Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer (raw, json)
Hash identifier:          mlopkbDp71EyfsmO2YtVw9ag/NBpmq5yhMRkmHP3R9s=
Subject key identifier:   DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422200A2D1110E177E60D788CBF60C94F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197667
                          IP: 31.41.80.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:0a:2d:11:10:e1:77:e6:0d:78:8c:bf:60:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:ac:7e:ce:53:5a:dd:14:20:c6:99:9a:2d:
                    ad:ee:6f:62:49:a0:60:16:d1:ab:41:c2:ac:af:a1:
                    a4:ae:95:de:af:be:10:a2:a3:dd:dc:4e:f9:ea:17:
                    65:d1:64:9c:cf:15:09:f1:50:15:1c:c4:ff:b1:43:
                    cc:0c:70:53:e9:18:94:ae:2a:55:35:5c:6d:77:31:
                    c0:ae:03:7f:d1:f4:6f:d4:1c:c4:51:ce:be:22:fc:
                    4f:0c:6a:4c:f2:2c:0b:f4:c1:66:27:12:8c:6f:5f:
                    73:63:a2:f8:d4:f1:ef:39:31:37:73:6e:93:71:25:
                    6b:1a:6d:05:7c:56:cc:1d:95:41:3f:78:29:9d:69:
                    f5:d3:42:fb:d3:84:36:9b:a5:28:3b:86:7f:6f:e7:
                    61:cb:6d:2c:f2:06:25:ca:51:bf:d4:dc:49:c5:7d:
                    02:c8:b1:8d:4b:d1:e0:97:91:b1:4f:2d:69:36:e8:
                    a9:11:52:56:8b:16:fa:85:ca:f0:e6:f6:4e:b5:de:
                    2d:6b:f5:b4:e7:2d:a2:d6:ea:63:ca:70:29:67:4a:
                    cf:7d:c4:01:24:2a:c3:15:cc:fa:78:58:59:ac:38:
                    7a:c1:78:03:43:f8:97:42:eb:33:1a:ee:6b:37:20:
                    22:13:70:26:b2:13:ef:b5:41:24:94:8c:5b:3f:52:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.80.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197667

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:53:d1:0a:1c:6f:e7:23:f1:9c:ac:f7:66:db:b1:1c:e6:
         24:4e:b3:3f:b9:52:21:69:43:7d:be:54:03:0c:6f:5e:db:da:
         0d:be:eb:59:92:ab:10:24:d9:38:3c:15:87:9a:71:d8:dc:eb:
         13:64:8a:dd:15:17:b1:d7:e1:95:7e:ec:54:72:a5:81:5c:5d:
         13:4f:e7:b9:e1:c6:11:33:f9:9f:b7:3f:ce:15:2e:06:75:63:
         9e:94:37:ad:b7:57:66:d2:a3:17:aa:b4:fb:31:2b:25:d3:96:
         08:d0:f3:47:92:97:e0:88:93:44:35:31:8b:22:11:56:22:b4:
         cf:7d:59:e2:50:da:e5:ed:36:53:02:3b:81:80:c5:ae:d6:f3:
         8b:75:0b:c6:1d:7a:57:4b:56:56:75:07:8c:9f:7f:e6:2d:81:
         2a:17:68:16:bc:9f:db:1b:cf:8f:d5:98:3a:93:cf:19:3d:96:
         e3:c4:a8:9e:39:d1:18:02:a6:1b:c5:e6:5d:c9:cd:1f:f5:0c:
         8e:de:ce:68:6f:e0:c8:22:49:81:8f:e8:b3:40:41:57:26:41:
         c3:cc:f6:ba:3a:5d:fc:be:5f:bb:b6:e5:6e:82:b8:7b:a0:b9:
         55:88:b4:ec:3b:85:fa:b0:eb:aa:8c:96:a8:8e:e6:d7:ca:36:
         23:1b:09:e6
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQiIAotERDhd+YNeIy/YMlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ1NzA4ZjQyOWFkYWRiYTFiNGEzOGM5NGRkNzc2NTRhZmFmOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Gsfs5TWt0UIMaZmi2t7m9iSaBg
FtGrQcKsr6GkrpXer74QoqPd3E756hdl0WSczxUJ8VAVHMT/sUPMDHBT6RiUripV
NVxtdzHArgN/0fRv1BzEUc6+IvxPDGpM8iwL9MFmJxKMb19zY6L41PHvOTE3c26T
cSVrGm0FfFbMHZVBP3gpnWn100L704Q2m6UoO4Z/b+dhy20s8gYlylG/1NxJxX0C
yLGNS9Hgl5GxTy1pNuipEVJWixb6hcrw5vZOtd4ta/W05y2i1upjynApZ0rPfcQB
JCrDFcz6eFhZrDh6wXgDQ/iXQuszGu5rNyAiE3AmshPvtUEklIxbP1JMOwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFN3VcI9CmtrbobSjjJTdd2VK+vl9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3L2Q3OTRh
My1mM2FlLTRmYmUtOThlYS0yMGUxYzNlM2Y4ZTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDc5NGEz
LWYzYWUtNGZiZS05OGVhLTIwZTFjM2UzZjhlMi8xLzNkVndqMEthMnR1aHRLT01s
TjEzWlVyNi1YMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDHylQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMEIzANBgkqhkiG9w0BAQsFAAOCAQEAOQ1T0Qocb+cj8Zys92bbsRzmJE6zP7lS
IWlDfb5UAwxvXtvaDb7rWZKrECTZODwVh5px2NzrE2SK3RUXsdfhlX7sVHKlgVxd
E0/nueHGETP5n7c/zhUuBnVjnpQ3rbdXZtKjF6q0+zErJdOWCNDzR5KX4IiTRDUx
iyIRViK0z31Z4lDa5e02UwI7gYDFrtbzi3ULxh16V0tWVnUHjJ9/5i2BKhdoFryf
2xvPj9WYOpPPGT2W48SonjnRGAKmG8XmXcnNH/UMjt7OaG/gyCJJgY/os0BBVyZB
w8z2ujpd/L5fu7blboK4e6C5VYi07DuF+rDrqoyWqI7m18o2IxsJ5g==
-----END CERTIFICATE-----