Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
File:                     50qrpZibrbYCdHYN7vbEDNARICY.cer (raw, json)
Hash identifier:          YQZFjuvZhsiHi++81LvIy2hmR/2UDZzt6xD66iEU47A=
Subject key identifier:   E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019619A9D50121DCE3A426A6019D21C1264F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 08:28:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.155.75.0/24
                          IP: 2a13:c000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:19:a9:d5:01:21:dc:e3:a4:26:a6:01:9d:21:c1:26:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 08:28:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e74aaba5989badb60274760deef6c40cd0112026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:98:e4:e2:d5:64:ea:e8:4e:65:8d:f0:00:
                    db:0a:ee:eb:94:84:39:47:20:c0:8c:bb:f4:9b:e5:
                    b7:43:ae:ce:55:ad:c5:c6:0b:be:02:ce:c4:f5:f9:
                    36:ef:b9:3a:a3:a1:ac:88:c3:e6:fe:39:33:21:e6:
                    50:31:85:f7:63:d6:87:86:a4:c2:89:fe:ab:d8:ff:
                    10:49:87:ea:0a:d4:d3:7e:2f:cf:38:42:1d:17:fd:
                    de:88:2f:26:b8:b0:23:6b:eb:30:9d:18:06:a4:ad:
                    70:b8:19:2a:5a:4d:dd:bb:10:bd:49:a1:d1:aa:b3:
                    d9:ad:46:3f:03:df:f4:2a:b9:25:e5:8e:08:9a:1a:
                    51:f5:8b:71:81:6b:99:8e:db:0a:9a:61:f0:7c:7c:
                    cd:f8:b9:ee:86:d0:81:b5:8f:c6:62:a1:4e:e1:14:
                    7a:55:27:b2:0e:99:e7:ff:a9:27:3b:a4:06:1e:ec:
                    f9:44:c4:83:1e:77:48:3e:f6:7f:ee:d6:d6:f6:39:
                    92:ef:47:b3:3c:67:50:0e:d4:c1:98:0b:00:ec:cb:
                    8d:c6:cd:42:01:35:7e:1b:8e:38:3a:86:79:6c:9b:
                    ad:ce:fd:3f:1e:58:fa:af:f3:bb:5d:e1:59:ad:21:
                    88:78:6c:e4:3b:ce:2b:07:a9:c6:2a:c0:90:0c:c5:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:54:d3:9c:d2:06:e8:b5:1d:30:63:7a:02:a4:ee:0c:a0:
         da:02:a8:e4:9a:54:64:5d:8d:37:f4:11:7b:14:e6:4c:e2:6a:
         ae:79:05:ff:89:b4:fc:44:90:36:46:a0:f9:4e:2d:a7:3f:d9:
         f1:e9:1d:2c:bc:c9:08:a2:bd:58:6b:75:dc:50:1c:d7:97:35:
         7f:7d:67:45:ce:09:cc:16:b9:62:3c:8f:cf:f7:80:23:09:b5:
         0c:a3:15:5e:b4:f5:c4:e8:b7:24:bd:37:67:8c:df:74:21:b9:
         17:19:0c:fd:6c:e1:76:97:f9:ab:8b:8d:20:7e:db:90:a4:74:
         3f:b9:85:f1:d6:76:ca:ab:69:71:b7:ee:fe:2f:10:0a:83:4f:
         0f:d8:13:cb:d0:49:2b:f7:88:7f:28:4d:64:d7:4b:04:52:39:
         32:6c:b9:bf:c0:13:b4:19:df:18:77:0d:f9:b5:69:1c:09:1c:
         56:06:95:31:4f:4d:2a:d4:5b:9c:a8:81:75:74:2c:b3:bc:be:
         9e:f8:a8:14:43:e8:20:79:0f:f4:fe:76:b8:66:b8:49:80:1c:
         c5:8b:5b:19:73:d3:dd:a0:b8:7e:f0:71:af:17:17:33:79:56:
         53:a7:2b:1c:3b:8a:82:59:12:5e:34:76:d0:b4:c8:fc:49:77:
         8a:d2:4c:e1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZYZqdUBIdzjpCamAZ0hwSZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDA5MDgyODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzRhYWJhNTk4OWJhZGI2MDI3NDc2MGRlZWY2YzQwY2QwMTEyMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x+Y5OLVZOroTmWN8ADbCu7rlIQ5
RyDAjLv0m+W3Q67OVa3Fxgu+As7E9fk277k6o6GsiMPm/jkzIeZQMYX3Y9aHhqTC
if6r2P8QSYfqCtTTfi/POEIdF/3eiC8muLAja+swnRgGpK1wuBkqWk3duxC9SaHR
qrPZrUY/A9/0Krkl5Y4ImhpR9YtxgWuZjtsKmmHwfHzN+LnuhtCBtY/GYqFO4RR6
VSeyDpnn/6knO6QGHuz5RMSDHndIPvZ/7tbW9jmS70ezPGdQDtTBmAsA7MuNxs1C
ATV+G444OoZ5bJutzv0/Hlj6r/O7XeFZrSGIeGzkO84rB6nGKsCQDMXllwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOdKq6WYm622AnR2De72xAzQESAmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzE4MTgx
Zi01NTU0LTRmYTAtOGM2ZC04YzIzZjZmNTdjOGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMTgxODFm
LTU1NTQtNGZhMC04YzZkLThjMjNmNmY1N2M4Yy8xLzUwcXJwWmlicmJZQ2RIWU43
dmJFRE5BUklDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuZtLMA0EAgACMAcDBQMqE8AAMA0GCSqGSIb3
DQEBCwUAA4IBAQAuC1TTnNIG6LUdMGN6AqTuDKDaAqjkmlRkXY039BF7FOZM4mqu
eQX/ibT8RJA2RqD5Ti2nP9nx6R0svMkIor1Ya3XcUBzXlzV/fWdFzgnMFrliPI/P
94AjCbUMoxVetPXE6LckvTdnjN90IbkXGQz9bOF2l/mri40gftuQpHQ/uYXx1nbK
q2lxt+7+LxAKg08P2BPL0Ekr94h/KE1k10sEUjkybLm/wBO0Gd8Ydw35tWkcCRxW
BpUxT00q1FucqIF1dCyzvL6e+KgUQ+ggeQ/0/na4ZrhJgBzFi1sZc9PdoLh+8HGv
FxczeVZTpyscO4qCWRJeNHbQtMj8SXeK0kzh
-----END CERTIFICATE-----