Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
File:                     DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer (raw, json)
Hash identifier:          9QiJ8XVPKbUGvV/ZbiIjN61rKOAd8FIVlaP3skETS4Y=
Subject key identifier:   0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019580596AC1DE1473FFB9A427132A25FA4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 13:58:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25076
                          IP: 185.148.60.0/22
                          IP: 2a07:5d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:80:59:6a:c1:de:14:73:ff:b9:a4:27:13:2a:25:fa:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 10 13:58:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ccc36028d005810caba24614bd60731dd495033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:aa:5e:e9:49:28:fa:e7:21:8a:9e:f7:6d:
                    54:e6:7d:90:54:91:a5:ba:4b:54:12:b2:88:6b:20:
                    0e:c3:39:33:ee:97:56:bf:50:b2:4f:5e:30:b8:28:
                    46:d1:94:d7:0a:8b:e1:37:e9:c5:25:a7:34:bf:73:
                    b4:40:a1:36:87:10:d4:07:ef:4e:19:7e:22:55:e3:
                    3d:b9:8d:cd:db:fa:d4:cb:d0:8f:a6:02:53:d3:de:
                    30:b0:79:cc:cb:c7:de:5f:ab:2c:1d:d1:75:06:37:
                    e6:e9:ab:27:31:aa:0b:6d:68:e6:78:14:20:c8:ab:
                    f8:6a:13:82:70:c8:b4:2f:60:79:a5:ab:08:c9:d7:
                    4f:8c:d7:17:28:3d:ca:31:db:38:4e:04:a0:96:11:
                    a6:13:e3:b2:c5:bc:a3:04:d2:da:fb:f3:1d:6f:d8:
                    54:69:63:86:2e:6a:a2:c9:3a:f8:6c:f3:a4:d9:80:
                    f2:c9:e5:ac:93:88:d6:7f:00:43:2a:5d:ca:99:fa:
                    b1:bc:04:6f:80:7e:f3:de:2f:51:82:96:ca:ed:ad:
                    bf:1b:8d:74:5a:c7:8e:8d:8b:16:67:96:f8:38:e2:
                    3f:c2:ff:9f:f3:3d:5a:b1:b5:81:f0:5f:f4:16:d3:
                    28:f2:55:f6:66:61:12:9f:bb:f2:57:c5:48:17:6d:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.148.60.0/22
                IPv6:
                  2a07:5d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25076

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:92:10:03:3a:c6:db:4a:42:e6:ae:2b:7a:94:5f:c5:95:
         5a:18:d7:f2:55:62:18:6e:a6:b8:3c:0e:3f:e1:1b:0f:0b:8b:
         86:92:b5:13:d9:d0:68:5b:d8:c0:b7:06:09:8c:1e:15:8f:73:
         a4:77:61:f0:4c:6d:19:f8:bb:94:e8:1d:c9:23:b7:f8:d2:9b:
         1d:67:e9:47:c0:7e:98:5f:d8:e3:87:e8:6c:60:39:9c:b2:ec:
         be:66:43:e0:e7:89:65:77:a4:5d:fc:e1:94:32:2d:35:7d:5c:
         7d:09:53:ef:df:72:a0:52:f8:a1:ed:27:f0:57:fa:54:2c:63:
         09:e6:f6:4b:74:a5:47:94:c8:91:0d:4a:b3:4d:2d:f2:5c:00:
         b2:6f:b8:eb:a0:56:e7:94:d7:1a:1f:a0:4e:e0:3b:bb:24:85:
         b8:c3:e7:c0:72:d1:5d:b7:bd:a4:6e:11:29:da:59:55:ed:f9:
         fc:38:8a:31:81:4c:76:01:9e:41:c7:52:27:19:bb:5c:92:b4:
         7e:ae:05:16:14:73:6c:be:61:4e:2d:dc:39:96:57:9e:14:5f:
         ad:ca:b0:c5:08:85:1d:5f:3d:87:66:13:00:35:62:51:f9:7f:
         27:9a:d3:22:c1:6f:69:55:6a:33:c3:ce:9e:61:f1:06:11:95:
         34:47:e9:fe
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZWAWWrB3hRz/7mkJxMqJfpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEwMTM1ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2NjMzYwMjhkMDA1ODEwY2FiYTI0NjE0YmQ2MDczMWRkNDk1MDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtiqXulJKPrnIYqe921U5n2QVJGl
uktUErKIayAOwzkz7pdWv1CyT14wuChG0ZTXCovhN+nFJac0v3O0QKE2hxDUB+9O
GX4iVeM9uY3N2/rUy9CPpgJT094wsHnMy8feX6ssHdF1Bjfm6asnMaoLbWjmeBQg
yKv4ahOCcMi0L2B5pasIyddPjNcXKD3KMds4TgSglhGmE+OyxbyjBNLa+/Mdb9hU
aWOGLmqiyTr4bPOk2YDyyeWsk4jWfwBDKl3KmfqxvARvgH7z3i9RgpbK7a2/G410
WseOjYsWZ5b4OOI/wv+f8z1asbWB8F/0FtMo8lX2ZmESn7vyV8VIF201rQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFAzMNgKNAFgQyrokYUvWBzHdSVAzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzBmYzkw
MC03YzQ4LTRhNTEtODNmZS1kY2YzYTFjMjVjZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMGZjOTAw
LTdjNDgtNGE1MS04M2ZlLWRjZjNhMWMyNWNmMy8xL0RNdzJBbzBBV0JES3VpUmhT
OVlITWQxSlVETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZQ8MA0EAgACMAcDBQMqB12AMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmH0MA0GCSqGSIb3DQEBCwUAA4IBAQA4fpIQAzrG20pC
5q4repRfxZVaGNfyVWIYbqa4PA4/4RsPC4uGkrUT2dBoW9jAtwYJjB4Vj3Okd2Hw
TG0Z+LuU6B3JI7f40psdZ+lHwH6YX9jjh+hsYDmcsuy+ZkPg54lld6Rd/OGUMi01
fVx9CVPv33KgUvih7SfwV/pULGMJ5vZLdKVHlMiRDUqzTS3yXACyb7jroFbnlNca
H6BO4Du7JIW4w+fActFdt72kbhEp2llV7fn8OIoxgUx2AZ5Bx1InGbtckrR+rgUW
FHNsvmFOLdw5lleeFF+tyrDFCIUdXz2HZhMANWJR+X8nmtMiwW9pVWozw86eYfEG
EZU0R+n+
-----END CERTIFICATE-----