3LWVkMjg4NTFlY2I3Ni8xL1NoMGd2bmZoSWpJeVBCUWkt
MUdZX3FBSVlEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAWSKqMA0EAgACMAcDBQMqD+zAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM9VzANBgkqhkiG9w0BAQsFAAOCAQEAEBrY9ECuV0se
hTwfsGRxowkty3FOiB1ILLHll8Sncgy/KglOiCb/XpmNDde4rwyHoJiKH62fr237
QhRoNsMahPrbg83Tg+iKYRSz5mdyZFmgRhr103LVE3OnnJTs4dMXGZMCAc0EYdm+
aiELSka8TlhQ+ZRT/b2zwGidcsVxOfTVeWa0Jrfmeb7eMYdulcGazUu7Fjsa5c0U
vQ+qTpBlO541aw91KYGsTyHDsLp5DOVloKMBJlubZp5sKPaatLYovRXp+E1lmoT5
WwaFuyH6M748XwFrsYaMMdkKaDdcfAmHtpHUgoJTgW4VyEmeDWCASRfU2ioGwAbS
VF3dzk2rUA==
-----END CERTIFICATE-----