Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer (raw, json)
Hash identifier:          GGSDTWjo82Ki1VQxxxqZqPC66wa3FcTv6GTDJaVHpns=
Subject key identifier:   E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420683AF488D0C822F7FF8F8C326E1B2C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200001
                          IP: 194.42.110.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:3a:f4:88:d0:c8:22:f7:ff:8f:8c:32:6e:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:9a:22:66:15:1a:09:91:0b:bd:9c:ff:0d:
                    6e:55:d9:18:90:48:9d:4c:d1:e5:fa:aa:4d:58:bb:
                    df:d9:03:98:27:bb:7c:4a:73:c3:c3:02:92:fb:3d:
                    e8:08:a3:b5:7c:9c:ba:dc:74:25:a8:3b:4b:e7:5a:
                    7a:2d:d9:58:2a:44:1b:e8:9c:26:85:fb:7d:c4:4d:
                    7c:c8:6b:5b:8f:a6:14:39:74:ff:d3:63:0c:79:01:
                    da:e5:fb:c9:00:4f:ab:0b:8f:6e:a6:13:05:57:7b:
                    5d:71:07:36:c2:f5:b6:8f:d1:07:fe:f7:fd:95:59:
                    ec:df:ac:48:b7:67:6c:81:e6:d2:30:46:09:4d:6c:
                    d7:9b:76:0f:28:ed:c1:ef:53:5e:c0:f7:85:e3:e6:
                    79:a1:dc:34:ee:67:45:6e:c6:d0:c3:1f:c4:23:14:
                    e5:c2:0d:06:48:4a:2b:dc:c2:34:80:75:38:e3:40:
                    bc:99:a7:0b:98:50:a2:df:94:38:7d:e4:69:0b:e5:
                    2c:ea:2f:58:66:f4:8d:cb:48:42:f6:d2:8b:19:49:
                    99:a1:67:4f:e5:ea:52:48:7a:10:7e:74:22:c7:d6:
                    fd:0a:03:19:56:4f:1c:24:38:f2:c9:70:ca:47:cf:
                    92:27:94:ed:d9:a8:87:66:54:b8:38:85:90:7f:26:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.110.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200001

    Signature Algorithm: sha256WithRSAEncryption
         60:71:b6:3d:fa:10:c6:60:9f:b0:a8:97:2b:d9:3c:20:f6:b3:
         ea:3d:09:ea:83:02:e4:d9:80:f4:70:4c:b9:23:79:2d:d8:b5:
         01:af:8f:a0:2d:83:6a:6b:84:4b:ac:fd:b6:94:a8:a6:4b:e5:
         62:9f:d6:e1:e1:82:68:f0:da:d5:86:a6:de:b1:e5:dd:c2:e9:
         aa:cb:92:f1:a6:0e:54:84:85:59:5c:2a:9e:0d:cd:55:82:2b:
         3c:63:d7:8e:df:f7:8d:6f:90:b9:3e:72:df:fe:84:ae:e8:e3:
         87:68:7c:f8:5b:fe:e8:da:95:7a:a0:63:4b:e1:7c:b7:ea:43:
         68:84:47:4e:1f:41:c8:e7:1c:3a:96:08:5b:5c:31:0b:f9:9a:
         59:4e:38:46:b4:84:cc:ad:3f:5f:da:04:bf:c9:50:af:08:ec:
         37:fe:d5:96:59:ea:f8:00:70:4f:90:21:70:02:8f:36:a8:36:
         0d:45:14:99:b5:3f:15:1d:1b:e9:d4:2b:ca:82:8a:13:45:04:
         04:2b:d7:b8:5c:3e:c8:91:f9:91:16:3b:ab:b0:aa:3b:a4:dd:
         b5:e7:9a:af:49:e8:7e:f4:44:2a:ab:b4:15:9c:62:d8:5f:ca:
         01:c8:29:af:3f:2b:c9:b1:da:c1:be:4e:65:dd:a8:44:43:1a:
         fa:61:b2:90
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgaDr0iNDIIvf/j4wybhssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTRhYjg5ZDMzYmQ4YWE5NDM4YTFkZDBiNGM1OWVkYmViMGM2NGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov+aImYVGgmRC72c/w1uVdkYkEid
TNHl+qpNWLvf2QOYJ7t8SnPDwwKS+z3oCKO1fJy63HQlqDtL51p6LdlYKkQb6Jwm
hft9xE18yGtbj6YUOXT/02MMeQHa5fvJAE+rC49uphMFV3tdcQc2wvW2j9EH/vf9
lVns36xIt2dsgebSMEYJTWzXm3YPKO3B71NewPeF4+Z5odw07mdFbsbQwx/EIxTl
wg0GSEor3MI0gHU440C8macLmFCi35Q4feRpC+Us6i9YZvSNy0hC9tKLGUmZoWdP
5epSSHoQfnQix9b9CgMZVk8cJDjyyXDKR8+SJ5Tt2aiHZlS4OIWQfyZvZwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOVKuJ0zvYqpQ4od0LTFntvrDGTuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2MzMTZi
Ni03MmUzLTRiY2UtYmJlMi0xYjQzMjg3MmJjZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYzMxNmI2
LTcyZTMtNGJjZS1iYmUyLTFiNDMyODcyYmNmZi8xLzVVcTRuVE85aXFsRGloM1F0
TVdlMi1zTVpPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwipuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMNQTANBgkqhkiG9w0BAQsFAAOCAQEAYHG2PfoQxmCfsKiXK9k8IPaz6j0J6oMC
5NmA9HBMuSN5Ldi1Aa+PoC2DamuES6z9tpSopkvlYp/W4eGCaPDa1Yam3rHl3cLp
qsuS8aYOVISFWVwqng3NVYIrPGPXjt/3jW+QuT5y3/6Erujjh2h8+Fv+6NqVeqBj
S+F8t+pDaIRHTh9ByOccOpYIW1wxC/maWU44RrSEzK0/X9oEv8lQrwjsN/7Vllnq
+ABwT5AhcAKPNqg2DUUUmbU/FR0b6dQryoKKE0UEBCvXuFw+yJH5kRY7q7CqO6Td
teear0nofvREKqu0FZxi2F/KAcgprz8rybHawb5OZd2oREMa+mGykA==
-----END CERTIFICATE-----