Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.cer (raw, json)
Hash identifier:          ybYw8r3H2wBDDZ56p3ddw0OQPld8hKeaY20vFn28fE8=
Subject key identifier:   0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC4D827F84A615C4F3F0D1FCE366F9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208493
                          IP: 45.129.116.0/22
                          IP: 2a0e:49c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:4d:82:7f:84:a6:15:c4:f3:f0:d1:fc:e3:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:75:25:2a:19:15:e7:e3:dd:f5:1c:f5:ac:
                    5b:5d:8e:bc:c5:9f:c4:39:be:7d:63:48:ed:6b:3d:
                    1b:f0:f0:42:e4:b4:cb:e9:93:e4:49:e8:74:f1:99:
                    cc:a0:9a:ed:5e:25:8f:c4:e8:5e:df:b6:6a:cc:b2:
                    f9:51:95:3b:30:65:43:e6:94:57:d7:7b:ee:00:43:
                    60:23:82:53:40:d4:fe:6d:c3:aa:df:3e:34:a7:e9:
                    43:d6:09:66:e9:dd:9b:e1:9a:b3:fc:8f:f5:2e:77:
                    d1:df:c4:21:11:64:92:23:5d:28:a7:c7:2d:32:8a:
                    6c:a0:cd:de:59:5e:61:59:01:68:b7:5d:ca:4a:f6:
                    0f:28:7f:f7:eb:71:56:c4:59:96:90:40:0a:de:4b:
                    20:1c:fb:b0:0b:90:31:a3:54:ae:70:49:dd:c1:e9:
                    3b:f7:dc:c8:99:88:04:a5:3c:b2:88:79:6c:36:ea:
                    f1:a6:56:52:3b:29:f6:51:c1:c3:b3:17:48:86:d6:
                    9e:af:1b:54:14:f3:71:4b:38:08:d1:86:14:ba:fa:
                    61:96:02:76:50:54:f2:ac:ff:f6:5e:10:f6:40:08:
                    b4:37:a8:7a:ed:1e:a7:d1:54:04:cf:3d:77:44:ec:
                    07:f8:0e:19:fd:85:6e:df:bc:1b:e8:08:e4:e3:62:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.116.0/22
                IPv6:
                  2a0e:49c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208493

    Signature Algorithm: sha256WithRSAEncryption
         42:96:88:35:ea:f6:18:77:66:55:fc:72:aa:0a:e5:c6:b9:4a:
         96:e7:16:e3:b2:4e:89:56:d3:aa:e4:cf:4b:93:99:12:e4:29:
         0e:d5:44:ea:98:cd:29:1c:e1:9a:0e:7e:c9:11:25:14:87:ca:
         43:f6:84:1b:1b:04:fd:71:6f:51:5b:ab:41:63:af:02:c3:34:
         05:fa:98:38:ff:1c:76:b3:59:48:9c:89:92:6d:a3:2e:ca:8c:
         16:d4:ec:7f:ba:e8:f6:76:42:6f:6c:9a:28:df:ad:32:1d:89:
         a9:da:51:87:f2:56:8a:2c:8e:0f:9e:81:48:20:b8:99:5f:6f:
         ce:8e:18:33:fd:d1:9b:e8:ab:2f:d2:98:8f:e4:99:6c:60:3c:
         86:c5:7c:41:ff:d4:45:8d:27:a3:fd:a1:d9:d9:47:da:ff:f3:
         17:a0:87:74:f0:c0:2e:23:72:43:7d:25:10:a3:ec:a6:4e:37:
         73:e4:37:d9:06:9b:7b:44:af:1b:b2:4c:17:57:f1:2d:c9:cb:
         9d:bf:f3:ce:17:4a:53:55:ec:75:d7:e8:5c:8d:15:26:ab:f7:
         13:b6:ed:69:c7:b6:25:d8:84:78:1d:36:43:71:bb:52:d3:c3:
         65:0a:4e:7c:b4:97:b5:ad:86:a0:be:e6:4b:12:0c:b6:cc:71:
         ab:3e:93:bb
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi/E2Cf4SmFcTz8NH842b5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2ViYmZhYWVjMjQwMzliNDFlYmE1NmJiMWNhYTUxNjc3ZDIxYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKB1JSoZFefj3fUc9axbXY68xZ/E
Ob59Y0jtaz0b8PBC5LTL6ZPkSeh08ZnMoJrtXiWPxOhe37ZqzLL5UZU7MGVD5pRX
13vuAENgI4JTQNT+bcOq3z40p+lD1glm6d2b4Zqz/I/1LnfR38QhEWSSI10op8ct
MopsoM3eWV5hWQFot13KSvYPKH/363FWxFmWkEAK3ksgHPuwC5Axo1SucEndwek7
99zImYgEpTyyiHlsNurxplZSOyn2UcHDsxdIhtaerxtUFPNxSzgI0YYUuvphlgJ2
UFTyrP/2XhD2QAi0N6h67R6n0VQEzz13ROwH+A4Z/YVu37wb6Ajk42KR9QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAzrv6rsJAObQeula7HKpRZ30hxwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2MyM2Nh
My1iMzI3LTRlZDItYTViYi1iMTZlNjgzZGJlMjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvYzIzY2Ez
LWIzMjctNGVkMi1hNWJiLWIxNmU2ODNkYmUyNy8xL0RPdV9xdXdrQTV0QjY2VnJz
Y3FsRm5mU0hIQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYF0MA0EAgACMAcDBQAqDknAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMubTANBgkqhkiG9w0BAQsFAAOCAQEAQpaINer2GHdm
VfxyqgrlxrlKlucW47JOiVbTquTPS5OZEuQpDtVE6pjNKRzhmg5+yRElFIfKQ/aE
GxsE/XFvUVurQWOvAsM0BfqYOP8cdrNZSJyJkm2jLsqMFtTsf7ro9nZCb2yaKN+t
Mh2JqdpRh/JWiiyOD56BSCC4mV9vzo4YM/3Rm+irL9KYj+SZbGA8hsV8Qf/URY0n
o/2h2dlH2v/zF6CHdPDALiNyQ30lEKPspk43c+Q32Qabe0SvG7JMF1fxLcnLnb/z
zhdKU1XsddfoXI0VJqv3E7btace2JdiEeB02Q3G7UtPDZQpOfLSXta2GoL7mSxIM
tsxxqz6Tuw==
-----END CERTIFICATE-----