Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
File:                     CncZY0DSFEuMp7B3iYS7BLwcs3g.cer (raw, json)
Hash identifier:          UA8zc6lRJclrwlibCUstsl2P4bP/i7jnzRXmiEWnPLA=
Subject key identifier:   0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B2388475A9E2158C2D328FDF99C1F5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21140
                          IP: 185.212.88.0/22
                          IP: 2a0b:7540::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:38:84:75:a9:e2:15:8c:2d:32:8f:df:99:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:63:54:c7:24:a2:0f:a5:f1:3f:ab:46:c9:
                    a3:1a:63:1a:70:58:e0:55:5a:c9:8b:24:a3:75:08:
                    b3:2a:2a:03:2a:67:9d:d4:76:5f:47:1c:bf:d8:7f:
                    77:93:5d:56:bb:c7:f7:5f:50:39:54:1d:12:e6:73:
                    cb:a1:d2:dc:ee:36:23:f7:e4:85:2a:73:71:b4:62:
                    b2:ce:1c:aa:83:3c:f2:82:bf:20:17:21:c8:6e:ea:
                    dd:c0:ab:12:d3:8a:e3:60:2a:34:63:80:85:93:ed:
                    40:5f:ec:f8:2e:1d:da:06:cb:6a:c2:63:44:34:6e:
                    b3:74:6b:3a:e3:f5:08:d0:af:00:66:08:bc:97:6d:
                    17:32:bb:a9:c9:82:54:f9:72:f1:a7:30:53:3b:b2:
                    6e:f3:5e:b9:fd:47:c6:25:64:2b:90:ed:02:5f:47:
                    77:0b:73:57:4b:34:9d:59:ac:32:84:0a:c6:4c:cb:
                    65:25:14:59:5e:fe:34:da:33:84:a4:09:4b:9c:84:
                    53:fc:26:84:38:e4:58:ea:fe:5f:f0:c4:2c:c6:35:
                    43:95:88:41:42:ac:22:5f:f5:a4:37:16:7d:3b:94:
                    bf:c4:89:5d:d8:be:fd:51:9c:28:7a:a9:2c:82:f4:
                    0f:ab:4d:29:06:fe:4d:5d:9f:1b:6e:4b:ac:d3:2e:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.88.0/22
                IPv6:
                  2a0b:7540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21140

    Signature Algorithm: sha256WithRSAEncryption
         84:94:31:c9:2f:8d:b0:46:0f:28:ae:e6:ac:4f:cc:03:bf:d5:
         40:4e:c2:d9:3b:be:a7:d1:c5:d0:82:bd:7b:4c:e6:e2:52:ac:
         d4:9b:2e:42:65:7c:63:a1:02:db:7d:93:dd:02:50:e3:e9:64:
         57:65:af:96:c8:68:38:13:50:83:0d:b7:45:2a:af:2c:82:fe:
         09:24:c2:5c:7d:0a:8d:b0:9d:16:3d:59:73:c2:a3:30:9c:fc:
         ec:5f:33:96:7a:5a:ac:de:ce:78:2e:2d:9c:35:c0:d4:ac:94:
         17:bf:27:61:4c:19:b5:5a:50:99:21:50:96:ff:66:b5:27:c4:
         d7:3c:26:e4:19:8d:04:76:1f:a1:54:c5:68:4c:33:92:89:eb:
         3e:00:a5:44:cd:b6:b8:f1:41:47:67:2b:67:2d:9c:d7:f7:a8:
         b1:c0:f5:90:3b:3d:0a:80:16:21:74:33:9d:3c:7b:c3:99:4d:
         ce:d2:dc:7e:49:cc:a8:26:28:e6:d5:cf:e7:5a:73:a1:20:59:
         90:13:ee:62:10:c5:62:b8:85:9a:ed:6d:78:58:05:f8:36:87:
         91:b2:70:92:4e:7b:88:e7:4b:44:53:79:39:dc:97:bb:91:4a:
         41:e9:9d:7e:da:ae:8b:28:46:73:1c:e9:a7:b5:31:f3:bd:42:
         c5:a6:46:43
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQhsjiEdaniFYwtMo/fmcH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTc3MTk2MzQwZDIxNDRiOGNhN2IwNzc4OTg0YmIwNGJjMWNiMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UZjVMckog+l8T+rRsmjGmMacFjg
VVrJiySjdQizKioDKmed1HZfRxy/2H93k11Wu8f3X1A5VB0S5nPLodLc7jYj9+SF
KnNxtGKyzhyqgzzygr8gFyHIburdwKsS04rjYCo0Y4CFk+1AX+z4Lh3aBstqwmNE
NG6zdGs64/UI0K8AZgi8l20XMrupyYJU+XLxpzBTO7Ju8165/UfGJWQrkO0CX0d3
C3NXSzSdWawyhArGTMtlJRRZXv402jOEpAlLnIRT/CaEOORY6v5f8MQsxjVDlYhB
QqwiX/WkNxZ9O5S/xIld2L79UZwoeqksgvQPq00pBv5NXZ8bbkus0y5bNQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFAp3GWNA0hRLjKewd4mEuwS8HLN4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzQ5ODli
YS05YWYzLTRlM2QtODQ1ZC1lYjk3NzE2NGE3ZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvNDk4OWJh
LTlhZjMtNGUzZC04NDVkLWViOTc3MTY0YTdlNC8xL0NuY1pZMERTRkV1TXA3QjNp
WVM3Qkx3Y3MzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudRYMA0EAgACMAcDBQMqC3VAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAlKUMA0GCSqGSIb3DQEBCwUAA4IBAQCElDHJL42wRg8o
ruasT8wDv9VATsLZO76n0cXQgr17TObiUqzUmy5CZXxjoQLbfZPdAlDj6WRXZa+W
yGg4E1CDDbdFKq8sgv4JJMJcfQqNsJ0WPVlzwqMwnPzsXzOWelqs3s54Li2cNcDU
rJQXvydhTBm1WlCZIVCW/2a1J8TXPCbkGY0Edh+hVMVoTDOSies+AKVEzba48UFH
ZytnLZzX96ixwPWQOz0KgBYhdDOdPHvDmU3O0tx+ScyoJijm1c/nWnOhIFmQE+5i
EMViuIWa7W14WAX4NoeRsnCSTnuI50tEU3k53Je7kUpB6Z1+2q6LKEZzHOmntTHz
vULFpkZD
-----END CERTIFICATE-----