Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
File:                     BKr_h_bcDTaZvCk3o03HF_lPAH4.cer (raw, json)
Hash identifier:          Bo8SsdHbBvZFPnunYMd2LlFhy5DxHdaNF3PrwDtwdl0=
Subject key identifier:   04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B225A6996D288F633B93A9F747D883
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 151.87.0.0 -- 151.88.255.255
                          IP: 151.91.0.0 -- 151.92.255.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:25:a6:99:6d:28:8f:63:3b:93:a9:f7:47:d8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:c8:5b:35:88:28:7a:a7:3f:1d:0f:e8:e7:
                    fa:28:13:22:4d:ef:ce:f0:ac:6a:1a:bd:65:96:1d:
                    d6:d9:31:05:2b:b8:b0:e6:ca:04:25:eb:ab:ff:e0:
                    73:8c:97:b3:a7:70:cf:b1:c9:d2:2f:b9:31:bb:a1:
                    20:f0:11:3e:c0:0e:30:71:4a:ff:69:da:30:4c:3b:
                    f3:1f:c5:0a:f0:9c:22:21:6b:09:b6:f9:b0:a0:f5:
                    5c:1b:ec:ce:09:50:10:d6:7b:b4:87:24:67:ad:26:
                    20:52:83:96:63:b3:b4:0c:4d:e0:35:fd:2d:70:50:
                    c1:15:07:d6:f1:a1:d4:4d:4a:a8:b3:71:3f:a0:15:
                    76:b9:1b:5c:d3:48:05:6e:b6:34:bc:6c:70:d7:c7:
                    b2:29:40:45:cb:6d:e0:bb:1e:72:9f:33:24:30:5e:
                    ae:59:b3:99:07:c6:d2:32:0f:2d:42:e8:c7:08:b9:
                    dd:15:7e:1e:7a:cc:b8:5d:9f:67:4b:5c:c3:b6:6a:
                    bc:7b:3a:e4:f1:f7:50:fa:b4:4e:b0:42:a6:d4:df:
                    5f:83:db:6f:f5:6a:64:20:20:7f:66:5f:de:ca:30:
                    52:18:00:8a:ab:69:bd:bf:0f:98:bd:41:17:14:7e:
                    50:05:d7:86:1a:76:31:49:9b:49:e1:b5:de:a7:68:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.87.0.0-151.88.255.255
                  151.91.0.0-151.92.255.255

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:4e:93:07:a4:c1:ec:1a:9a:d3:33:98:3b:99:30:17:c1:
         d2:c0:95:5a:25:4b:76:84:f8:45:b4:ab:e6:6b:33:f8:bd:ac:
         fe:7c:1e:44:32:26:2d:b9:90:eb:a4:91:e0:a2:02:c4:7d:29:
         d2:05:0f:1b:90:24:64:92:77:2c:a7:3d:3b:41:da:7e:be:db:
         f7:d7:69:31:e8:9a:e2:e1:82:0e:4e:4c:a1:05:4b:f5:7c:6e:
         7c:b0:ed:6f:01:34:24:42:3c:1b:ae:e2:03:f9:96:71:6d:59:
         78:ed:d1:86:db:8c:20:7e:97:6c:e2:d4:7d:62:69:8f:65:e8:
         51:bf:42:51:f9:1a:d3:df:01:b0:21:0a:9d:be:74:99:3c:79:
         e0:40:5e:3c:c5:2c:e3:6a:a6:a9:bc:3f:e0:82:d4:01:1d:f2:
         66:32:74:ed:17:8e:0c:d8:f2:57:d5:38:d1:57:23:d5:f1:20:
         c8:83:0d:2b:d9:52:35:4a:8a:3e:55:b5:2e:08:a6:84:55:ca:
         99:cd:6a:8c:f5:2c:70:80:fb:ac:d6:61:2b:75:78:f1:77:99:
         99:61:e7:47:62:f0:60:a3:09:84:b7:ea:22:0b:35:98:fe:06:
         a2:32:aa:3b:31:6d:e6:94:86:09:13:5c:7a:3e:6d:db:86:4a:
         e1:e2:a3:96
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZQhsiWmmW0oj2M7k6n3R9iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGFhZmY4N2Y2ZGMwZDM2OTliYzI5MzdhMzRkYzcxN2Y5NGYwMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvovIWzWIKHqnPx0P6Of6KBMiTe/O
8KxqGr1llh3W2TEFK7iw5soEJeur/+BzjJezp3DPscnSL7kxu6Eg8BE+wA4wcUr/
adowTDvzH8UK8JwiIWsJtvmwoPVcG+zOCVAQ1nu0hyRnrSYgUoOWY7O0DE3gNf0t
cFDBFQfW8aHUTUqos3E/oBV2uRtc00gFbrY0vGxw18eyKUBFy23gux5ynzMkMF6u
WbOZB8bSMg8tQujHCLndFX4eesy4XZ9nS1zDtmq8ezrk8fdQ+rROsEKm1N9fg9tv
9WpkICB/Zl/eyjBSGACKq2m9vw+YvUEXFH5QBdeGGnYxSZtJ4bXep2igPQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFASq/4f23A02mbwpN6NNxxf5TwB+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzVmMmUz
MS05YWQ2LTQzOGUtYWQ3Yy1lM2UwYzJkYmYwNjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNWYyZTMx
LTlhZDYtNDM4ZS1hZDdjLWUzZTBjMmRiZjA2Ny8xL0JLcl9oX2JjRFRhWnZDazNv
MDNIRl9sUEFINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYMAoDAwCXVwMDAJdYMAoDAwCXWwMDAJdcMA0GCSqG
SIb3DQEBCwUAA4IBAQBjxk6TB6TB7Bqa0zOYO5kwF8HSwJVaJUt2hPhFtKvmazP4
vaz+fB5EMiYtuZDrpJHgogLEfSnSBQ8bkCRkkncspz07Qdp+vtv312kx6Jri4YIO
TkyhBUv1fG58sO1vATQkQjwbruID+ZZxbVl47dGG24wgfpds4tR9YmmPZehRv0JR
+RrT3wGwIQqdvnSZPHngQF48xSzjaqapvD/ggtQBHfJmMnTtF44M2PJX1TjRVyPV
8SDIgw0r2VI1Soo+VbUuCKaEVcqZzWqM9SxwgPus1mErdXjxd5mZYedHYvBgowmE
t+oiCzWY/gaiMqo7MW3mlIYJE1x6Pm3bhkrh4qOW
-----END CERTIFICATE-----