Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.cer (raw, json)
Hash identifier:          Ww2SJol/4LnMnnYUX2L+0DyvOCwUiPFBo0KestdGqfk=
Subject key identifier:   11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420681D0651918EDEEB7AEB5948CAA6B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204195
                          IP: 185.115.236.0/22
                          IP: 2a06:2780::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:1d:06:51:91:8e:de:eb:7a:eb:59:48:ca:a6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:c6:96:68:04:2f:f6:ae:32:19:1b:fa:31:
                    df:84:6d:ab:e3:17:2b:0b:5c:fb:c5:33:f2:a7:9c:
                    44:21:b0:3f:5d:a1:b3:47:38:97:bf:e0:39:73:4d:
                    b9:8b:a1:3a:9c:e0:33:d4:54:e9:92:a3:ad:e1:46:
                    e7:7d:e7:df:fc:7f:ef:b7:71:9a:e9:0b:1c:f1:eb:
                    d3:ea:52:42:56:93:ed:81:0d:49:e1:c4:99:39:05:
                    d5:27:d1:f2:2d:b8:a1:fe:fc:4b:e5:9b:e4:8d:26:
                    94:c2:b2:0e:01:d7:9f:93:32:87:16:df:34:d3:33:
                    c3:d2:ea:27:e1:95:ec:c2:73:1d:2a:84:a6:3f:d8:
                    e6:79:97:3f:b6:d3:2f:f0:c6:13:38:78:d8:d3:a8:
                    4f:67:18:42:e9:f2:14:30:0c:27:7c:b2:5e:d4:4c:
                    97:f0:3b:31:96:f8:b8:79:1d:e3:6a:d6:9d:28:48:
                    1a:86:23:b9:53:3b:ba:1b:a6:0c:b4:4b:27:e4:d9:
                    5b:45:06:46:68:a2:99:d3:a8:6d:12:e6:8c:e5:da:
                    6d:78:79:ab:c5:e7:73:3b:91:05:d4:37:99:8d:37:
                    79:bf:1d:48:83:d4:2b:1c:78:22:d8:ce:ed:c1:3e:
                    bf:67:6b:58:08:50:ea:f1:b5:e8:14:95:21:01:c9:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.236.0/22
                IPv6:
                  2a06:2780::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204195

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:02:37:ba:eb:86:d3:ad:53:e8:1f:1b:5f:c5:d3:74:80:
         6f:0b:94:79:29:a5:c7:20:bf:08:d2:dd:1c:a5:0f:7a:0a:ac:
         58:e0:eb:9b:90:f9:38:c7:6b:ba:02:6e:54:71:db:6c:1c:e1:
         22:d5:eb:3a:89:7a:c7:65:37:c5:b4:56:64:7b:ef:1c:18:e4:
         90:4c:53:e4:e3:fe:15:d5:51:2f:aa:2f:70:bc:b8:7f:31:1f:
         17:6c:44:b0:7b:ae:fd:50:88:3d:8a:2c:81:7c:01:5c:f1:59:
         20:73:35:17:bc:da:64:22:ff:61:30:53:fb:aa:d3:f0:af:7c:
         0b:60:01:fe:48:c4:4e:07:2b:24:ed:5e:6f:1a:5f:ec:52:0f:
         07:ec:fb:32:be:be:b0:8d:56:93:9b:08:ff:d9:f5:8b:e6:db:
         f9:5d:f9:69:85:a9:94:40:6d:6b:b4:94:04:c2:cf:75:b9:ef:
         77:a7:2f:72:43:a0:25:e8:37:22:52:63:8a:5e:21:c8:53:de:
         72:fb:56:db:08:f2:1e:5b:4e:89:a1:31:0c:d5:c1:78:3c:b6:
         29:d1:03:12:a8:ed:77:8e:a0:dc:02:c5:55:e9:c6:66:cf:fa:
         b9:e9:dc:0e:0f:b1:23:22:dc:8d:0e:5d:26:c6:52:24:79:8b:
         53:cc:b0:7d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaB0GUZGO3ut661lIyqa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTUzNWY4ZmE0YjVmNTE1MzNkNzI0ZWFmOTBkYmE5OTcxNWZjNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPGlmgEL/auMhkb+jHfhG2r4xcr
C1z7xTPyp5xEIbA/XaGzRziXv+A5c025i6E6nOAz1FTpkqOt4Ubnfeff/H/vt3Ga
6Qsc8evT6lJCVpPtgQ1J4cSZOQXVJ9HyLbih/vxL5ZvkjSaUwrIOAdefkzKHFt80
0zPD0uon4ZXswnMdKoSmP9jmeZc/ttMv8MYTOHjY06hPZxhC6fIUMAwnfLJe1EyX
8Dsxlvi4eR3jatadKEgahiO5Uzu6G6YMtEsn5NlbRQZGaKKZ06htEuaM5dpteHmr
xedzO5EF1DeZjTd5vx1Ig9QrHHgi2M7twT6/Z2tYCFDq8bXoFJUhAclL8QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBFTX4+ktfUVM9ck6vkNuplxX8b8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzA2ZDY4
My01YTU1LTQyYWQtOTFkOS01ZjJlZTVjZTQ1ODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMDZkNjgz
LTVhNTUtNDJhZC05MWQ5LTVmMmVlNWNlNDU4MS8xL0VWTmZqNlMxOVJVejF5VHEt
UTI2bVhGZnh2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXPsMA0EAgACMAcDBQMqBieAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMdozANBgkqhkiG9w0BAQsFAAOCAQEAk8cCN7rrhtOt
U+gfG1/F03SAbwuUeSmlxyC/CNLdHKUPegqsWODrm5D5OMdrugJuVHHbbBzhItXr
Ool6x2U3xbRWZHvvHBjkkExT5OP+FdVRL6ovcLy4fzEfF2xEsHuu/VCIPYosgXwB
XPFZIHM1F7zaZCL/YTBT+6rT8K98C2AB/kjETgcrJO1ebxpf7FIPB+z7Mr6+sI1W
k5sI/9n1i+bb+V35aYWplEBta7SUBMLPdbnvd6cvckOgJeg3IlJjil4hyFPecvtW
2wjyHltOiaExDNXBeDy2KdEDEqjtd46g3ALFVenGZs/6uencDg+xIyLcjQ5dJsZS
JHmLU8ywfQ==
-----END CERTIFICATE-----