Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.cer (raw, json)
Hash identifier:          4hM6KmHbkYzjBVtob4n7x7ivgcxgQu50AKrswAZHvDY=
Subject key identifier:   F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A3BBB286D24FF6A6367C4CB5505A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199903
                          IP: 185.37.172.0/22
                          IP: 2a00:f8a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:3b:bb:28:6d:24:ff:6a:63:67:c4:cb:55:05:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f78847e0435356ee5ef086c12048408a04191b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:aa:e9:9c:b3:43:fa:68:fe:b6:16:e2:96:
                    85:3b:21:70:c2:24:7b:ac:67:d6:ca:c6:16:ed:67:
                    23:52:08:2e:e3:b7:d5:5d:82:10:50:ea:9a:39:1e:
                    20:7c:c0:aa:5a:67:1a:eb:d0:7f:39:e6:61:9a:5b:
                    6d:55:16:c0:d2:f0:51:0d:10:03:53:4b:6d:1b:de:
                    3b:d5:8c:2b:f9:2f:e3:12:ee:76:68:0c:ae:50:51:
                    c4:bb:f5:d1:01:a9:3d:6e:e8:09:07:77:8b:fe:b9:
                    1a:c8:25:17:23:5e:8c:88:95:d7:0a:d0:f4:fd:c8:
                    0e:3e:b6:e6:08:bc:ba:8a:6f:92:22:d7:64:ec:f7:
                    47:6e:e0:7c:41:42:75:e2:03:05:ef:02:c7:b6:86:
                    ce:4a:49:a4:ff:15:09:10:fc:d9:d4:ff:56:b2:f7:
                    f4:83:6c:7f:5c:2a:a6:6e:14:c0:91:a5:c8:8d:37:
                    71:73:4c:fb:eb:00:db:bb:21:c1:18:b3:1b:ef:37:
                    05:7e:28:9a:61:c9:e9:3b:c7:09:e3:75:97:fc:1b:
                    6b:04:18:49:85:85:81:01:b8:91:62:09:05:23:f1:
                    c0:50:34:71:d0:8f:db:fc:16:ae:c1:75:77:83:2c:
                    c3:8a:51:f9:22:87:d2:b7:7a:36:4b:f6:f3:f3:bd:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.172.0/22
                IPv6:
                  2a00:f8a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199903

    Signature Algorithm: sha256WithRSAEncryption
         33:28:5e:04:dc:2a:0a:99:a6:8a:5c:6b:20:11:03:85:29:74:
         eb:24:b6:c5:df:6b:46:88:41:51:64:3c:a1:cd:95:b3:6c:ac:
         d1:ab:cb:7f:4b:1f:79:12:31:4b:5d:32:1a:45:aa:fd:c0:9e:
         fb:c8:5a:6b:e4:d4:25:82:34:7a:c5:47:98:4d:b0:a8:80:9d:
         8e:91:24:dc:bc:c1:65:99:0a:85:ed:e9:ff:19:57:58:7f:87:
         da:b5:cc:51:34:90:6e:dd:e2:39:c2:79:40:ae:2d:ad:d8:2f:
         2a:e9:e4:19:a1:7b:79:5d:57:6e:88:a2:0a:5d:d3:67:77:e9:
         bf:33:32:6a:8c:3e:06:93:64:02:15:5b:8e:e0:d9:15:26:fb:
         ed:ef:e8:2a:ce:2c:80:d1:c7:f6:d3:00:3a:48:c4:f5:10:a9:
         92:8d:e3:76:a4:61:89:bf:1e:b5:f8:9e:14:60:c3:be:4a:03:
         63:61:82:5b:90:31:c9:7f:72:4a:b6:8b:4d:ea:ff:92:fa:4e:
         b1:cf:96:9b:2d:5a:24:44:f4:e3:e2:8a:0b:0d:7c:ca:90:b7:
         c4:70:8d:19:b5:ac:4d:46:72:f1:cb:8b:9c:b8:9c:74:00:bd:
         a9:ca:a2:00:84:af:2e:9a:04:e5:12:57:fc:12:42:bd:cf:0a:
         aa:0e:ee:34
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaju7KG0k/2pjZ8TLVQWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzg4NDdlMDQzNTM1NmVlNWVmMDg2YzEyMDQ4NDA4YTA0MTkxYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/2q6ZyzQ/po/rYW4paFOyFwwiR7
rGfWysYW7WcjUggu47fVXYIQUOqaOR4gfMCqWmca69B/OeZhmlttVRbA0vBRDRAD
U0ttG9471Ywr+S/jEu52aAyuUFHEu/XRAak9bugJB3eL/rkayCUXI16MiJXXCtD0
/cgOPrbmCLy6im+SItdk7PdHbuB8QUJ14gMF7wLHtobOSkmk/xUJEPzZ1P9Wsvf0
g2x/XCqmbhTAkaXIjTdxc0z76wDbuyHBGLMb7zcFfiiaYcnpO8cJ43WX/BtrBBhJ
hYWBAbiRYgkFI/HAUDRx0I/b/BauwXV3gyzDilH5IofSt3o2S/bz872sLwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPeIR+BDU1buXvCGwSBIQIoEGRt4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzNhNmI0
Yi03NTdiLTRkMDEtYTNkNy1kYmI0Y2E1NGQyOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvM2E2YjRi
LTc1N2ItNGQwMS1hM2Q3LWRiYjRjYTU0ZDI5NC8xLzk0aEg0RU5UVnU1ZThJYkJJ
RWhBaWdRWkczZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSWsMA0EAgACMAcDBQAqAPigMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMM3zANBgkqhkiG9w0BAQsFAAOCAQEAMyheBNwqCpmm
ilxrIBEDhSl06yS2xd9rRohBUWQ8oc2Vs2ys0avLf0sfeRIxS10yGkWq/cCe+8ha
a+TUJYI0esVHmE2wqICdjpEk3LzBZZkKhe3p/xlXWH+H2rXMUTSQbt3iOcJ5QK4t
rdgvKunkGaF7eV1XboiiCl3TZ3fpvzMyaow+BpNkAhVbjuDZFSb77e/oKs4sgNHH
9tMAOkjE9RCpko3jdqRhib8etfieFGDDvkoDY2GCW5AxyX9ySraLTer/kvpOsc+W
my1aJET04+KKCw18ypC3xHCNGbWsTUZy8cuLnLicdAC9qcqiAISvLpoE5RJX/BJC
vc8Kqg7uNA==
-----END CERTIFICATE-----