Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
File:                     JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer (raw, json)
Hash identifier:          mvTgbMxU3YrIzP41CyXfFKVx6xarAjthVWInIMntJJo=
Subject key identifier:   25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDA372C884CCEAF755B8D55BB72404
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.24.38.0/23
                          IP: 193.25.96.0/23
                          IP: 2a0f:1bc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a3:72:c8:84:cc:ea:f7:55:b8:d5:5b:b7:24:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:cb:78:10:39:b6:9e:f0:7e:d8:a7:70:9f:
                    a8:e5:c6:f2:66:8f:8d:3a:1f:fb:dd:16:b9:f7:2d:
                    e4:68:d4:08:d5:8c:b8:f3:7c:9d:ad:b5:7e:e4:e1:
                    ce:32:c1:89:ca:d7:09:ed:0a:eb:84:8a:0b:70:0b:
                    34:31:20:2b:5b:d0:0d:3c:37:17:b6:51:62:00:59:
                    ef:f7:cf:b1:f8:0d:f8:f8:58:e6:21:bc:1e:66:3c:
                    2f:c3:be:91:a9:47:09:46:e7:cc:50:c5:2d:ce:7f:
                    71:b6:2e:78:d5:0b:45:54:39:50:8f:3b:b7:f8:f0:
                    96:e2:08:e9:8a:f8:89:97:ae:ee:0c:a4:37:3a:cf:
                    87:f3:80:32:51:31:e1:40:c9:af:4c:ee:ff:9e:eb:
                    4f:2d:3f:67:d9:d1:a3:8c:49:99:90:e2:1c:fd:c1:
                    c1:99:65:27:1b:6d:80:cc:55:78:78:dd:37:03:81:
                    7f:12:20:01:a6:91:18:fd:27:e9:3f:53:70:43:1e:
                    68:07:91:18:c4:23:28:22:aa:0e:a1:87:8f:24:02:
                    db:f2:7f:00:8a:47:de:5a:87:cf:b7:28:3f:e4:17:
                    83:2a:f9:5c:ab:d8:83:01:4e:1a:e4:52:ed:c6:1c:
                    97:88:25:d2:2e:c2:ed:b9:cd:a1:26:3f:88:ae:f2:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.38.0/23
                  193.25.96.0/23
                IPv6:
                  2a0f:1bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:99:9e:12:a2:71:a0:bb:32:cd:2c:f7:93:b2:bc:7d:ea:
         ff:b0:09:91:c0:91:56:28:4f:0d:d0:4a:4c:c6:9e:93:45:79:
         76:97:38:07:92:1b:f5:00:3b:2e:74:56:f9:c7:76:ac:33:15:
         c0:d6:fb:0f:69:13:f8:c7:50:24:44:3d:31:de:73:09:1f:fe:
         8a:0f:d0:ff:53:5d:7a:4f:42:84:d8:c4:0c:ac:c7:fd:ec:3e:
         81:7d:de:00:c3:84:7b:fe:5b:34:ff:70:d2:86:b7:27:98:0f:
         c5:3e:fd:5e:29:be:7f:11:83:da:d7:75:07:f1:a6:51:9e:6e:
         ad:1f:57:21:88:cb:41:24:c0:af:8d:b1:b3:f3:52:dc:a0:9f:
         23:7e:58:d0:f5:d9:f5:30:69:d1:a2:0d:a7:38:0c:3d:fc:8c:
         b8:16:4d:81:10:31:e3:9b:a6:85:2b:36:e7:b9:a4:17:27:0c:
         87:d3:02:c0:50:9c:d3:88:81:e1:b8:b4:a0:03:50:69:33:4a:
         fc:78:02:f7:ff:dc:df:df:d6:25:81:e6:2e:f5:14:ec:21:ea:
         89:af:bb:aa:b1:2d:77:ac:ce:f7:eb:08:f0:e2:c0:06:73:46:
         fe:39:52:e3:fc:76:5a:f8:20:77:17:e4:e4:77:76:24:3a:45:
         e6:9a:24:60
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQl/aNyyITM6vdVuNVbtyQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY0NTJhMzQyMGY0ZjE4ZGZhM2ExNGQyNmIzMzQ4ZmRmY2YzZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv27LeBA5tp7wftincJ+o5cbyZo+N
Oh/73Ra59y3kaNQI1Yy483ydrbV+5OHOMsGJytcJ7QrrhIoLcAs0MSArW9ANPDcX
tlFiAFnv98+x+A34+FjmIbweZjwvw76RqUcJRufMUMUtzn9xti541QtFVDlQjzu3
+PCW4gjpiviJl67uDKQ3Os+H84AyUTHhQMmvTO7/nutPLT9n2dGjjEmZkOIc/cHB
mWUnG22AzFV4eN03A4F/EiABppEY/SfpP1NwQx5oB5EYxCMoIqoOoYePJALb8n8A
ikfeWofPtyg/5BeDKvlcq9iDAU4a5FLtxhyXiCXSLsLtuc2hJj+IrvL2PwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFCVkUqNCD08Y36OhTSazNI/fzz07MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2E0ODM4
OC0yZWQ3LTQ0Y2YtOTU1Ny1mMzhiMjg5ZmY5NjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvYTQ4Mzg4
LTJlZDctNDRjZi05NTU3LWYzOGIyODlmZjk2OS8xL0pXUlNvMElQVHhqZm82Rk5K
ck0wajlfUFBUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBwRgmAwQBwRlgMA0EAgACMAcDBQMqDxvAMA0G
CSqGSIb3DQEBCwUAA4IBAQCLC5meEqJxoLsyzSz3k7K8fer/sAmRwJFWKE8N0EpM
xp6TRXl2lzgHkhv1ADsudFb5x3asMxXA1vsPaRP4x1AkRD0x3nMJH/6KD9D/U116
T0KE2MQMrMf97D6Bfd4Aw4R7/ls0/3DShrcnmA/FPv1eKb5/EYPa13UH8aZRnm6t
H1chiMtBJMCvjbGz81LcoJ8jfljQ9dn1MGnRog2nOAw9/Iy4Fk2BEDHjm6aFKzbn
uaQXJwyH0wLAUJzTiIHhuLSgA1BpM0r8eAL3/9zf39YlgeYu9RTsIeqJr7uqsS13
rM736wjw4sAGc0b+OVLj/HZa+CB3F+Tkd3YkOkXmmiRg
-----END CERTIFICATE-----