Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
File:                     9rrOePyQJ42C8ehmiooZ7pmCzcM.cer (raw, json)
Hash identifier:          edbpfJLGR9ovZCFMQFU+0dmtJqXK38MZpEmsU1Xc/2c=
Subject key identifier:   F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE96880F626B1BC7FC7D8759E4D12
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 89.150.58.0/24
                          IP: 185.223.64.0/22
                          IP: 2a0d:3800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e9:68:80:f6:26:b1:bc:7f:c7:d8:75:9e:4d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:37:d3:11:6f:9b:67:36:73:7a:ed:5b:c7:
                    f9:5a:23:e3:0a:7f:ff:4d:56:e6:65:46:25:68:d8:
                    e4:34:7a:a6:b0:36:a2:9d:05:eb:6f:74:0a:6b:26:
                    bd:e4:4b:d6:3d:df:52:bf:0f:0a:a4:cb:34:d5:34:
                    67:6c:8f:fb:11:2a:21:cf:70:c5:ad:06:02:b0:d9:
                    06:6a:76:dd:e3:0f:f5:f4:05:b8:6f:92:53:01:a6:
                    00:63:2b:7c:06:31:fb:9a:d2:7e:5f:04:33:2e:6f:
                    bb:dc:f3:df:0d:dc:e6:1f:5c:23:3a:19:8a:d0:b5:
                    08:53:37:0b:d7:23:f5:9b:32:b3:41:44:02:79:45:
                    f9:3f:c9:2d:84:2e:99:35:b7:f4:14:37:a2:25:e4:
                    90:f2:b4:b6:df:7b:65:f9:92:b2:66:26:b0:e9:d0:
                    c2:89:98:31:dd:d1:d9:7a:7f:35:ab:cc:dd:40:ec:
                    89:43:3b:10:c8:9f:87:7a:97:b3:53:b1:ba:4c:2e:
                    49:c5:f3:9d:09:98:2c:f9:c3:e3:c8:0f:99:86:33:
                    9f:c5:b0:4c:99:40:e9:e0:ff:20:5c:dd:b8:0e:6d:
                    3b:7c:da:83:5e:d9:fa:00:5d:b4:0b:76:b3:57:fc:
                    61:2c:d2:88:a5:a9:70:e8:3a:e3:0e:8c:5a:c7:8d:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.150.58.0/24
                  185.223.64.0/22
                IPv6:
                  2a0d:3800::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:4e:7c:fa:60:c6:ad:37:2b:b1:3a:eb:24:06:bc:89:5f:d9:
         5b:1e:21:86:50:d8:d8:e9:74:ba:c1:2e:cc:88:a4:69:fc:6a:
         96:35:1d:b9:a2:10:d6:2d:d3:4d:ff:68:ee:fe:96:35:0b:ae:
         5f:31:f1:4b:35:8d:10:7e:8b:b0:cc:ab:56:9d:ba:c5:6c:c7:
         3d:42:f2:d9:5f:a7:a1:7c:2a:ff:a4:ae:d8:ba:29:fa:b6:29:
         ba:6d:aa:82:19:4c:fe:0e:a3:96:92:66:99:a2:79:60:78:b8:
         53:fc:e7:2a:fb:a6:7c:70:4e:7a:ab:0c:f9:6e:bc:21:b9:66:
         71:1c:df:48:3e:49:94:21:3e:96:50:91:9b:5c:c4:4e:bc:a3:
         10:52:ac:e7:86:74:d1:0c:2a:85:81:b8:81:61:45:f5:ac:5a:
         05:14:ab:b7:a2:d3:42:56:dd:69:65:05:63:61:27:43:db:eb:
         ae:a6:bc:15:f6:32:ef:58:bf:0f:94:52:83:42:0e:fd:8b:be:
         d3:37:92:6c:25:53:9f:97:00:01:e1:12:a8:31:93:72:51:87:
         a3:41:fd:8d:98:78:10:ee:b2:de:b2:ba:8c:30:d9:47:22:10:
         09:32:3e:ff:97:2e:72:85:d8:70:c4:f5:d5:aa:e4:9e:18:2a:
         9d:50:23:f0
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQiH+logPYmsbx/x9h1nk0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmJhY2U3OGZjOTAyNzhkODJmMWU4NjY4YThhMTllZTk5ODJjZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxps30xFvm2c2c3rtW8f5WiPjCn//
TVbmZUYlaNjkNHqmsDainQXrb3QKaya95EvWPd9Svw8KpMs01TRnbI/7ESohz3DF
rQYCsNkGanbd4w/19AW4b5JTAaYAYyt8BjH7mtJ+XwQzLm+73PPfDdzmH1wjOhmK
0LUIUzcL1yP1mzKzQUQCeUX5P8kthC6ZNbf0FDeiJeSQ8rS233tl+ZKyZiaw6dDC
iZgx3dHZen81q8zdQOyJQzsQyJ+HepezU7G6TC5JxfOdCZgs+cPjyA+ZhjOfxbBM
mUDp4P8gXN24Dm07fNqDXtn6AF20C3azV/xhLNKIpalw6DrjDoxax42NkwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFPa6znj8kCeNgvHoZoqKGe6Zgs3DMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzc4MzVj
Mi0yMDRjLTRkZGUtOGVmOS1mNmRkM2I1MTYxZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvNzgzNWMy
LTIwNGMtNGRkZS04ZWY5LWY2ZGQzYjUxNjFmNS8xLzlyck9lUHlRSjQyQzhlaG1p
b29aN3BtQ3pjTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAWZY6AwQCud9AMA0EAgACMAcDBQMqDTgAMA0G
CSqGSIb3DQEBCwUAA4IBAQCgTnz6YMatNyuxOuskBryJX9lbHiGGUNjY6XS6wS7M
iKRp/GqWNR25ohDWLdNN/2ju/pY1C65fMfFLNY0QfouwzKtWnbrFbMc9QvLZX6eh
fCr/pK7Yuin6tim6baqCGUz+DqOWkmaZonlgeLhT/Ocq+6Z8cE56qwz5brwhuWZx
HN9IPkmUIT6WUJGbXMROvKMQUqznhnTRDCqFgbiBYUX1rFoFFKu3otNCVt1pZQVj
YSdD2+uuprwV9jLvWL8PlFKDQg79i77TN5JsJVOflwAB4RKoMZNyUYejQf2NmHgQ
7rLesrqMMNlHIhAJMj7/ly5yhdhwxPXVquSeGCqdUCPw
-----END CERTIFICATE-----