Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
File:                     0nXXqLrAR39VCd_xG5GVymDfh9o.cer (raw, json)
Hash identifier:          G4osEPI82KSL0/mGp0EG0/F+ZR8z48Bn16r2NzYVEpI=
Subject key identifier:   D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D5BAC8F8D80C80EEB35DD6EB3B18F796
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 10:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43342
                          AS: 208468
                          AS: 209483
                          AS: 213466
                          IP: 91.135.176.0/20
                          IP: 171.22.156.0/22
                          IP: 2a01:2a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:ba:c8:f8:d8:0c:80:ee:b3:5d:d6:eb:3b:18:f7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 10:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:a2:d2:44:ea:68:18:d8:5a:07:f7:9f:c9:
                    cc:51:d3:19:0e:0d:b4:37:4f:50:44:03:ec:29:f7:
                    ac:06:0a:d0:9d:97:77:0f:fb:c3:57:b0:8c:e0:e5:
                    27:30:f7:e2:fd:88:5a:0d:f2:54:31:ad:6e:77:04:
                    11:8b:17:e8:02:30:ae:74:90:06:fe:e8:cc:cd:0a:
                    6b:aa:aa:5e:e5:4f:62:bc:62:3b:04:3f:81:1e:ac:
                    10:86:91:c1:7f:44:4f:35:61:fa:09:8f:1c:5c:f0:
                    bb:fb:58:ce:66:8e:1f:db:15:82:91:3c:07:c7:d0:
                    7c:da:4d:ab:c8:a9:0e:13:0e:a2:e8:09:d3:e0:91:
                    27:0c:07:52:e8:dc:ec:a8:f6:36:1f:03:93:e7:a2:
                    b9:72:d8:ae:aa:8f:27:98:4a:00:df:d2:c3:1f:24:
                    e3:37:4f:17:b7:b4:d4:18:9e:78:46:3c:0b:c0:71:
                    08:0d:d8:fb:e0:91:c3:cc:74:b3:ed:e6:13:4b:09:
                    ec:e6:6b:50:05:3e:39:6c:79:16:66:e4:57:0a:aa:
                    1d:da:d5:75:cb:52:4c:84:7f:67:b0:1c:01:67:13:
                    3b:57:45:3b:96:9a:c4:13:da:c8:13:f9:5c:3d:ae:
                    91:73:6f:38:f6:75:82:47:ad:4e:a1:bd:85:31:5e:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.135.176.0/20
                  171.22.156.0/22
                IPv6:
                  2a01:2a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43342
                  208468
                  209483
                  213466

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:f9:61:83:6b:2c:51:82:b3:06:39:ff:8b:68:9d:b3:9c:
         84:98:00:0b:55:8c:9e:b5:b2:ae:7e:4e:60:72:2a:4a:c1:0a:
         e5:d2:25:a7:01:e3:92:b7:96:88:a7:ec:d7:cf:1f:56:19:35:
         1d:be:15:b8:fe:92:9d:4b:5f:f5:fe:a5:4b:b1:e8:2f:f0:80:
         41:ff:d9:4a:98:d0:d3:36:03:bd:9e:d7:84:c6:39:88:16:1d:
         e1:68:c7:9d:d9:94:0e:4c:46:db:a7:49:27:e0:8a:68:b9:d1:
         eb:2f:65:44:28:3f:e6:f9:9a:95:d8:44:35:35:ad:bf:a0:15:
         18:88:ba:9b:d2:7f:48:c2:66:e5:0b:86:16:29:68:6b:1d:f8:
         f8:94:a6:da:7b:20:02:19:1b:aa:b9:fa:f5:ef:6d:74:ad:4c:
         36:23:86:a8:3e:2c:f0:8e:ab:5d:7a:c0:88:63:40:46:d0:b4:
         55:2e:84:62:31:69:7f:a2:a9:fb:44:d6:95:0d:72:e9:1b:3c:
         b3:b0:a1:93:8c:e3:21:86:49:ac:ae:da:29:f0:2b:a5:ed:af:
         c1:29:49:c2:e1:3e:aa:73:56:a6:69:0b:33:78:16:4c:a9:a9:
         c4:08:a8:56:c6:10:e8:4c:36:43:07:24:ae:15:50:c2:6b:65:
         66:d2:f0:08
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZTVusj42AyA7rNd1us7GPeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA1MTA0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjc1ZDdhOGJhYzA0NzdmNTUwOWRmZjExYjkxOTVjYTYwZGY4N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PKi0kTqaBjYWgf3n8nMUdMZDg20
N09QRAPsKfesBgrQnZd3D/vDV7CM4OUnMPfi/YhaDfJUMa1udwQRixfoAjCudJAG
/ujMzQprqqpe5U9ivGI7BD+BHqwQhpHBf0RPNWH6CY8cXPC7+1jOZo4f2xWCkTwH
x9B82k2ryKkOEw6i6AnT4JEnDAdS6NzsqPY2HwOT56K5ctiuqo8nmEoA39LDHyTj
N08Xt7TUGJ54RjwLwHEIDdj74JHDzHSz7eYTSwns5mtQBT45bHkWZuRXCqod2tV1
y1JMhH9nsBwBZxM7V0U7lprEE9rIE/lcPa6Rc2849nWCR61Oob2FMV7tUQIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFNJ116i6wEd/VQnf8RuRlcpg34faMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzdiZWIw
NC0zMTdiLTQ0OGEtODJlZC01NjViMTQ0NzAzN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvN2JlYjA0
LTMxN2ItNDQ4YS04MmVkLTU2NWIxNDQ3MDM3Yi8xLzBuWFhxTHJBUjM5VkNkX3hH
NUdWeW1EZmg5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQEW4ewAwQCqxacMA0EAgACMAcDBQAqAQKgMCkG
CCsGAQUFBwEIAQH/BBowGKAWMBQCAwCpTgIDAy5UAgMDMksCAwNB2jANBgkqhkiG
9w0BAQsFAAOCAQEAiMn5YYNrLFGCswY5/4tonbOchJgAC1WMnrWyrn5OYHIqSsEK
5dIlpwHjkreWiKfs188fVhk1Hb4VuP6SnUtf9f6lS7HoL/CAQf/ZSpjQ0zYDvZ7X
hMY5iBYd4WjHndmUDkxG26dJJ+CKaLnR6y9lRCg/5vmaldhENTWtv6AVGIi6m9J/
SMJm5QuGFiloax34+JSm2nsgAhkbqrn69e9tdK1MNiOGqD4s8I6rXXrAiGNARtC0
VS6EYjFpf6Kp+0TWlQ1y6Rs8s7Chk4zjIYZJrK7aKfArpe2vwSlJwuE+qnNWpmkL
M3gWTKmpxAioVsYQ6Ew2QwckrhVQwmtlZtLwCA==
-----END CERTIFICATE-----