Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
File:                     8PPwSfPyhFHj4b9ouXT_28jEFMc.cer (raw, json)
Hash identifier:          hbDnMH5/xO//vMYZ6S0R57l51DxyLkxlnz1dy5Lph4Y=
Subject key identifier:   F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B38E5CA2F847495354035097378EB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197052
                          IP: 91.216.66.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:38:e5:ca:2f:84:74:95:35:40:35:09:73:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:f0:61:a0:ba:9f:ef:3d:ee:2d:4e:4c:4b:
                    73:85:12:24:bc:a4:7f:d2:a5:71:d5:f9:aa:f0:59:
                    eb:d4:b4:51:1b:fe:b2:88:28:6a:7e:c1:f6:3c:5d:
                    eb:66:da:3a:b9:2a:23:78:b0:06:2e:1d:fe:01:b7:
                    1b:13:27:1b:b4:1a:6d:a9:41:38:2e:f0:e6:14:24:
                    8c:64:c1:cf:c0:9b:e1:d8:9e:16:3a:78:3b:82:8b:
                    a2:7f:0e:c0:b8:4a:5c:25:3a:23:07:5d:3e:76:0e:
                    24:6e:bb:35:85:10:06:86:48:95:9c:c0:28:fa:7c:
                    75:de:e3:96:00:da:34:c2:74:2a:c1:11:b0:c7:4d:
                    20:6c:b3:00:2d:fa:0c:61:68:e3:67:3a:75:4f:a0:
                    b0:93:bc:2b:6f:9d:30:ff:7a:b9:ee:24:69:4a:55:
                    6a:99:7d:e2:77:80:d0:13:27:cf:1e:0c:cd:9d:4c:
                    2d:0e:10:55:d0:81:f8:3b:9c:80:80:1b:e7:f0:c4:
                    86:f0:6f:df:86:64:5b:e3:67:5c:ab:06:b7:1f:bc:
                    0f:c4:45:cd:99:8a:93:7e:0a:fe:ae:ce:46:fa:4b:
                    6d:2e:4b:8b:90:ed:80:24:b9:01:89:64:3d:fd:08:
                    00:20:08:46:9f:50:ad:da:a5:99:4d:11:84:7e:c2:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.66.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197052

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:9d:ae:d7:ae:0f:b2:6f:7a:28:3b:b7:ea:4c:1d:97:43:
         63:92:ad:8e:e3:c5:b6:fd:db:b1:f3:72:6c:98:85:5a:44:4d:
         61:ee:69:97:16:f8:ca:0e:51:7d:bb:bb:c8:fb:c7:9e:d9:21:
         c4:a6:bf:59:c8:b2:86:ff:b9:4c:2d:73:61:4b:ff:4b:02:56:
         8b:f5:d6:6d:5d:d1:52:af:11:a3:6b:2d:b1:fb:a7:12:ee:fa:
         15:22:4a:9e:e9:0a:f5:d1:a0:f7:30:40:8d:ed:6b:19:05:97:
         87:cd:87:51:db:83:41:a2:6c:4d:41:8a:19:51:35:8a:80:75:
         8e:50:d4:cf:2f:ff:74:55:6c:4b:66:d4:39:7e:0c:05:1a:80:
         90:13:61:db:22:f8:a3:f5:f5:ac:18:02:43:ef:69:e8:ff:d2:
         68:91:84:73:71:60:55:3f:b2:02:68:89:81:2c:7e:65:b5:84:
         f3:fd:6a:d6:69:e6:50:8c:73:23:08:4f:e0:c9:fb:4c:e6:71:
         1c:87:3f:6c:92:c6:40:b7:90:56:06:7a:a1:73:25:dc:a5:e2:
         a7:3c:e6:8d:f0:11:5d:ef:98:36:d0:72:5a:3e:df:6c:47:5f:
         59:cb:0a:cc:bd:e1:75:2b:d5:6d:f1:f0:fa:10:66:89:d5:e3:
         01:1a:3c:c5
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQmazjlyi+EdJU1QDUJc3jrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGYzZjA0OWYzZjI4NDUxZTNlMWJmNjhiOTc0ZmZkYmM4YzQxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY7wYaC6n+897i1OTEtzhRIkvKR/
0qVx1fmq8Fnr1LRRG/6yiChqfsH2PF3rZto6uSojeLAGLh3+AbcbEycbtBptqUE4
LvDmFCSMZMHPwJvh2J4WOng7gouifw7AuEpcJTojB10+dg4kbrs1hRAGhkiVnMAo
+nx13uOWANo0wnQqwRGwx00gbLMALfoMYWjjZzp1T6Cwk7wrb50w/3q57iRpSlVq
mX3id4DQEyfPHgzNnUwtDhBV0IH4O5yAgBvn8MSG8G/fhmRb42dcqwa3H7wPxEXN
mYqTfgr+rs5G+kttLkuLkO2AJLkBiWQ9/QgAIAhGn1Ct2qWZTRGEfsKR5wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPDz8Enz8oRR4+G/aLl0/9vIxBTHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzkwOGU5
MS0yN2E2LTQxNGEtODJlOC01ZTUyM2JhOGM5ZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvOTA4ZTkx
LTI3YTYtNDE0YS04MmU4LTVlNTIzYmE4YzlkNy8xLzhQUHdTZlB5aEZIajRiOW91
WFRfMjhqRUZNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9hCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMBvDANBgkqhkiG9w0BAQsFAAOCAQEAUaGdrteuD7Jveig7t+pMHZdDY5KtjuPF
tv3bsfNybJiFWkRNYe5plxb4yg5Rfbu7yPvHntkhxKa/Wciyhv+5TC1zYUv/SwJW
i/XWbV3RUq8Ro2stsfunEu76FSJKnukK9dGg9zBAje1rGQWXh82HUduDQaJsTUGK
GVE1ioB1jlDUzy//dFVsS2bUOX4MBRqAkBNh2yL4o/X1rBgCQ+9p6P/SaJGEc3Fg
VT+yAmiJgSx+ZbWE8/1q1mnmUIxzIwhP4Mn7TOZxHIc/bJLGQLeQVgZ6oXMl3KXi
pzzmjfARXe+YNtByWj7fbEdfWcsKzL3hdSvVbfHw+hBmidXjARo8xQ==
-----END CERTIFICATE-----