Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
File:                     3KCCSJpBQMCnjgPVC2v9VAKwROo.cer (raw, json)
Hash identifier:          jXo1Psf3x46ZBRqd8TQ1M4W+68ZuoY/n7vvjCt0qQDU=
Subject key identifier:   DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B2D02FCC5910F25AFA0A99ECCE27AC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208712
                          IP: 45.87.236.0/22
                          IP: 2a06:7a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:d0:2f:cc:59:10:f2:5a:fa:0a:99:ec:ce:27:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:b1:7f:56:8b:07:ed:86:0d:78:1c:6a:f1:
                    ca:bf:dc:7d:fb:da:7a:2a:04:6e:7c:5a:17:3e:7b:
                    93:83:86:44:13:e4:d4:21:42:43:cf:9c:3b:75:ae:
                    c3:2d:21:d7:78:db:47:4d:7c:c2:40:a4:cb:a2:8d:
                    c4:4f:69:49:04:26:4a:b4:93:a1:a2:a5:ec:59:e9:
                    27:fe:0b:e0:3f:c6:bd:67:93:4e:ce:74:45:3a:cf:
                    97:b6:2a:2a:1c:43:85:d7:d9:48:1d:e0:15:e0:0c:
                    d7:8c:e4:32:db:7c:74:f8:cb:28:25:5f:2b:b9:d3:
                    41:a6:71:d7:5d:37:98:97:e3:78:23:94:50:51:dd:
                    91:4c:c8:21:37:46:b0:61:97:99:96:ae:c4:34:4d:
                    3a:5d:b4:ca:51:c6:ad:01:ec:15:1e:45:a9:64:3b:
                    fd:ad:e0:9d:c4:e9:58:87:39:a8:86:90:c0:25:95:
                    a2:f9:fe:4a:e2:fd:bc:a5:02:c0:ae:67:77:e8:1c:
                    f5:16:b6:a9:b9:22:07:60:0e:20:0c:7e:72:6c:13:
                    67:43:c2:b7:69:24:72:65:c8:2a:6a:84:0a:76:1e:
                    42:95:3c:60:a8:e3:e5:f8:d9:97:7a:2b:c9:e9:bb:
                    d5:5e:df:f5:a5:f0:0a:4f:26:88:98:67:eb:60:31:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.236.0/22
                IPv6:
                  2a06:7a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208712

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:c3:2f:7d:ac:89:d7:a6:f8:4c:90:9c:12:6b:17:0d:28:
         81:a4:eb:15:16:af:18:c4:ce:a8:92:6d:4a:95:bb:f0:f2:d6:
         63:c1:1f:93:bf:36:e3:16:99:a6:4c:63:54:70:03:6d:d5:95:
         fc:b7:15:5d:d6:5f:0d:2b:58:46:e5:7f:2d:86:68:0b:39:a5:
         a4:86:ac:6d:19:38:da:e0:82:dd:7c:45:10:b5:3d:06:93:25:
         ba:70:6a:9d:da:0c:ba:44:5a:f5:80:28:d1:68:ba:ef:94:eb:
         22:aa:1a:e2:8e:3b:ae:a6:38:62:15:3b:b3:1b:6b:52:68:87:
         0b:00:a2:3f:d1:9e:82:f8:77:28:80:d9:4f:17:60:1f:da:eb:
         b3:83:2f:f6:88:f5:a2:98:16:68:8b:f9:e9:7a:2e:28:00:a9:
         db:d6:37:f6:21:73:16:c0:a2:ad:70:f1:67:e6:d1:20:18:83:
         ec:3c:b1:bd:f5:c4:bc:c7:fb:9a:51:bc:92:f6:eb:85:e9:2f:
         1b:2f:3f:bb:f5:6e:bf:13:46:90:c1:c0:79:e2:96:cc:2e:0f:
         c1:bd:f0:d3:c1:df:c3:fd:b6:d1:fc:0f:6d:9e:5d:13:93:5f:
         bb:d7:28:b1:71:50:db:3d:d0:34:31:0f:c2:cb:8b:80:2b:6e:
         ae:47:eb:d9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQkstAvzFkQ8lr6CpnsziesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2EwODI0ODlhNDE0MGMwYTc4ZTAzZDUwYjZiZmQ1NDAyYjA0NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKyxf1aLB+2GDXgcavHKv9x9+9p6
KgRufFoXPnuTg4ZEE+TUIUJDz5w7da7DLSHXeNtHTXzCQKTLoo3ET2lJBCZKtJOh
oqXsWekn/gvgP8a9Z5NOznRFOs+XtioqHEOF19lIHeAV4AzXjOQy23x0+MsoJV8r
udNBpnHXXTeYl+N4I5RQUd2RTMghN0awYZeZlq7ENE06XbTKUcatAewVHkWpZDv9
reCdxOlYhzmohpDAJZWi+f5K4v28pQLArmd36Bz1FrapuSIHYA4gDH5ybBNnQ8K3
aSRyZcgqaoQKdh5ClTxgqOPl+NmXeivJ6bvVXt/1pfAKTyaImGfrYDGPvwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNyggkiaQUDAp44D1Qtr/VQCsETqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2RiOWJj
OC00YjA2LTRiYWYtOGJhOC1kZmMwNTY1NDViZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZGI5YmM4
LTRiMDYtNGJhZi04YmE4LWRmYzA1NjU0NWJlNC8xLzNLQ0NTSnBCUU1DbmpnUFZD
MnY5VkFLd1JPby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVfsMA0EAgACMAcDBQAqBnqAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvSDANBgkqhkiG9w0BAQsFAAOCAQEAmx7DL32sidem
+EyQnBJrFw0ogaTrFRavGMTOqJJtSpW78PLWY8Efk7824xaZpkxjVHADbdWV/LcV
XdZfDStYRuV/LYZoCzmlpIasbRk42uCC3XxFELU9BpMlunBqndoMukRa9YAo0Wi6
75TrIqoa4o47rqY4YhU7sxtrUmiHCwCiP9Gegvh3KIDZTxdgH9rrs4Mv9oj1opgW
aIv56XouKACp29Y39iFzFsCirXDxZ+bRIBiD7DyxvfXEvMf7mlG8kvbrhekvGy8/
u/VuvxNGkMHAeeKWzC4Pwb3w08Hfw/220fwPbZ5dE5Nfu9cosXFQ2z3QNDEPwsuL
gCturkfr2Q==
-----END CERTIFICATE-----