Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
File:                     WEfx9Pa8sqR1isipl7wQgADkGNE.cer (raw, json)
Hash identifier:          Xe53H9OMECx6yOn7Svp3ge7OLBbbyiVhsGdV0BV31Pc=
Subject key identifier:   58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B19FE87EE5C773337F630EC1D6BCFD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198346
                          IP: 91.222.52.0/22
                          IP: 2a13:e900::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:9f:e8:7e:e5:c7:73:33:7f:63:0e:c1:d6:bc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:a8:8b:61:57:cb:cc:87:1b:66:43:9d:a4:
                    24:11:be:4e:6f:22:9e:67:2b:74:3d:4e:f0:51:ce:
                    e4:4b:7e:ec:5b:3b:76:af:31:da:fb:a3:02:12:31:
                    45:13:6b:16:59:13:4d:da:4c:3a:e7:68:cf:91:15:
                    5f:09:5a:02:57:00:a2:61:89:ed:9d:fa:c0:ef:cc:
                    d4:2c:79:29:7a:07:3f:bf:d5:2d:cd:28:99:84:ef:
                    41:4a:fb:0e:ab:13:cd:45:12:2e:90:eb:62:ce:a9:
                    d6:a5:86:7c:e0:c7:4b:0e:8c:12:9e:c4:93:8a:b3:
                    73:03:98:30:d0:e3:c6:41:e0:3e:56:01:16:6f:0e:
                    51:10:b8:23:c2:93:7c:06:d3:da:79:6d:16:99:a3:
                    fd:43:2d:57:d2:0f:ba:52:7e:48:0d:25:83:21:c0:
                    97:03:d7:ce:c1:14:07:5a:b4:d5:52:98:81:9d:74:
                    94:25:5c:70:1c:c6:e4:8a:49:d5:dd:4a:50:4d:21:
                    f2:f9:79:56:77:5a:c6:ea:00:a0:3c:88:80:08:6d:
                    88:9a:9f:b6:b3:b5:e8:36:ef:4a:80:ea:85:e4:25:
                    fa:6c:f7:a6:31:18:38:56:bd:8c:c2:f7:41:c6:87:
                    7c:fe:58:6a:64:bc:1d:fa:a3:e0:8f:12:54:59:e3:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.222.52.0/22
                IPv6:
                  2a13:e900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198346

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:38:6d:42:a1:76:ea:32:b7:2b:b9:0f:40:e1:e0:0e:16:
         88:7d:02:53:b3:f5:2c:36:2c:80:04:ac:88:3c:98:db:10:19:
         4f:a3:93:69:43:1d:56:91:45:24:ac:1f:93:49:ff:26:32:08:
         93:ba:0f:b5:4f:0f:73:e9:3e:e5:10:30:dc:65:97:dc:07:f9:
         dd:fa:96:b1:08:f1:e9:61:dd:9b:2d:94:03:9a:9f:cd:1a:26:
         d5:b8:0e:e5:26:c8:f0:c5:d6:8d:6a:3d:98:67:ad:12:a7:86:
         ee:1b:f9:75:c1:9b:78:f6:f2:f2:bc:1a:8d:6e:fe:ed:c1:d7:
         bc:13:18:f3:60:ef:44:b4:3e:e8:ca:f6:c3:39:80:94:9d:55:
         0e:f7:13:49:46:34:3e:e2:e5:63:7e:b7:9a:27:e8:e5:34:3f:
         8b:0d:6c:15:60:ec:91:86:ea:85:83:26:09:ed:92:b2:da:57:
         3b:df:9c:1c:ba:11:b5:61:00:f6:84:1b:5d:d6:3a:74:87:74:
         7e:13:68:c9:74:7d:9e:24:59:9d:d6:e5:48:88:f0:b8:05:54:
         32:b7:df:97:03:b8:ec:12:5a:16:68:a9:d5:a8:4e:6a:fb:cf:
         3f:0a:cf:e3:d6:3f:bb:d7:ea:6f:0f:d8:dc:f0:57:ea:ca:6b:
         ad:60:a1:16
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhsZ/ofuXHczN/Yw7B1rz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQ3ZjFmNGY2YmNiMmE0NzU4YWM4YTk5N2JjMTA4MDAwZTQxOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYioi2FXy8yHG2ZDnaQkEb5ObyKe
Zyt0PU7wUc7kS37sWzt2rzHa+6MCEjFFE2sWWRNN2kw652jPkRVfCVoCVwCiYYnt
nfrA78zULHkpegc/v9UtzSiZhO9BSvsOqxPNRRIukOtizqnWpYZ84MdLDowSnsST
irNzA5gw0OPGQeA+VgEWbw5RELgjwpN8BtPaeW0WmaP9Qy1X0g+6Un5IDSWDIcCX
A9fOwRQHWrTVUpiBnXSUJVxwHMbkiknV3UpQTSHy+XlWd1rG6gCgPIiACG2Imp+2
s7XoNu9KgOqF5CX6bPemMRg4Vr2MwvdBxod8/lhqZLwd+qPgjxJUWeN2TwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFhH8fT2vLKkdYrIqZe8EIAA5BjRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzM4MDA2
Zi1mYmZjLTQ4YWEtODVlZi0wNjViYzI4YzJhNTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMzgwMDZm
LWZiZmMtNDhhYS04NWVmLTA2NWJjMjhjMmE1Mi8xL1dFZng5UGE4c3FSMWlzaXBs
N3dRZ0FEa0dORS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCW940MA0EAgACMAcDBQMqE+kAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMGyjANBgkqhkiG9w0BAQsFAAOCAQEAcMw4bUKhduoy
tyu5D0Dh4A4WiH0CU7P1LDYsgASsiDyY2xAZT6OTaUMdVpFFJKwfk0n/JjIIk7oP
tU8Pc+k+5RAw3GWX3Af53fqWsQjx6WHdmy2UA5qfzRom1bgO5SbI8MXWjWo9mGet
EqeG7hv5dcGbePby8rwajW7+7cHXvBMY82DvRLQ+6Mr2wzmAlJ1VDvcTSUY0PuLl
Y363mifo5TQ/iw1sFWDskYbqhYMmCe2SstpXO9+cHLoRtWEA9oQbXdY6dId0fhNo
yXR9niRZndblSIjwuAVUMrfflwO47BJaFmip1ahOavvPPwrP49Y/u9fqbw/Y3PBX
6sprrWChFg==
-----END CERTIFICATE-----