Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
File:                     aVTpCJn_JWRFIHJM3owhFhNgC-8.cer (raw, json)
Hash identifier:          yJ3Hxl02Gar29cyYxRNKZG5wUh21tOfjaxSWysahDtU=
Subject key identifier:   69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143867975594ABF4FFB688C9103F56B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.95.136.0/22
                          IP: 2a03:cec0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:86:79:75:59:4a:bf:4f:fb:68:8c:91:03:f5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6954e90899ff25644520724cde8c211613600bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:00:53:c2:a1:c1:01:df:ff:16:83:5e:98:
                    d9:70:a3:92:1e:74:e8:c3:a6:32:f7:56:43:e3:a2:
                    18:c1:9c:7f:07:54:7d:3d:3b:96:95:38:9c:68:01:
                    ae:15:9f:ef:fe:64:cc:8d:21:28:1b:8e:d4:bb:4b:
                    46:a1:59:e7:47:52:5d:2a:56:35:3b:23:10:e1:80:
                    8f:75:0d:b0:01:98:2d:3d:40:69:98:db:ce:e0:0f:
                    d0:40:b7:c5:b6:2c:50:89:9e:f9:17:7c:91:d1:8e:
                    25:ba:88:59:c3:7d:b0:83:d1:5f:a9:40:f9:67:89:
                    01:c6:7b:c8:7b:cb:07:d6:6d:f0:a1:79:eb:f5:b0:
                    57:5e:d7:3d:7f:3e:24:a4:69:53:30:85:6d:69:21:
                    4f:31:90:84:2a:c2:ab:79:be:9c:1b:55:a2:33:96:
                    fe:18:78:4b:3a:76:1d:88:2e:47:de:9e:52:79:21:
                    9d:58:1f:90:94:9b:13:a9:68:25:08:28:83:82:48:
                    a0:62:05:15:6c:7d:7d:30:1f:fb:7b:f7:45:91:f2:
                    c7:17:d3:17:18:2e:73:d7:4f:e8:16:1a:36:2f:3d:
                    90:e0:18:0b:73:bc:d7:e4:11:46:e6:51:02:d3:bf:
                    13:aa:9e:2f:b3:6d:df:ad:6f:9a:57:ed:08:3f:f5:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.95.136.0/22
                IPv6:
                  2a03:cec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:39:ca:57:7c:61:cc:69:3e:31:e5:a2:60:b2:d7:40:8b:8f:
         79:8f:bd:4d:6e:d6:00:16:68:76:78:bf:3b:3c:89:ff:10:91:
         4e:08:2c:b0:09:16:b7:2f:36:62:d4:fa:5e:10:60:8c:2b:39:
         23:ac:6a:87:b9:7b:ef:68:28:4c:b0:4d:5e:31:e9:24:a6:8b:
         6d:d6:3e:69:d1:f4:d6:67:d3:c8:ed:74:91:64:5b:79:59:08:
         1b:59:2a:56:54:99:11:0a:27:c4:20:c6:4f:af:c9:53:41:a4:
         a4:88:c2:3b:fa:f4:6a:fd:7b:b5:4f:1d:ef:45:74:16:98:ca:
         8f:0d:1d:00:b0:75:3c:03:38:c9:fa:de:d3:1a:f5:d5:34:40:
         82:d2:a3:f2:55:49:ce:b2:85:73:d7:67:ec:43:96:f2:49:37:
         fe:9f:12:6c:0f:d0:5c:12:bf:43:e9:db:b6:4d:0b:20:cb:cd:
         31:68:9d:2b:5b:02:90:78:9a:c4:55:d2:5f:ee:e7:31:8f:81:
         d7:e8:d5:e7:b7:d3:2e:40:82:ef:2a:45:da:50:f7:64:1b:04:
         10:9f:ed:46:44:6c:21:e6:69:4f:a0:36:33:e5:a2:be:c8:0f:
         6c:92:03:d5:7e:4c:39:d8:11:16:3b:9f:ca:05:fe:f9:e9:06:
         84:b0:2b:d5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ4Z5dVlKv0/7aIyRA/VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTU0ZTkwODk5ZmYyNTY0NDUyMDcyNGNkZThjMjExNjEzNjAwYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYYAU8KhwQHf/xaDXpjZcKOSHnTo
w6Yy91ZD46IYwZx/B1R9PTuWlTicaAGuFZ/v/mTMjSEoG47Uu0tGoVnnR1JdKlY1
OyMQ4YCPdQ2wAZgtPUBpmNvO4A/QQLfFtixQiZ75F3yR0Y4luohZw32wg9FfqUD5
Z4kBxnvIe8sH1m3woXnr9bBXXtc9fz4kpGlTMIVtaSFPMZCEKsKreb6cG1WiM5b+
GHhLOnYdiC5H3p5SeSGdWB+QlJsTqWglCCiDgkigYgUVbH19MB/7e/dFkfLHF9MX
GC5z10/oFho2Lz2Q4BgLc7zX5BFG5lEC078Tqp4vs23frW+aV+0IP/UOuQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGlU6QiZ/yVkRSByTN6MIRYTYAvvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzFjYjkx
MS01ZTdmLTQ5ZTgtYjRmMC0zZjZlZTcwNTkxNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMWNiOTEx
LTVlN2YtNDllOC1iNGYwLTNmNmVlNzA1OTE1Yi8xL2FWVHBDSm5fSldSRklISk0z
b3doRmhOZ0MtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuV+IMA0EAgACMAcDBQAqA87AMA0GCSqGSIb3
DQEBCwUAA4IBAQBSOcpXfGHMaT4x5aJgstdAi495j71NbtYAFmh2eL87PIn/EJFO
CCywCRa3LzZi1PpeEGCMKzkjrGqHuXvvaChMsE1eMekkpott1j5p0fTWZ9PI7XSR
ZFt5WQgbWSpWVJkRCifEIMZPr8lTQaSkiMI7+vRq/Xu1Tx3vRXQWmMqPDR0AsHU8
AzjJ+t7TGvXVNECC0qPyVUnOsoVz12fsQ5bySTf+nxJsD9BcEr9D6du2TQsgy80x
aJ0rWwKQeJrEVdJf7ucxj4HX6NXnt9MuQILvKkXaUPdkGwQQn+1GRGwh5mlPoDYz
5aK+yA9skgPVfkw52BEWO5/KBf756QaEsCvV
-----END CERTIFICATE-----