Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer (raw, json)
Hash identifier:          KJzLnPJ1u8+GY3OWvkfg+hkZameIMbOnlx2YiagEhE4=
Subject key identifier:   F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521654CF748CEFBB1979EDA1086ECA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 1241
                          AS: 8951
                          AS: 15617
                          AS: 25472
                          IP: 37.6.0.0/16
                          IP: 46.12.0.0/16
                          IP: 46.190.0.0/17
                          IP: 46.246.128.0/17
                          IP: 62.1.0.0/16
                          IP: 62.169.192.0/18
                          IP: 77.49.0.0/16
                          IP: 79.103.0.0/16
                          IP: 79.107.0.0/16
                          IP: 80.245.160.0/20
                          IP: 81.92.48.0/20
                          IP: 84.254.0.0/18
                          IP: 91.140.0.0/17
                          IP: 109.242.0.0/16
                          IP: 130.43.0.0/17
                          IP: 176.58.128.0/17
                          IP: 185.3.220.0/22
                          IP: 185.4.88.0/22
                          IP: 188.4.0.0/16
                          IP: 188.73.192.0/18
                          IP: 193.92.0.0/16
                          IP: 194.219.0.0/16
                          IP: 195.74.224.0/19
                          IP: 212.54.192.0/19
                          IP: 212.152.64.0/18
                          IP: 212.251.0.0/17
                          IP: 213.16.128.0/17
                          IP: 2a02:2148::/29
                          IP: 2a03:f000::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:65:4c:f7:48:ce:fb:b1:97:9e:da:10:86:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:36:95:0e:73:da:5a:ca:3b:16:d4:1e:5b:
                    30:59:38:82:16:8a:f9:f2:b4:1a:ec:c4:72:bd:f5:
                    c6:45:56:91:ef:ed:1e:4e:83:00:1c:28:97:df:62:
                    b3:65:22:d7:33:c7:fd:6d:24:ec:36:4a:72:ed:73:
                    e3:1b:0c:3a:61:25:8a:0a:41:ab:58:e4:a5:80:c2:
                    f9:72:c8:0d:c9:86:ae:d1:57:8c:8d:0b:d4:05:9f:
                    f5:c9:b5:bd:93:03:0a:17:e1:a3:83:d3:87:5f:53:
                    d6:05:27:6c:db:6f:54:3b:77:70:f6:7a:37:7c:8e:
                    23:97:40:44:f3:a0:43:32:e1:97:be:86:6d:38:da:
                    8c:b0:ee:c1:78:cf:2f:74:4b:13:8d:b6:e9:ad:2f:
                    8b:38:57:f1:52:ef:79:0a:e7:47:e9:56:a7:55:f6:
                    a6:2f:a1:65:a8:66:1e:c9:94:93:e7:6c:c3:71:2d:
                    31:e7:a3:65:1c:78:b4:56:4d:4e:35:bd:6f:1d:83:
                    64:f9:c5:4d:d6:4c:52:5d:c0:16:67:b8:39:2f:2d:
                    cd:d8:a4:74:aa:78:d1:ab:23:ba:04:bb:36:59:48:
                    51:8f:8c:e6:b4:ae:92:7c:e6:1f:fd:d2:de:d3:e2:
                    c9:67:03:cf:59:7f:62:61:08:d6:42:01:c3:f5:4a:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.6.0.0/16
                  46.12.0.0/16
                  46.190.0.0/17
                  46.246.128.0/17
                  62.1.0.0/16
                  62.169.192.0/18
                  77.49.0.0/16
                  79.103.0.0/16
                  79.107.0.0/16
                  80.245.160.0/20
                  81.92.48.0/20
                  84.254.0.0/18
                  91.140.0.0/17
                  109.242.0.0/16
                  130.43.0.0/17
                  176.58.128.0/17
                  185.3.220.0/22
                  185.4.88.0/22
                  188.4.0.0/16
                  188.73.192.0/18
                  193.92.0.0/16
                  194.219.0.0/16
                  195.74.224.0/19
                  212.54.192.0/19
                  212.152.64.0/18
                  212.251.0.0/17
                  213.16.128.0/17
                IPv6:
                  2a02:2148::/29
                  2a03:f000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1241
                  8951
                  15617
                  25472

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:08:65:87:98:f5:67:2a:b9:da:35:77:1e:7b:a1:4a:4f:
         b3:e0:b9:b3:a0:f6:7f:2d:fc:ea:49:6e:96:47:9e:5b:8d:55:
         5c:60:7e:d1:4a:8d:22:25:87:19:4d:3d:dc:d5:9f:55:b5:4e:
         cf:15:3f:2f:7d:b1:83:c8:b2:58:c0:7e:07:1c:2e:76:14:38:
         1e:5a:45:10:f6:59:4e:84:98:35:59:f6:30:0a:4a:ee:8d:3e:
         bb:6a:6d:3c:a4:93:5c:a3:be:cf:27:92:15:07:cb:5d:4b:92:
         4a:19:8d:26:34:f9:6d:dc:d1:c4:50:cd:3e:3c:03:a1:3e:6f:
         8e:f7:97:91:07:3e:88:2a:2f:ab:1d:7c:09:52:80:8d:fb:68:
         13:d7:4c:08:00:24:36:9b:fe:3c:5a:a8:0d:42:5e:4c:a9:2c:
         b3:af:33:08:bb:98:2d:21:b9:d4:0e:35:c3:b2:18:85:50:46:
         b3:4a:c6:85:f9:ea:85:55:2a:d7:97:f8:14:20:a1:15:44:e9:
         99:f3:12:9f:44:9d:6e:74:57:70:07:36:b8:5c:40:de:67:ca:
         63:6e:27:56:8a:45:67:76:79:82:dc:44:c2:0e:85:18:7e:d5:
         3e:54:8f:64:9a:fe:1b:22:29:f5:10:b3:32:03:8c:31:c6:d2:
         f5:dd:3e:45
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISAZQlIWVM90jO+7GXntoQhuymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGZmMmM2MjI5YWY3NjNhOTlmNTM0OWEzMjUxMGRmNGE0NTI2MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJM2lQ5z2lrKOxbUHlswWTiCFor5
8rQa7MRyvfXGRVaR7+0eToMAHCiX32KzZSLXM8f9bSTsNkpy7XPjGww6YSWKCkGr
WOSlgML5csgNyYau0VeMjQvUBZ/1ybW9kwMKF+Gjg9OHX1PWBSds229UO3dw9no3
fI4jl0BE86BDMuGXvoZtONqMsO7BeM8vdEsTjbbprS+LOFfxUu95CudH6VanVfam
L6FlqGYeyZST52zDcS0x56NlHHi0Vk1ONb1vHYNk+cVN1kxSXcAWZ7g5Ly3N2KR0
qnjRqyO6BLs2WUhRj4zmtK6SfOYf/dLe0+LJZwPPWX9iYQjWQgHD9UpG7QIDAQAB
o4IDWDCCA1QwHQYDVR0OBBYEFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzA1MWZh
Mi1jNTgwLTRhMDItYTE4Ni1lNjlmN2E1ZDJkOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMDUxZmEy
LWM1ODAtNGEwMi1hMTg2LWU2OWY3YTVkMmQ5MC8xLzhQOHNZaW12ZGpxWjlUU2FN
bEVOOUtSU1lVTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHLBggrBgEF
BQcBBwEB/wSBuzCBuDCBnwQCAAEwgZgDAwAlBgMDAC4MAwQHLr4AAwQHLvaAAwMA
PgEDBAY+qcADAwBNMQMDAE9nAwMAT2sDBARQ9aADBARRXDADBAZU/gADBAdbjAAD
AwBt8gMEB4IrAAMEB7A6gAMEArkD3AMEArkEWAMDALwEAwQGvEnAAwMAwVwDAwDC
2wMEBcNK4AMEBdQ2wAMEBtSYQAMEB9T7AAMEB9UQgDAUBAIAAjAOAwUDKgIhSAMF
AyoD8AAwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAICBNkCAiL3AgI9AQICY4AwDQYJ
KoZIhvcNAQELBQADggEBABnYCGWHmPVnKrnaNXcee6FKT7PgubOg9n8t/OpJbpZH
nluNVVxgftFKjSIlhxlNPdzVn1W1Ts8VPy99sYPIsljAfgccLnYUOB5aRRD2WU6E
mDVZ9jAKSu6NPrtqbTykk1yjvs8nkhUHy11LkkoZjSY0+W3c0cRQzT48A6E+b473
l5EHPogqL6sdfAlSgI37aBPXTAgAJDab/jxaqA1CXkypLLOvMwi7mC0hudQONcOy
GIVQRrNKxoX56oVVKteX+BQgoRVE6ZnzEp9EnW50V3AHNrhcQN5nymNuJ1aKRWd2
eYLcRMIOhRh+1T5Uj2Sa/hsiKfUQszIDjDHG0vXdPkU=
-----END CERTIFICATE-----