Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
File:                     3mxgNQQsxTJRbrwZaPQb__S4U34.cer (raw, json)
Hash identifier:          U3uQj+tR0NCcK6ey4gj7Jy7063ldvzI/fpecbeifUDM=
Subject key identifier:   DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421444BA5A3173611A7E9BA21DB387A69
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212020
                          IP: 185.232.96.0/24
                          IP: 2a10:d280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:4b:a5:a3:17:36:11:a7:e9:ba:21:db:38:7a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:2f:0f:af:91:40:3f:ee:8a:33:7b:4f:c2:
                    59:cc:df:95:6c:c4:08:21:6d:47:a1:f8:35:b5:c9:
                    c5:f6:71:0f:4b:61:b7:e8:cf:04:8e:fa:b4:5b:e7:
                    de:ae:16:de:08:14:26:f0:b0:69:5e:42:81:ef:a6:
                    76:66:a8:e5:eb:7a:99:c0:f2:ed:02:4c:4e:94:9d:
                    cf:eb:fd:86:95:86:2e:82:96:f2:27:7f:40:e2:41:
                    e1:ed:02:3a:a9:20:eb:d5:89:72:ae:86:2e:2e:c7:
                    25:4e:e7:a4:c6:7b:a9:9c:de:d6:e9:07:25:b4:78:
                    91:72:04:ed:17:61:5f:8d:80:31:e7:a3:23:70:a5:
                    a9:87:de:fe:4f:4c:fa:8e:03:c5:10:75:65:9f:6a:
                    fa:e1:ac:27:97:fd:c8:60:68:3a:23:2f:97:4f:f1:
                    24:6b:2d:12:7a:49:84:01:04:0b:b3:5a:26:61:67:
                    33:62:61:2b:a5:9b:19:27:52:ae:f2:90:f8:db:39:
                    ab:4d:db:00:dd:8f:a1:89:c3:8e:5b:27:b4:c1:13:
                    39:cd:4b:f3:4d:09:b0:c5:b0:de:f8:44:83:20:e5:
                    8c:97:d6:5e:02:9a:8a:30:b5:db:50:83:8b:d3:18:
                    a8:32:18:da:f7:2c:59:c8:c1:b2:df:f8:5d:86:39:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.96.0/24
                IPv6:
                  2a10:d280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212020

    Signature Algorithm: sha256WithRSAEncryption
         76:95:2b:7c:53:92:c7:93:45:34:3f:44:fe:c5:f6:c8:a8:e2:
         41:a0:3c:4c:f6:8b:e7:dd:77:d6:be:2e:a5:85:ca:ae:dc:63:
         19:b9:f7:be:cf:85:8c:e9:e1:ec:96:4f:37:de:6c:0c:ce:7d:
         55:3d:85:a6:1d:e7:37:55:8d:84:86:88:1b:07:da:b2:db:32:
         15:50:06:82:a5:f6:39:70:4f:b0:d9:74:08:de:c3:53:b1:ad:
         c5:44:b5:12:96:ae:02:09:d4:a3:e0:50:88:d5:c8:03:ba:a1:
         95:36:6b:27:64:d1:e6:02:fa:86:09:ff:5a:94:2b:c7:76:8c:
         b6:be:78:b2:04:e6:f2:4c:76:03:23:25:bb:23:e7:a9:8c:88:
         3f:e7:ef:5b:34:6f:f1:75:87:09:10:98:56:f5:6a:46:45:0c:
         77:2b:5e:ef:90:15:96:6b:ce:e2:e9:bc:8a:81:a4:ff:92:e6:
         34:0c:a3:88:8d:dc:ae:c4:7c:d8:ac:79:71:b9:7f:4e:f9:c4:
         4f:81:c0:0d:58:d9:43:95:6d:ba:08:fc:a2:93:ee:0c:1e:06:
         c8:b2:45:47:5a:0d:11:14:a0:ea:35:cb:64:35:e1:81:a7:6d:
         4a:fb:57:84:75:46:bf:77:f7:f6:e3:3b:ba:d9:e4:17:6e:19:
         ea:ec:bf:f2
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhREuloxc2EafpuiHbOHppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTZjNjAzNTA0MmNjNTMyNTE2ZWJjMTk2OGY0MWJmZmY0Yjg1MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rkvD6+RQD/uijN7T8JZzN+VbMQI
IW1Hofg1tcnF9nEPS2G36M8Ejvq0W+ferhbeCBQm8LBpXkKB76Z2Zqjl63qZwPLt
AkxOlJ3P6/2GlYYugpbyJ39A4kHh7QI6qSDr1YlyroYuLsclTuekxnupnN7W6Qcl
tHiRcgTtF2FfjYAx56MjcKWph97+T0z6jgPFEHVln2r64awnl/3IYGg6Iy+XT/Ek
ay0SekmEAQQLs1omYWczYmErpZsZJ1Ku8pD42zmrTdsA3Y+hicOOWye0wRM5zUvz
TQmwxbDe+ESDIOWMl9ZeApqKMLXbUIOL0xioMhja9yxZyMGy3/hdhjmIfwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFN5sYDUELMUyUW68GWj0G//0uFN+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2MyYmI0
ZC04NDgzLTQ3Y2UtYmIwYS1mNWY0OTBkMmMxNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYzJiYjRk
LTg0ODMtNDdjZS1iYjBhLWY1ZjQ5MGQyYzE2My8xLzNteGdOUVFzeFRKUmJyd1ph
UFFiX19TNFUzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuehgMA0EAgACMAcDBQMqENKAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8NDANBgkqhkiG9w0BAQsFAAOCAQEAdpUrfFOSx5NF
ND9E/sX2yKjiQaA8TPaL59131r4upYXKrtxjGbn3vs+FjOnh7JZPN95sDM59VT2F
ph3nN1WNhIaIGwfastsyFVAGgqX2OXBPsNl0CN7DU7GtxUS1EpauAgnUo+BQiNXI
A7qhlTZrJ2TR5gL6hgn/WpQrx3aMtr54sgTm8kx2AyMluyPnqYyIP+fvWzRv8XWH
CRCYVvVqRkUMdyte75AVlmvO4um8ioGk/5LmNAyjiI3crsR82Kx5cbl/TvnET4HA
DVjZQ5Vtugj8opPuDB4GyLJFR1oNERSg6jXLZDXhgadtSvtXhHVGv3f39uM7utnk
F24Z6uy/8g==
-----END CERTIFICATE-----