Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.cer (raw, json)
Hash identifier:          haYZsECEaIUGfrBDpOYOeKyV3m0dhg7XLkDi1JWhlwc=
Subject key identifier:   F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521C6962C430605FDD63754DC3B0EB1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203592
                          IP: 185.128.116.0/22
                          IP: 2a0c:2c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:c6:96:2c:43:06:05:fd:d6:37:54:dc:3b:0e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:d7:c2:30:ce:9a:33:53:6d:c3:ea:98:d2:
                    86:a7:0b:b3:44:34:bb:db:04:4f:ea:81:fb:e5:01:
                    bc:16:56:0b:25:99:8d:62:ba:00:8a:99:5a:7b:18:
                    0e:51:e3:62:96:5e:7e:55:73:a2:e7:25:21:e3:64:
                    c8:e1:1d:3c:94:0b:92:95:a7:9c:b0:8a:54:14:d2:
                    69:2a:c8:06:7d:e5:e7:b3:43:ee:39:e3:65:80:ba:
                    16:53:93:20:0f:e6:d0:cf:ce:6f:c3:37:92:5c:65:
                    f5:7f:5a:23:ea:ef:49:90:be:b6:9e:aa:5a:dc:2b:
                    40:d8:3e:26:35:dd:d1:8f:e6:d3:8c:57:cd:fd:fe:
                    03:ad:70:87:aa:e3:40:ff:41:8e:7c:a4:0d:6d:bd:
                    9a:05:dc:97:71:f6:4c:73:52:4c:c9:c2:b6:c0:cb:
                    71:83:b9:d2:a7:7c:80:29:60:9a:47:ee:2d:0f:fd:
                    c9:74:55:a7:02:86:af:59:cd:bf:16:28:a5:44:dd:
                    42:a4:c0:90:d7:1f:33:f5:29:d9:9f:f3:f0:50:d2:
                    29:76:02:ad:54:28:c7:e3:6d:73:fc:74:f7:cf:8c:
                    15:b3:cd:e1:ba:45:19:c8:26:a8:41:45:67:16:63:
                    6a:4a:5a:68:74:9a:54:5a:ce:26:4f:66:fe:e0:98:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.116.0/22
                IPv6:
                  2a0c:2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203592

    Signature Algorithm: sha256WithRSAEncryption
         44:99:94:db:14:89:30:5d:c4:09:54:ee:02:8e:cc:19:79:88:
         0d:11:40:70:96:e7:50:dc:86:f3:69:19:ef:39:06:03:4d:4d:
         c4:6b:40:5f:dd:4d:50:af:c5:66:5a:3c:03:42:ad:02:2e:07:
         f7:3d:49:eb:69:e5:cb:aa:08:fd:64:8a:42:87:13:d1:46:c6:
         fe:43:2d:ed:7c:4e:bd:42:0c:d7:86:1b:4f:17:8d:4c:f2:7c:
         64:7c:23:13:42:1a:eb:b3:cf:5f:f3:82:5c:b2:1d:9a:5b:12:
         3c:af:32:b9:7f:62:17:83:18:70:0b:d7:e5:d3:36:58:57:fd:
         57:a5:cf:68:d3:09:55:a2:8a:7c:b0:f0:91:ae:6d:41:02:55:
         15:0a:f9:a3:36:dc:6a:d1:e9:66:56:99:ba:46:76:5c:52:7c:
         44:89:12:97:18:81:4f:31:5c:b8:b1:ce:6f:e1:52:e0:d5:42:
         34:ee:11:87:bc:98:d5:aa:55:78:ff:1c:6d:90:f8:c7:db:a8:
         26:ea:39:2d:c0:04:da:d7:f1:19:e6:ef:d6:34:22:8f:41:00:
         10:eb:7b:8f:80:17:64:ac:3b:be:9e:49:ae:3b:62:af:e0:7f:
         69:e4:87:41:08:c9:45:d7:33:78:f2:fb:8c:8c:a9:15:13:a8:
         cd:93:06:2d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlIcaWLEMGBf3WN1TcOw6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmFiMGI1ODViOWMzOTYyODhkMjBlOWNmNjY1YWUxZGUzOWY3ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KvXwjDOmjNTbcPqmNKGpwuzRDS7
2wRP6oH75QG8FlYLJZmNYroAiplaexgOUeNill5+VXOi5yUh42TI4R08lAuSlaec
sIpUFNJpKsgGfeXns0PuOeNlgLoWU5MgD+bQz85vwzeSXGX1f1oj6u9JkL62nqpa
3CtA2D4mNd3Rj+bTjFfN/f4DrXCHquNA/0GOfKQNbb2aBdyXcfZMc1JMycK2wMtx
g7nSp3yAKWCaR+4tD/3JdFWnAoavWc2/FiilRN1CpMCQ1x8z9SnZn/PwUNIpdgKt
VCjH421z/HT3z4wVs83hukUZyCaoQUVnFmNqSlpodJpUWs4mT2b+4JjlowIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPKrC1hbnDliiNIOnPZlrh3jn3gzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2JiZmEx
OS1kZWJjLTRjNzctOGQ2My05MDhiMjUwY2JhNzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvYmJmYTE5
LWRlYmMtNGM3Ny04ZDYzLTkwOGIyNTBjYmE3OS8xLzhxc0xXRnVjT1dLSTBnNmM5
bVd1SGVPZmVETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYB0MA0EAgACMAcDBQMqDALAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMbSDANBgkqhkiG9w0BAQsFAAOCAQEARJmU2xSJMF3E
CVTuAo7MGXmIDRFAcJbnUNyG82kZ7zkGA01NxGtAX91NUK/FZlo8A0KtAi4H9z1J
62nly6oI/WSKQocT0UbG/kMt7XxOvUIM14YbTxeNTPJ8ZHwjE0Ia67PPX/OCXLId
mlsSPK8yuX9iF4MYcAvX5dM2WFf9V6XPaNMJVaKKfLDwka5tQQJVFQr5ozbcatHp
ZlaZukZ2XFJ8RIkSlxiBTzFcuLHOb+FS4NVCNO4Rh7yY1apVeP8cbZD4x9uoJuo5
LcAE2tfxGebv1jQij0EAEOt7j4AXZKw7vp5Jrjtir+B/aeSHQQjJRdczePL7jIyp
FROozZMGLQ==
-----END CERTIFICATE-----