Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
File:                     2tegsAECooQW4wk7V2WgsndVzPM.cer (raw, json)
Hash identifier:          JamLebvTCChOtaBBJZAAnEkwW1hJvQp8mQdBPlJyZNc=
Subject key identifier:   DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D94415E545EE9921AB41A5A5010ECD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198477
                          IP: 37.99.192.0/21
                          IP: 185.55.28.0/22
                          IP: 2a02:5440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:44:15:e5:45:ee:99:21:ab:41:a5:a5:01:0e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:fb:f9:0c:5a:6c:34:89:80:27:33:14:71:
                    26:72:ce:4b:cb:c2:f0:27:45:98:b3:b9:28:91:0c:
                    38:93:11:e1:94:91:41:ae:15:ce:87:22:b0:05:ef:
                    d8:1b:a9:55:e4:28:0f:3b:34:0f:02:40:60:ee:70:
                    f0:21:ec:9a:07:36:c4:bb:89:e9:bc:02:43:c7:5d:
                    3a:25:8d:ec:64:8c:52:99:2b:90:ea:f0:d3:da:59:
                    18:44:85:e9:5f:36:72:d4:3e:9f:e8:d1:6c:cd:61:
                    36:d3:9c:94:af:be:35:e8:3b:57:0a:6a:ce:8f:f0:
                    55:eb:ff:e9:49:08:c3:37:45:88:de:df:33:2a:7a:
                    f5:c5:7f:f2:d6:03:54:c8:73:33:e7:1d:d9:3f:e9:
                    73:56:cb:77:2b:0f:91:ad:d3:e5:ed:00:5e:74:2c:
                    7e:ee:ba:ec:9a:63:60:f0:ac:8b:9a:88:b7:d0:41:
                    9b:59:e5:a9:96:82:fc:d9:2c:85:e2:04:8c:64:ff:
                    ff:77:d5:9d:99:51:d4:33:49:b4:80:9b:2f:ab:65:
                    77:b0:27:6f:08:94:2d:4a:99:ef:a5:a2:77:8b:85:
                    5a:72:12:01:5e:11:43:d3:8b:77:bb:21:de:bf:da:
                    47:01:be:75:8a:16:00:a3:4b:3e:28:90:77:3c:db:
                    2e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.99.192.0/21
                  185.55.28.0/22
                IPv6:
                  2a02:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198477

    Signature Algorithm: sha256WithRSAEncryption
         30:38:ff:54:90:e5:cc:28:8f:87:7e:21:7a:43:61:dd:34:ea:
         f1:1f:4f:80:23:4f:75:5e:38:cb:8e:d8:74:ae:20:b6:06:05:
         c2:f5:6b:1f:fa:88:95:86:33:59:f9:49:75:0d:02:45:26:26:
         a6:ee:ba:2c:a0:9c:e4:c9:02:f2:f3:74:4d:e3:eb:d8:1c:e4:
         6f:67:ef:93:b8:70:d5:a4:0b:30:e2:8e:48:9c:15:78:f0:f6:
         03:89:59:34:c9:80:2e:bb:7d:b1:6e:91:ac:2b:87:e4:1a:03:
         ed:ed:e6:5c:cc:47:1a:57:e0:4b:43:5a:0f:d3:59:16:3f:b1:
         6e:f3:e4:66:4e:68:e3:da:c1:76:38:74:c0:71:06:ca:d0:c6:
         1f:40:4e:b3:06:e0:46:cd:dc:a7:81:10:09:6c:43:7b:0d:bb:
         f7:b6:84:d4:e8:16:88:4c:bf:05:d4:24:66:eb:12:92:a9:40:
         54:ff:62:cd:78:4d:9f:89:b9:b9:e8:ec:92:45:91:2f:dd:08:
         a1:cb:46:ed:65:c4:94:f0:e5:77:6c:9b:a2:56:84:04:0b:a4:
         89:9f:c1:ce:d3:06:98:3c:16:19:ac:b4:90:b0:c6:f9:30:8e:
         b3:6c:7f:a5:4b:09:e8:ba:df:3a:6d:77:97:33:e1:70:4a:41:
         f6:c7:97:8a
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQm2UQV5UXumSGrQaWlAQ7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWQ3YTBiMDAxMDJhMjg0MTZlMzA5M2I1NzY1YTBiMjc3NTVjY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkej7+QxabDSJgCczFHEmcs5Ly8Lw
J0WYs7kokQw4kxHhlJFBrhXOhyKwBe/YG6lV5CgPOzQPAkBg7nDwIeyaBzbEu4np
vAJDx106JY3sZIxSmSuQ6vDT2lkYRIXpXzZy1D6f6NFszWE205yUr7416DtXCmrO
j/BV6//pSQjDN0WI3t8zKnr1xX/y1gNUyHMz5x3ZP+lzVst3Kw+RrdPl7QBedCx+
7rrsmmNg8KyLmoi30EGbWeWploL82SyF4gSMZP//d9WdmVHUM0m0gJsvq2V3sCdv
CJQtSpnvpaJ3i4VachIBXhFD04t3uyHev9pHAb51ihYAo0s+KJB3PNsuqQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFNrXoLABAqKEFuMJO1dloLJ3VczzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2UyY2Ix
Ni05YzE2LTQwYjEtYWM4Yy05NTlkYzIxZTkyOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZTJjYjE2
LTljMTYtNDBiMS1hYzhjLTk1OWRjMjFlOTI5My8xLzJ0ZWdzQUVDb29RVzR3azdW
Mldnc25kVnpQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDJWPAAwQCuTccMA0EAgACMAcDBQAqAlRAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMHTTANBgkqhkiG9w0BAQsFAAOCAQEAMDj/
VJDlzCiPh34hekNh3TTq8R9PgCNPdV44y47YdK4gtgYFwvVrH/qIlYYzWflJdQ0C
RSYmpu66LKCc5MkC8vN0TePr2Bzkb2fvk7hw1aQLMOKOSJwVePD2A4lZNMmALrt9
sW6RrCuH5BoD7e3mXMxHGlfgS0NaD9NZFj+xbvPkZk5o49rBdjh0wHEGytDGH0BO
swbgRs3cp4EQCWxDew2797aE1OgWiEy/BdQkZusSkqlAVP9izXhNn4m5uejskkWR
L90IoctG7WXElPDld2ybolaEBAukiZ/BztMGmDwWGay0kLDG+TCOs2x/pUsJ6Lrf
Om13lzPhcEpB9seXig==
-----END CERTIFICATE-----