Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
File:                     ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer (raw, json)
Hash identifier:          /eATE7F+o8FB6rpgF8pIDmy6UlrjmqIBuwwRhZUQ8As=
Subject key identifier:   02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252171EBEA8B8DF771EFD8C310D0FE85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202295
                          IP: 185.27.8.0/22
                          IP: 193.107.184.0/22
                          IP: 2a00:8920::/32
                          IP: 2a0c:9bc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:71:eb:ea:8b:8d:f7:71:ef:d8:c3:10:d0:fe:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0291d4de130da6aace22ed99650be182497e0bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:96:d7:d0:b2:a8:44:b9:d8:6a:b5:30:5f:
                    36:22:66:34:c4:fa:ee:c9:85:ce:d8:a6:53:54:e4:
                    01:c2:3f:cd:a0:f3:4f:d0:30:84:f7:d0:3c:a4:9e:
                    f8:b1:47:d8:de:cb:39:d1:db:7a:54:d6:e0:02:5e:
                    c0:ef:ee:64:c9:9a:ed:ca:68:25:ed:21:e9:bf:aa:
                    32:2b:ac:6e:a4:e4:f0:1a:87:e3:24:5e:ad:83:ac:
                    0c:04:24:f9:a1:77:34:68:3d:f3:3a:79:df:89:bc:
                    8c:1d:a6:fc:43:37:55:1b:c3:de:8a:ad:1c:b3:cd:
                    b4:26:e2:ed:cf:ae:b1:fc:d8:fc:6f:da:ef:94:4e:
                    d4:0e:af:c6:2a:e6:3b:03:85:98:e6:69:9e:bd:a1:
                    f5:7b:c5:6d:b4:b0:6a:77:d6:45:7c:f4:6e:29:59:
                    6e:52:d0:37:4a:66:a3:69:bc:a1:72:19:38:ff:95:
                    8a:b5:cc:bf:d1:bf:e7:10:de:7b:7a:a6:0c:9c:83:
                    c2:15:39:be:5a:91:c9:3e:f2:aa:c5:26:b2:c5:9e:
                    d9:22:5c:d7:7f:11:6c:a0:bb:e9:fd:d4:4c:3a:6b:
                    b5:5d:61:0b:15:03:6c:64:cc:2d:11:1f:fe:89:3e:
                    ce:0a:75:fa:28:68:95:28:e9:07:fe:ae:bd:74:3f:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.8.0/22
                  193.107.184.0/22
                IPv6:
                  2a00:8920::/32
                  2a0c:9bc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202295

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:9e:04:8d:7c:bb:2f:52:1a:bf:24:2d:97:5f:f8:e8:dd:
         f7:7a:47:2f:cf:8d:9a:78:0c:aa:53:bd:26:e2:cd:5f:56:25:
         9f:f0:e7:f4:ca:7d:fc:dd:3a:41:28:d8:c6:c0:3f:d7:c2:f4:
         73:6b:7e:c0:92:cd:31:ec:f9:cc:29:09:f5:3d:66:60:9b:13:
         bd:88:2e:92:0e:2a:23:a3:6b:eb:5b:6e:1a:a5:c6:b5:c2:67:
         c2:aa:3e:35:59:bc:59:ba:26:27:1d:0b:a1:2d:c1:f2:c0:26:
         83:08:00:03:a4:82:25:3f:df:fc:40:36:12:b9:5d:15:f0:04:
         df:b0:05:b9:86:fc:f3:ed:29:d8:b5:ee:81:82:de:19:ef:ed:
         0e:f8:85:31:56:06:5d:ca:36:91:43:0e:7e:ec:1c:e7:2e:f1:
         36:43:89:63:0f:0a:31:60:1f:0b:7d:be:f6:e5:1a:48:fb:66:
         dc:7e:da:4c:7e:e4:db:28:8a:6a:d9:d7:4e:03:2c:40:26:f5:
         a1:12:e2:44:3d:08:50:87:4c:f2:ae:e8:83:3b:6d:6b:f5:eb:
         18:7b:1d:e4:be:f1:fe:fc:c6:b9:8b:be:52:3d:dc:a9:07:4f:
         6c:28:02:4d:90:6e:5f:e4:48:25:6f:dd:12:15:c5:a8:fc:90:
         93:f2:b6:7a
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQlIXHr6ouN93Hv2MMQ0P6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjkxZDRkZTEzMGRhNmFhY2UyMmVkOTk2NTBiZTE4MjQ5N2UwYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGaW19CyqES52Gq1MF82ImY0xPru
yYXO2KZTVOQBwj/NoPNP0DCE99A8pJ74sUfY3ss50dt6VNbgAl7A7+5kyZrtymgl
7SHpv6oyK6xupOTwGofjJF6tg6wMBCT5oXc0aD3zOnnfibyMHab8QzdVG8Peiq0c
s820JuLtz66x/Nj8b9rvlE7UDq/GKuY7A4WY5mmevaH1e8VttLBqd9ZFfPRuKVlu
UtA3Smajabyhchk4/5WKtcy/0b/nEN57eqYMnIPCFTm+WpHJPvKqxSayxZ7ZIlzX
fxFsoLvp/dRMOmu1XWELFQNsZMwtER/+iT7OCnX6KGiVKOkH/q69dD9nKQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFAKR1N4TDaaqziLtmWUL4YJJfgvPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2E5YTQ3
OS05ZTJmLTRjYjAtOGRlZC03NzgxNjgxMDc3ZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYTlhNDc5
LTllMmYtNGNiMC04ZGVkLTc3ODE2ODEwNzdmNy8xL0FwSFUzaE1OcHFyT0l1Mlpa
UXZoZ2tsLUM4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuRsIAwQCwWu4MBQEAgACMA4DBQAqAIkgAwUD
KgybwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFjcwDQYJKoZIhvcNAQELBQAD
ggEBAC2/ngSNfLsvUhq/JC2XX/jo3fd6Ry/PjZp4DKpTvSbizV9WJZ/w5/TKffzd
OkEo2MbAP9fC9HNrfsCSzTHs+cwpCfU9ZmCbE72ILpIOKiOja+tbbhqlxrXCZ8Kq
PjVZvFm6JicdC6EtwfLAJoMIAAOkgiU/3/xANhK5XRXwBN+wBbmG/PPtKdi17oGC
3hnv7Q74hTFWBl3KNpFDDn7sHOcu8TZDiWMPCjFgHwt9vvblGkj7Ztx+2kx+5Nso
imrZ104DLEAm9aES4kQ9CFCHTPKu6IM7bWv16xh7HeS+8f78xrmLvlI93KkHT2wo
Ak2Qbl/kSCVv3RIVxaj8kJPytno=
-----END CERTIFICATE-----