Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
File:                     7-oXe8wrDvZMq2BObmQnsa3gv2k.cer (raw, json)
Hash identifier:          1z04aN5eYxBUkls8hqSbIZxQ19NscubPJD2IOMFidEQ=
Subject key identifier:   EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068747C02D7C136F3884686F78A4E3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209041
                          IP: 81.21.224.0/22
                          IP: 2a0d:26c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:74:7c:02:d7:c1:36:f3:88:46:86:f7:8a:4e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:2e:dd:82:9f:10:ee:55:d8:cd:c1:fb:ef:
                    03:03:d3:f2:ea:b9:32:9d:84:99:10:4f:83:51:8b:
                    54:a0:49:ae:aa:06:cd:cf:13:30:47:67:e6:ed:46:
                    80:a2:02:c2:5c:5d:58:70:88:aa:92:27:18:10:01:
                    cc:fb:ed:0b:8f:c6:7f:80:63:77:56:2f:15:ab:06:
                    d5:b4:7d:cb:e6:40:ee:60:79:a1:67:37:b7:a7:7c:
                    c5:de:39:8a:09:7b:a4:fc:5b:0b:7b:ba:7f:c6:ba:
                    4d:88:80:57:4a:7b:95:a1:e5:33:f7:3a:a0:e9:40:
                    e7:12:60:2f:ce:ec:95:9d:39:fc:2e:e1:0d:fb:eb:
                    b0:06:ca:c2:94:de:d6:ca:e7:96:bf:dd:dc:d2:a0:
                    cf:24:d6:21:61:61:27:77:4f:c0:1b:c0:3b:fd:0f:
                    16:d8:27:fb:d0:2e:bb:80:89:ab:59:4b:fd:a8:f6:
                    2a:13:6d:53:6a:c9:96:ef:ba:1d:92:25:34:de:53:
                    94:2e:dc:0d:6f:5b:7f:7d:5b:b6:6d:48:7c:83:58:
                    f3:52:af:ab:48:b4:0a:73:19:fb:d6:bd:66:db:de:
                    9c:85:52:f1:92:86:09:e5:29:63:2e:72:2a:83:ff:
                    e0:a8:ae:0c:bd:35:ce:f4:ca:be:45:e0:ac:47:2f:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.224.0/22
                IPv6:
                  2a0d:26c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209041

    Signature Algorithm: sha256WithRSAEncryption
         67:59:f1:dc:f9:eb:11:6e:de:c1:de:57:88:f6:b7:ed:e3:8d:
         99:fe:f5:a5:08:dd:52:94:b9:df:e3:49:bf:5d:b1:f1:00:df:
         3f:48:04:64:aa:46:b0:67:24:3f:1c:15:c9:57:03:c7:4f:2c:
         ba:bc:c8:b4:54:8e:89:d1:b8:19:a8:d1:1a:14:e9:4d:c6:8c:
         0f:18:9a:38:07:b6:f1:2f:e9:f0:49:f2:57:64:c5:e6:3f:0f:
         f6:42:cf:76:cb:82:72:d7:54:b3:e0:65:48:b0:d6:44:8b:48:
         c0:52:b1:51:54:83:3e:10:cb:a3:e2:b5:c7:aa:ae:79:68:0f:
         88:ad:a1:b2:c9:12:ae:a0:32:d2:a7:72:fc:a1:94:7d:b3:e9:
         a7:b3:85:ee:8e:c3:dc:49:4b:7c:dc:d7:01:ad:d6:16:04:7b:
         77:1a:aa:be:4a:bb:3e:60:8f:34:de:10:52:69:89:c0:9d:44:
         14:1c:01:e8:2f:68:37:9c:da:7a:fd:68:ee:ca:2a:c0:d3:f5:
         3f:08:f0:03:3e:40:93:dd:e3:ef:9c:c4:9a:aa:7c:0f:77:fd:
         18:2c:3e:85:f8:37:31:e4:53:09:6c:c4:9b:f1:10:c9:74:dc:
         b1:36:d7:51:b3:85:a0:7a:64:a6:75:6c:ca:f1:4d:cf:be:3b:
         45:7c:4f:79
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaHR8AtfBNvOIRob3ik4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmVhMTc3YmNjMmIwZWY2NGNhYjYwNGU2ZTY0MjdiMWFkZTBiZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVUu3YKfEO5V2M3B++8DA9Py6rky
nYSZEE+DUYtUoEmuqgbNzxMwR2fm7UaAogLCXF1YcIiqkicYEAHM++0Lj8Z/gGN3
Vi8VqwbVtH3L5kDuYHmhZze3p3zF3jmKCXuk/FsLe7p/xrpNiIBXSnuVoeUz9zqg
6UDnEmAvzuyVnTn8LuEN++uwBsrClN7WyueWv93c0qDPJNYhYWEnd0/AG8A7/Q8W
2Cf70C67gImrWUv9qPYqE21TasmW77odkiU03lOULtwNb1t/fVu2bUh8g1jzUq+r
SLQKcxn71r1m296chVLxkoYJ5SljLnIqg//gqK4MvTXO9Mq+ReCsRy+AjQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO/qF3vMKw72TKtgTm5kJ7Gt4L9pMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzZlZjA5
Yi04MDJhLTQ1ZjctOWU3Zi0wNmQ1MzBjZWZkOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvNmVmMDli
LTgwMmEtNDVmNy05ZTdmLTA2ZDUzMGNlZmQ4YS8xLzctb1hlOHdyRHZaTXEyQk9i
bVFuc2EzZ3Yyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCURXgMA0EAgACMAcDBQAqDSbAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMwkTANBgkqhkiG9w0BAQsFAAOCAQEAZ1nx3PnrEW7e
wd5XiPa37eONmf71pQjdUpS53+NJv12x8QDfP0gEZKpGsGckPxwVyVcDx08surzI
tFSOidG4GajRGhTpTcaMDxiaOAe28S/p8EnyV2TF5j8P9kLPdsuCctdUs+BlSLDW
RItIwFKxUVSDPhDLo+K1x6queWgPiK2hsskSrqAy0qdy/KGUfbPpp7OF7o7D3ElL
fNzXAa3WFgR7dxqqvkq7PmCPNN4QUmmJwJ1EFBwB6C9oN5zaev1o7soqwNP1Pwjw
Az5Ak93j75zEmqp8D3f9GCw+hfg3MeRTCWzEm/EQyXTcsTbXUbOFoHpkpnVsyvFN
z747RXxPeQ==
-----END CERTIFICATE-----