Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
File:                     LPAizk3IHwOzswcwpsI-rzQuzF4.cer (raw, json)
Hash identifier:          7p5uncTr5XOV1NbnZmGMLEG6GiVFgtxSpKI3t7uZ5ag=
Subject key identifier:   2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F4D42E37015908AABBA9DDD3A1957
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47472
                          IP: 195.242.180.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:4d:42:e3:70:15:90:8a:ab:ba:9d:dd:3a:19:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:00:47:31:41:03:02:51:4d:eb:d7:20:0f:
                    c2:80:d9:2a:e2:41:3f:80:2c:a7:81:ac:f5:59:e1:
                    69:87:dd:8b:e9:fb:2e:23:a5:50:5a:14:10:4f:24:
                    5a:71:7f:27:b9:d5:be:f7:b6:d8:31:62:34:4b:32:
                    1e:56:3a:29:0a:43:21:c1:62:5f:4d:64:b5:e5:70:
                    8b:56:67:5c:55:55:a3:75:6d:17:21:40:bf:ac:22:
                    92:a8:a7:3a:c4:ff:ab:4c:04:f7:d0:33:35:7d:bf:
                    46:ed:4e:5f:09:b1:49:1f:aa:fa:a2:04:b6:72:f1:
                    a9:ab:c9:50:03:84:6d:74:54:de:a8:c6:74:d2:87:
                    01:dc:42:1c:d4:7f:2d:67:5e:09:19:9c:59:19:8e:
                    ef:5f:ac:f8:6c:39:c7:ed:b4:39:78:66:52:7b:90:
                    74:68:50:97:0c:7b:74:21:7b:8a:64:b8:95:eb:29:
                    fe:74:4f:c7:44:79:42:6b:43:00:e4:c7:94:dd:57:
                    eb:9b:4c:1a:57:5e:15:e5:e7:f9:f7:5b:ca:76:30:
                    26:48:8c:72:01:b1:61:de:82:03:0f:61:0e:66:12:
                    16:86:e2:34:11:fa:8a:b2:21:4b:8e:86:55:4c:d2:
                    e3:8a:82:28:ce:f3:2e:6b:ef:43:52:4a:0b:38:38:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.180.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47472

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:43:49:e5:44:f2:3c:96:90:78:40:42:5d:2c:00:a6:05:
         e9:47:77:e0:76:db:b9:d4:87:3e:1d:e7:c7:e2:3f:a1:16:97:
         01:b4:54:30:d6:a7:77:0d:1c:35:5d:7e:ed:fa:21:63:f9:e8:
         20:8f:9d:40:06:f6:10:23:01:99:90:dc:28:f2:16:9f:14:d3:
         30:1f:fe:c6:e7:30:31:96:7a:bf:80:69:10:59:8d:82:47:aa:
         32:68:8f:71:de:a4:7c:29:3c:66:58:dc:bc:13:54:5d:19:da:
         da:b0:b5:12:ee:2c:fa:15:64:9f:fe:10:ba:36:39:40:95:6e:
         c5:f3:aa:9f:d3:01:0e:a4:50:bb:e2:b7:8f:25:9f:e0:11:3b:
         31:f6:4b:df:5f:c2:ab:3c:8e:72:1e:9e:e4:03:66:df:58:06:
         73:c1:aa:b6:7a:9f:cc:9e:c8:01:3a:5d:6c:9f:59:32:fa:a9:
         80:9f:a0:b5:15:7c:71:af:81:e9:4c:c0:01:99:37:6d:99:63:
         2c:fb:ed:51:27:19:1e:1d:1e:74:f5:0b:6d:04:41:91:99:ac:
         06:ca:6e:7f:fc:77:21:6b:a9:a8:fe:e9:62:20:f6:d1:7d:2e:
         50:23:f2:d8:b6:fc:f6:5c:0c:8b:b8:2b:2c:8d:96:aa:7c:50:
         1a:f1:4e:f2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQiH01C43AVkIqrup3dOhlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2YwMjJjZTRkYzgxZjAzYjNiMzA3MzBhNmMyM2VhZjM0MmVjYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7AARzFBAwJRTevXIA/CgNkq4kE/
gCyngaz1WeFph92L6fsuI6VQWhQQTyRacX8nudW+97bYMWI0SzIeVjopCkMhwWJf
TWS15XCLVmdcVVWjdW0XIUC/rCKSqKc6xP+rTAT30DM1fb9G7U5fCbFJH6r6ogS2
cvGpq8lQA4RtdFTeqMZ00ocB3EIc1H8tZ14JGZxZGY7vX6z4bDnH7bQ5eGZSe5B0
aFCXDHt0IXuKZLiV6yn+dE/HRHlCa0MA5MeU3Vfrm0waV14V5ef591vKdjAmSIxy
AbFh3oIDD2EOZhIWhuI0EfqKsiFLjoZVTNLjioIozvMua+9DUkoLODiMrQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFCzwIs5NyB8Ds7MHMKbCPq80LsxeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzkzMDdm
Ni0xNDU4LTQzMmYtOTkxNS1jYTRlZDgwOTc5NzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvOTMwN2Y2
LTE0NTgtNDMyZi05OTE1LWNhNGVkODA5Nzk3MC8xL0xQQWl6azNJSHdPenN3Y3dw
c0ktcnpRdXpGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw/K0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC5cDANBgkqhkiG9w0BAQsFAAOCAQEAVfxDSeVE8jyWkHhAQl0sAKYF6Ud34Hbb
udSHPh3nx+I/oRaXAbRUMNandw0cNV1+7fohY/noII+dQAb2ECMBmZDcKPIWnxTT
MB/+xucwMZZ6v4BpEFmNgkeqMmiPcd6kfCk8ZljcvBNUXRna2rC1Eu4s+hVkn/4Q
ujY5QJVuxfOqn9MBDqRQu+K3jyWf4BE7MfZL31/CqzyOch6e5ANm31gGc8Gqtnqf
zJ7IATpdbJ9ZMvqpgJ+gtRV8ca+B6UzAAZk3bZljLPvtUScZHh0edPULbQRBkZms
Bspuf/x3IWupqP7pYiD20X0uUCPy2Lb89lwMi7grLI2WqnxQGvFO8g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:18 2025 by rpki-client