Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
File:                     DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer (raw, json)
Hash identifier:          fRRjOgsSk1JoezHN4A5zxiMVjyw7IxmcFaMypnkSbeA=
Subject key identifier:   0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6174934FD7B6BB84395426E46D3D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199082
                          AS: 210571
                          IP: 185.23.128.0/22
                          IP: 185.115.168.0/22
                          IP: 2a00:63a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:17:49:34:fd:7b:6b:b8:43:95:42:6e:46:d3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:d4:9a:46:dc:e4:1c:4d:be:36:33:4a:e4:
                    69:12:c5:72:a6:fc:0e:7c:25:be:82:3c:cb:0e:de:
                    4f:41:b9:ad:48:12:90:4b:a5:bf:47:16:b8:56:fa:
                    14:d0:f7:f9:35:23:cf:80:28:48:9c:c5:b3:80:6c:
                    38:7e:3f:06:f6:1b:05:7d:9b:b0:f8:ff:4b:ff:86:
                    72:2d:5a:e7:8c:8d:52:4d:e6:58:40:0e:ff:64:fe:
                    81:17:b2:7f:fd:56:f2:2c:7d:de:4a:04:e1:19:33:
                    f2:61:36:c8:a9:20:33:2a:d0:8e:7c:1e:02:ad:14:
                    79:9b:49:6c:52:17:90:63:f6:27:21:6e:25:df:15:
                    da:ce:c4:7f:02:3d:5e:3b:58:dd:9f:f0:92:8e:c9:
                    d1:b7:55:9b:9e:79:1c:0f:d4:98:3e:f0:48:c7:70:
                    46:41:98:73:e1:67:e1:3e:11:4d:11:8f:c6:44:d4:
                    90:61:35:6e:0b:02:dc:e7:bc:03:cf:2d:b1:78:3d:
                    d5:93:a4:75:38:a7:66:20:be:7f:3b:5c:35:eb:c6:
                    b0:89:c3:f1:c4:69:fd:a2:45:29:92:e3:28:ef:61:
                    65:cb:88:0d:cb:47:a8:46:fe:1b:61:e2:52:65:df:
                    a3:76:b3:4b:a7:38:a3:ec:3f:5c:8c:07:13:5b:a2:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.128.0/22
                  185.115.168.0/22
                IPv6:
                  2a00:63a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199082
                  210571

    Signature Algorithm: sha256WithRSAEncryption
         47:91:5d:cf:fa:68:e4:bc:7c:66:0e:9b:21:a9:7f:5a:c5:fb:
         23:fa:12:7e:9e:82:62:12:47:fb:3b:b8:e7:82:4e:d3:91:f8:
         95:67:e6:fd:be:f8:7e:2f:1d:ee:ac:da:a6:6d:a8:65:2c:d3:
         d9:f2:76:4c:ef:fd:56:2f:15:e3:80:0e:cd:6d:27:a4:6f:9d:
         87:62:cf:ce:40:7c:7b:09:57:5c:83:4d:7f:df:e9:e6:4f:af:
         96:cd:07:20:9b:af:71:19:b9:b9:b6:76:2f:5a:06:19:f1:49:
         e4:97:3c:ff:71:38:42:9e:2d:dd:cb:10:0c:b9:c9:fe:62:05:
         8f:3d:00:b0:f6:ed:16:a5:19:4e:db:1a:78:13:eb:06:c7:55:
         00:7e:19:73:8e:b9:a2:59:6d:ef:85:8f:cb:fb:9a:a1:70:66:
         93:a6:c7:61:08:82:9a:86:37:0c:60:b7:0e:0a:21:5e:e4:42:
         9a:5e:36:5e:06:79:44:a4:75:75:32:19:98:68:d8:84:d5:5e:
         6d:d7:d1:5d:80:d5:d1:c9:1e:bb:2f:05:11:4a:df:f6:2b:5f:
         17:77:70:87:41:4c:b1:76:9c:88:bb:fc:b4:6b:fc:0b:b6:e7:
         69:30:3c:3f:74:aa:97:2c:f6:8f:fe:a6:59:06:f4:9d:25:cc:
         d3:11:ae:b0
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQg1hdJNP17a7hDlUJuRtPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzZmYTE1NmM1N2M0ZTg4NWI5ZTZhZjgyMzBiNjU0ZDc5NmE1NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhXUmkbc5BxNvjYzSuRpEsVypvwO
fCW+gjzLDt5PQbmtSBKQS6W/Rxa4VvoU0Pf5NSPPgChInMWzgGw4fj8G9hsFfZuw
+P9L/4ZyLVrnjI1STeZYQA7/ZP6BF7J//VbyLH3eSgThGTPyYTbIqSAzKtCOfB4C
rRR5m0lsUheQY/YnIW4l3xXazsR/Aj1eO1jdn/CSjsnRt1WbnnkcD9SYPvBIx3BG
QZhz4WfhPhFNEY/GRNSQYTVuCwLc57wDzy2xeD3Vk6R1OKdmIL5/O1w168awicPx
xGn9okUpkuMo72Fly4gNy0eoRv4bYeJSZd+jdrNLpzij7D9cjAcTW6LqOQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFAxvoVbFfE6IW55q+CMLZU15alYRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzQ4YzU2
ZC01NzI3LTQyYmEtODBjNC1iOGMzNmVjZWRhZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvNDhjNTZk
LTU3MjctNDJiYS04MGM0LWI4YzM2ZWNlZGFkOC8xL0RHLWhWc1Y4VG9oYm5tcjRJ
d3RsVFhscVZoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuReAAwQCuXOoMA0EAgACMAcDBQAqAGOgMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMJqgIDAzaLMA0GCSqGSIb3DQEBCwUAA4IB
AQBHkV3P+mjkvHxmDpshqX9axfsj+hJ+noJiEkf7O7jngk7TkfiVZ+b9vvh+Lx3u
rNqmbahlLNPZ8nZM7/1WLxXjgA7NbSekb52HYs/OQHx7CVdcg01/3+nmT6+WzQcg
m69xGbm5tnYvWgYZ8Unklzz/cThCni3dyxAMucn+YgWPPQCw9u0WpRlO2xp4E+sG
x1UAfhlzjrmiWW3vhY/L+5qhcGaTpsdhCIKahjcMYLcOCiFe5EKaXjZeBnlEpHV1
MhmYaNiE1V5t19FdgNXRyR67LwURSt/2K18Xd3CHQUyxdpyIu/y0a/wLtudpMDw/
dKqXLPaP/qZZBvSdJczTEa6w
-----END CERTIFICATE-----