Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
File:                     42Op1wI7PLADKRLcqsnFY8kKl3I.cer (raw, json)
Hash identifier:          aGMBBDysdw8NzbAjiLMJ1Rs52kvu4OTkbvtZVztIBnk=
Subject key identifier:   E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443BBBA55A5567825FF8D5127F9452
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.31.68.0/23
                          IP: 2a00:89e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3b:bb:a5:5a:55:67:82:5f:f8:d5:12:7f:94:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:d8:99:f4:3a:ac:a1:92:01:95:23:14:9d:
                    f2:f5:23:2a:61:ef:85:8c:a0:d6:0e:07:4b:c3:02:
                    07:a7:4f:a9:e5:bb:c9:56:4c:c2:62:7d:ef:9c:aa:
                    89:79:92:c2:eb:b3:bf:41:b1:24:fe:66:a2:47:40:
                    59:4c:94:f8:bc:77:6c:e4:7c:9f:94:25:ed:a7:cf:
                    24:32:db:15:23:b8:92:e3:37:58:83:0e:49:b7:e7:
                    de:9b:30:48:41:a3:5c:4c:b5:3e:68:2d:7b:5b:64:
                    59:85:e9:e8:1e:b3:28:57:4a:58:f2:a8:17:e6:d0:
                    ec:5f:9d:92:e1:57:22:2e:da:ce:71:00:c9:1c:fa:
                    49:3b:9a:88:bb:c0:6f:b6:c3:23:9b:52:2f:0e:6a:
                    78:ae:7c:ec:2f:94:c4:41:02:9a:03:b5:c1:f3:3e:
                    b6:d0:8f:42:13:60:70:28:62:bc:1d:98:66:aa:32:
                    37:0a:06:72:0a:74:16:ce:a5:48:d4:9a:75:96:2b:
                    5a:a4:75:37:ec:9c:bf:ed:ef:59:53:f7:f2:e3:04:
                    fc:3b:9c:e3:60:36:c9:4d:2b:a7:21:29:75:b5:31:
                    06:6a:32:0c:ca:4b:37:9a:c6:cd:fc:40:46:89:6d:
                    19:a7:14:25:0e:d5:39:62:6e:aa:f6:6a:df:a2:34:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.68.0/23
                IPv6:
                  2a00:89e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:46:29:90:15:f3:61:e7:c0:b6:6c:51:c4:0c:c6:0e:db:
         2d:e8:53:87:10:bc:76:2c:55:bd:1f:aa:b5:ae:1c:e1:6b:92:
         48:ec:c3:b4:ca:66:c9:1c:b0:90:24:c8:72:d7:37:7d:50:65:
         58:21:ae:02:e8:1c:f8:dd:b4:63:01:1a:d8:cc:fd:94:c9:33:
         7d:fd:8f:66:b7:c1:37:2e:bd:a2:a6:d6:92:8c:52:e1:4f:0e:
         50:b3:4c:5d:75:8e:b5:5f:38:97:7c:07:12:f2:0c:80:e8:4b:
         5d:8d:92:7b:36:c7:40:5e:08:91:6b:93:f4:45:e6:43:8a:0e:
         8a:b4:84:d4:9a:e5:00:c7:6f:04:45:8a:08:14:41:f9:fa:76:
         07:26:6b:c5:53:6b:c6:e2:f8:5e:9e:50:95:83:7c:43:9d:ce:
         a0:2b:dc:54:31:30:7c:61:73:7d:66:8f:4e:6e:81:f3:e3:2d:
         9e:67:12:70:41:12:2e:4b:85:32:46:28:f9:90:c0:b8:8e:57:
         d7:c1:be:7b:9d:e2:66:14:fe:61:16:82:d9:59:18:2e:bf:18:
         32:8f:cf:de:f6:31:4c:7f:a9:99:f1:cc:df:10:36:4b:e3:39:
         70:f4:57:72:bf:c8:27:73:7b:a2:12:5d:74:8d:59:85:e7:37:
         5b:89:a7:42
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhRDu7pVpVZ4Jf+NUSf5RSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzYzYTlkNzAyM2IzY2IwMDMyOTEyZGNhYWM5YzU2M2M5MGE5NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN3YmfQ6rKGSAZUjFJ3y9SMqYe+F
jKDWDgdLwwIHp0+p5bvJVkzCYn3vnKqJeZLC67O/QbEk/maiR0BZTJT4vHds5Hyf
lCXtp88kMtsVI7iS4zdYgw5Jt+femzBIQaNcTLU+aC17W2RZhenoHrMoV0pY8qgX
5tDsX52S4VciLtrOcQDJHPpJO5qIu8BvtsMjm1IvDmp4rnzsL5TEQQKaA7XB8z62
0I9CE2BwKGK8HZhmqjI3CgZyCnQWzqVI1Jp1litapHU37Jy/7e9ZU/fy4wT8O5zj
YDbJTSunISl1tTEGajIMyks3msbN/EBGiW0ZpxQlDtU5Ym6q9mrfojQ3PQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFONjqdcCOzywAykS3KrJxWPJCpdyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzJkNTMz
Ny1kYTI0LTRjZTgtYTNiNy1jMzAyYzEwZWM1YzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMmQ1MzM3
LWRhMjQtNGNlOC1hM2I3LWMzMDJjMTBlYzVjMC8xLzQyT3Axd0k3UExBREtSTGNx
c25GWThrS2wzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBuR9EMA0EAgACMAcDBQAqAIngMA0GCSqGSIb3
DQEBCwUAA4IBAQAdfkYpkBXzYefAtmxRxAzGDtst6FOHELx2LFW9H6q1rhzha5JI
7MO0ymbJHLCQJMhy1zd9UGVYIa4C6Bz43bRjARrYzP2UyTN9/Y9mt8E3Lr2iptaS
jFLhTw5Qs0xddY61XziXfAcS8gyA6EtdjZJ7NsdAXgiRa5P0ReZDig6KtITUmuUA
x28ERYoIFEH5+nYHJmvFU2vG4vhenlCVg3xDnc6gK9xUMTB8YXN9Zo9OboHz4y2e
ZxJwQRIuS4UyRij5kMC4jlfXwb57neJmFP5hFoLZWRguvxgyj8/e9jFMf6mZ8czf
EDZL4zlw9Fdyv8gnc3uiEl10jVmF5zdbiadC
-----END CERTIFICATE-----