Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
File:                     8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer (raw, json)
Hash identifier:          8FPGQXobeAvr+3AIE6tWkGabVQBJgsYS2whw+tCMfUA=
Subject key identifier:   F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F6479F3DE3F88D55D2C7E0AD1B84D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:678:fb4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:64:79:f3:de:3f:88:d5:5d:2c:7e:0a:d1:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:21:57:30:d3:25:69:21:69:c0:63:75:cf:
                    07:1b:1c:5c:72:68:4a:fa:52:4f:4f:e1:26:1b:69:
                    d6:d0:fa:0e:a2:65:7c:06:68:23:dd:a4:53:07:b9:
                    31:4d:49:d9:f6:d1:c2:33:87:c5:2e:5f:f9:6c:8c:
                    06:dc:82:7f:2a:c7:66:a3:d5:9a:a2:47:2e:55:43:
                    9b:6e:a5:fd:dd:ed:c2:70:85:c0:c8:37:74:0a:be:
                    48:32:4a:3b:65:88:08:97:6f:a7:ea:4c:43:f9:4c:
                    ac:34:ef:a9:ad:c7:84:ae:35:56:c7:13:86:ea:d2:
                    4a:c3:7e:c3:10:76:e8:44:27:44:9c:e6:2d:ff:8b:
                    29:87:9c:65:24:4b:1c:f3:5b:5d:d3:b1:b1:b8:9d:
                    f9:c4:9b:a8:ce:72:a1:4f:c2:4c:2c:bf:9a:a0:50:
                    1e:08:b7:b5:9d:ae:0e:a5:5c:4b:c3:d4:22:79:54:
                    10:3b:f2:8f:9d:8f:ff:f6:7e:36:e4:d7:2f:12:42:
                    c7:25:dc:08:21:c0:94:40:1a:af:11:f8:bd:51:8a:
                    cc:a0:91:9c:f8:45:79:d9:4d:dd:63:23:13:c0:da:
                    e8:f3:0c:56:fb:ca:cd:f2:37:31:0f:83:87:b5:5c:
                    cf:e8:5e:00:96:93:8e:c4:1b:b8:58:46:f9:67:fe:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:fb4::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:27:1c:0b:09:ba:45:38:27:eb:1a:8d:49:36:d8:10:31:b8:
         aa:2b:fe:7c:32:0c:70:ac:f2:78:84:5e:72:c0:56:b2:48:a8:
         71:21:ab:1f:63:10:6d:ee:ae:22:d9:3a:6f:e9:86:48:2f:84:
         54:55:32:24:5e:7c:94:b0:2e:25:87:3d:1a:49:f4:7e:3e:e7:
         8d:64:ac:f5:d1:80:30:ed:95:2f:d4:2f:8c:b6:b3:a4:cf:ff:
         e7:9d:4e:e5:83:43:36:af:37:c2:35:f0:5a:3b:0e:7b:92:c5:
         c2:27:89:38:21:7a:2f:15:38:1b:c2:9e:28:9b:7a:be:45:ae:
         fd:ac:e3:3d:b9:dd:fa:00:9b:e8:d5:81:1f:ca:1b:d7:65:f8:
         a5:ac:6b:3f:c8:eb:f0:59:ad:a7:3f:28:63:29:62:62:f2:04:
         b9:88:e0:2e:74:31:75:ef:0e:31:64:99:4a:88:36:81:80:4b:
         92:f3:ff:ed:72:d4:75:62:ca:52:f8:97:55:a5:78:c9:8a:4f:
         22:6e:cc:97:be:e1:08:c9:d4:47:3d:77:93:ee:72:17:69:e8:
         e9:ce:88:0f:d0:2d:53:4f:e5:bb:8a:da:da:9a:ae:8b:cd:df:
         d6:96:fc:21:93:35:27:59:4c:94:06:24:b5:f0:b5:cc:78:1d:
         d7:a2:03:ab
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQiH2R5894/iNVdLH4K0bhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGVjY2M0ODIwMGNlZjAyMTZjMmNlNTM4NjlmZDE5MmI0YTIzZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6AhVzDTJWkhacBjdc8HGxxccmhK
+lJPT+EmG2nW0PoOomV8Bmgj3aRTB7kxTUnZ9tHCM4fFLl/5bIwG3IJ/Ksdmo9Wa
okcuVUObbqX93e3CcIXAyDd0Cr5IMko7ZYgIl2+n6kxD+UysNO+prceErjVWxxOG
6tJKw37DEHboRCdEnOYt/4sph5xlJEsc81td07GxuJ35xJuoznKhT8JMLL+aoFAe
CLe1na4OpVxLw9QieVQQO/KPnY//9n425NcvEkLHJdwIIcCUQBqvEfi9UYrMoJGc
+EV52U3dYyMTwNro8wxW+8rN8jcxD4OHtVzP6F4AlpOOxBu4WEb5Z/5MIwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFPDszEggDO8CFsLOU4af0ZK0oj9UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2NkYjgw
OS1kMWQ0LTQ1NTctYjQzMC1iYjY1YzU5MDBmNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RiODA5
LWQxZDQtNDU1Ny1iNDMwLWJiNjVjNTkwMGY3NS8xLzhPek1TQ0FNN3dJV3dzNVRo
cF9Sa3JTaVAxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+0MA0GCSqGSIb3DQEBCwUAA4IBAQB0
JxwLCbpFOCfrGo1JNtgQMbiqK/58MgxwrPJ4hF5ywFaySKhxIasfYxBt7q4i2Tpv
6YZIL4RUVTIkXnyUsC4lhz0aSfR+PueNZKz10YAw7ZUv1C+MtrOkz//nnU7lg0M2
rzfCNfBaOw57ksXCJ4k4IXovFTgbwp4om3q+Ra79rOM9ud36AJvo1YEfyhvXZfil
rGs/yOvwWa2nPyhjKWJi8gS5iOAudDF17w4xZJlKiDaBgEuS8//tctR1YspS+JdV
pXjJik8ibsyXvuEIydRHPXeT7nIXaejpzogP0C1TT+W7itramq6Lzd/WlvwhkzUn
WUyUBiS18LXMeB3XogOr
-----END CERTIFICATE-----