Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
File:                     Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer (raw, json)
Hash identifier:          CqDWI5D8AMeOFjbQD0HkjeR/VXdZBhtwVUAreWUB6Cs=
Subject key identifier:   0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8CA27D3530A78E3FB2AAD42DE07DF1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198399
                          IP: 37.34.72.0/21
                          IP: 185.95.224.0/22
                          IP: 195.93.168.0/23
                          IP: 2a00:c5e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a2:7d:35:30:a7:8e:3f:b2:aa:d4:2d:e0:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:8a:e5:9b:1b:ab:78:cb:46:1b:50:04:98:
                    45:3e:d7:0e:d9:e8:08:f8:9b:51:dc:2b:ff:95:fa:
                    66:d5:2b:fd:f7:90:2c:fe:11:ea:38:25:b0:7f:df:
                    b4:66:57:25:29:c5:b0:ba:40:58:f8:34:69:80:74:
                    3b:0b:3c:d8:cd:11:d8:3e:70:22:c7:af:13:b8:a3:
                    5d:cf:f7:30:c0:42:0f:30:6a:5b:88:a7:fb:96:e6:
                    84:ee:f3:fe:bc:1a:e1:7e:34:8c:7f:23:80:9d:2c:
                    df:66:56:3b:b7:93:46:58:60:79:96:17:13:e2:9d:
                    63:6f:bc:00:17:79:42:16:a8:62:3c:ef:cf:c9:4c:
                    db:fc:b9:2c:eb:35:df:61:9a:d2:50:42:e7:27:f5:
                    15:02:e1:f4:a1:11:ab:fb:e3:d3:9e:75:35:de:34:
                    34:9a:0b:50:10:59:c5:f9:1d:46:b4:40:c0:6e:7c:
                    7d:62:e0:b5:95:90:fc:3b:ed:3b:9d:e8:e6:ac:f3:
                    a7:97:5e:0d:2c:97:09:f1:fe:2c:00:1f:a7:df:c3:
                    35:78:70:b7:13:d2:20:f8:f2:f7:41:61:66:6c:23:
                    6e:fe:1c:6e:4c:e1:24:85:2e:01:aa:ce:fc:ba:63:
                    af:56:f7:44:6f:09:77:d4:d9:ff:aa:71:c1:38:27:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.34.72.0/21
                  185.95.224.0/22
                  195.93.168.0/23
                IPv6:
                  2a00:c5e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198399

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:ef:9d:a1:4c:2e:2a:66:73:dd:c7:42:e9:9c:f0:c3:12:
         e5:d9:a0:06:2a:d1:19:61:5e:d6:9b:57:ae:f5:c9:64:3f:f7:
         3c:f1:ef:f5:5a:0c:63:c7:31:d2:42:74:e1:2e:36:3e:ea:42:
         5e:0d:69:0a:db:ee:b9:c3:a6:5a:d4:ee:a0:e5:0d:ee:17:bb:
         2f:c3:f1:17:84:b3:dd:55:99:82:4f:de:13:cb:6d:a9:0b:8f:
         8f:62:bc:ac:82:a3:6f:f7:4c:2a:29:62:ae:a4:94:a7:db:fc:
         4b:83:30:d4:65:51:25:17:cf:5d:88:ef:3b:4f:bf:8a:05:3a:
         27:69:a5:69:3d:ad:c4:13:c8:cc:8a:cd:9b:7f:d8:85:92:e6:
         19:1e:5f:78:88:8e:7e:8c:11:58:62:f9:09:de:b5:ab:60:ff:
         8a:33:ec:12:65:2c:59:89:46:7d:3d:09:e6:33:5d:35:f3:27:
         af:f5:c0:e0:44:2a:82:9c:26:57:e4:03:8c:ba:c7:1c:a4:ed:
         25:87:8f:22:88:4b:df:34:70:c5:21:ca:79:29:a9:df:bc:d6:
         77:0f:e0:01:6e:58:6e:52:2e:71:c6:d3:8f:b2:75:5a:14:3e:
         51:64:fa:bb:46:73:8f:98:17:2f:bb:82:26:c5:bb:4e:83:89:
         02:c3:07:2a
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQfjKJ9NTCnjj+yqtQt4H3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA5MWJkYzY2NmI4YTU5NDMzYzY4ZDkwZTBkOGNjMzdhY2RjZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszWK5Zsbq3jLRhtQBJhFPtcO2egI
+JtR3Cv/lfpm1Sv995As/hHqOCWwf9+0ZlclKcWwukBY+DRpgHQ7CzzYzRHYPnAi
x68TuKNdz/cwwEIPMGpbiKf7luaE7vP+vBrhfjSMfyOAnSzfZlY7t5NGWGB5lhcT
4p1jb7wAF3lCFqhiPO/PyUzb/Lks6zXfYZrSUELnJ/UVAuH0oRGr++PTnnU13jQ0
mgtQEFnF+R1GtEDAbnx9YuC1lZD8O+07nejmrPOnl14NLJcJ8f4sAB+n38M1eHC3
E9Ig+PL3QWFmbCNu/hxuTOEkhS4Bqs78umOvVvdEbwl31Nn/qnHBOCcPOwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFA8JG9xma4pZQzxo2Q4NjMN6zc6SMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2I2NDA4
My01NTBlLTRjYWYtYmMyOS1hMzRhOGI4MDY4MzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvYjY0MDgz
LTU1MGUtNGNhZi1iYzI5LWEzNGE4YjgwNjgzMi8xL0R3a2IzR1pyaWxsRFBHalpE
ZzJNdzNyTnpwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDJSJIAwQCuV/gAwQBw12oMA0EAgACMAcDBQAq
AMXgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMG/zANBgkqhkiG9w0BAQsFAAOC
AQEAfzLvnaFMLipmc93HQumc8MMS5dmgBirRGWFe1ptXrvXJZD/3PPHv9VoMY8cx
0kJ04S42PupCXg1pCtvuucOmWtTuoOUN7he7L8PxF4Sz3VWZgk/eE8ttqQuPj2K8
rIKjb/dMKilirqSUp9v8S4Mw1GVRJRfPXYjvO0+/igU6J2mlaT2txBPIzIrNm3/Y
hZLmGR5feIiOfowRWGL5Cd61q2D/ijPsEmUsWYlGfT0J5jNdNfMnr/XA4EQqgpwm
V+QDjLrHHKTtJYePIohL3zRwxSHKeSmp37zWdw/gAW5YblIuccbTj7J1WhQ+UWT6
u0Zzj5gXL7uCJsW7ToOJAsMHKg==
-----END CERTIFICATE-----