Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
File:                     Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer (raw, json)
Hash identifier:          NbcoTC1rf70Zn4HJt8NZPLI1IIZrLvk9nmL8S9I2SGs=
Subject key identifier:   0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425211C419884BD8188CB9E02E41A41BD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 178.212.75.0/24
                          IP: 2a11:e980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:1c:41:98:84:bd:81:88:cb:9e:02:e4:1a:41:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:19:7e:d7:fc:fd:2a:09:aa:2f:04:b8:1b:
                    8e:c4:59:40:fd:42:cb:0f:ad:96:66:7e:92:34:76:
                    f8:8c:a9:ea:3f:eb:18:1d:fd:d4:18:95:9f:78:fa:
                    a1:3c:08:2b:f2:7e:ae:85:25:78:48:3e:4e:a6:ad:
                    71:f2:a2:26:e0:fe:25:e4:c0:9a:11:83:e3:77:c5:
                    a2:47:9e:1b:44:2c:cf:12:04:3d:7a:7e:93:7c:24:
                    4d:91:ed:e1:c6:eb:31:c1:fa:68:66:01:cc:8a:69:
                    69:cb:9c:09:56:85:7f:bc:a3:e0:6d:63:32:0d:f5:
                    8e:c0:92:5c:da:58:4d:89:0a:56:4f:7e:30:05:d0:
                    61:4e:8a:c6:f3:bb:a8:94:8d:a1:e7:7d:f2:bd:48:
                    05:89:6a:93:e8:92:1e:8a:82:36:03:01:4f:2f:0f:
                    74:7c:56:a5:37:45:5e:3a:97:00:73:1e:29:29:46:
                    cc:52:d4:d6:93:d9:b1:20:46:1b:64:b8:10:96:e4:
                    3d:b0:01:93:86:d2:83:09:68:81:10:d1:b1:4a:2c:
                    2e:c9:79:17:f1:ef:1d:e3:41:29:41:51:28:b4:df:
                    fc:a3:02:06:48:33:68:f9:a5:4c:fd:6c:7d:08:bc:
                    3f:31:0e:e6:b8:1c:32:d8:f3:78:7f:25:49:69:b4:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.75.0/24
                IPv6:
                  2a11:e980::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:06:c3:7f:a9:be:41:37:14:61:85:11:86:8a:bd:f6:6e:
         12:92:a6:1f:c9:95:17:04:a6:09:7b:ff:8a:ea:0b:25:25:af:
         11:ea:c8:01:98:cb:66:87:ab:9a:7c:71:09:4c:6e:ca:90:b0:
         1c:4f:7c:26:d5:64:6a:11:07:dc:e8:ad:74:63:8a:61:74:9d:
         92:a2:a4:17:69:2a:c1:22:70:2b:af:6a:45:8c:66:ad:b4:c3:
         85:b2:33:d7:c5:40:34:1d:82:24:f0:37:89:af:cf:7a:f6:44:
         9e:ce:80:c9:d2:78:35:78:84:1a:08:f6:b6:69:d7:89:9c:3d:
         64:00:5d:94:3c:6a:e2:24:14:64:46:16:6b:7d:c7:32:69:20:
         fe:0c:e9:9f:6e:53:e7:19:25:26:7c:01:a0:f6:2e:22:3f:88:
         a9:36:eb:61:60:08:69:50:a0:d4:50:8d:3f:21:3d:a4:9a:29:
         04:35:55:15:e2:89:86:d3:e9:e6:05:9b:dc:7d:2d:d6:30:c2:
         1f:f0:4c:ce:6f:13:87:59:dd:76:40:6e:6d:b7:3a:59:cb:4a:
         75:6b:c5:cd:6b:37:af:c3:a0:1c:54:dd:2e:dc:54:15:ba:7f:
         2f:06:27:86:cf:28:1b:ee:f6:f3:e6:e0:5d:cf:ea:54:83:c5:
         48:0b:93:0d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlIRxBmIS9gYjLngLkGkG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJlZDI0NzAzZDMzNGIxMWNkMjJlZTQ4OWZjM2M2NGJkYzA2ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0Zftf8/SoJqi8EuBuOxFlA/ULL
D62WZn6SNHb4jKnqP+sYHf3UGJWfePqhPAgr8n6uhSV4SD5Opq1x8qIm4P4l5MCa
EYPjd8WiR54bRCzPEgQ9en6TfCRNke3hxusxwfpoZgHMimlpy5wJVoV/vKPgbWMy
DfWOwJJc2lhNiQpWT34wBdBhTorG87uolI2h533yvUgFiWqT6JIeioI2AwFPLw90
fFalN0VeOpcAcx4pKUbMUtTWk9mxIEYbZLgQluQ9sAGThtKDCWiBENGxSiwuyXkX
8e8d40EpQVEotN/8owIGSDNo+aVM/Wx9CLw/MQ7muBwy2PN4fyVJabS5IQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAsu0kcD0zSxHNIu5In8PGS9wG9LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzcxNzBl
MC1hMDQzLTRiNzgtYWFiMS1iNjQ4OGFlYzUzM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNzE3MGUw
LWEwNDMtNGI3OC1hYWIxLWI2NDg4YWVjNTMzYi8xL0N5N1NSd1BUTkxFYzBpN2tp
Znc4WkwzQWIwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAstRLMA0EAgACMAcDBQMqEemAMA0GCSqGSIb3
DQEBCwUAA4IBAQAvBwbDf6m+QTcUYYURhoq99m4SkqYfyZUXBKYJe/+K6gslJa8R
6sgBmMtmh6uafHEJTG7KkLAcT3wm1WRqEQfc6K10Y4phdJ2SoqQXaSrBInArr2pF
jGattMOFsjPXxUA0HYIk8DeJr8969kSezoDJ0ng1eIQaCPa2adeJnD1kAF2UPGri
JBRkRhZrfccyaSD+DOmfblPnGSUmfAGg9i4iP4ipNuthYAhpUKDUUI0/IT2kmikE
NVUV4omG0+nmBZvcfS3WMMIf8EzObxOHWd12QG5ttzpZy0p1a8XNazevw6AcVN0u
3FQVun8vBieGzygb7vbz5uBdz+pUg8VIC5MN
-----END CERTIFICATE-----