Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
File:                     LhmWbA6l3zqYf4NlUktRKMun_JA.cer (raw, json)
Hash identifier:          n+BtMuCM+dB6IUJMbVh6lv6kJBR6bkdP8w2GXUUXCKo=
Subject key identifier:   2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C11936FA5347B7BEAB52FB38B219F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57743
                          AS: 209000
                          IP: 45.136.52.0/22
                          IP: 2a07:df40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:11:93:6f:a5:34:7b:7b:ea:b5:2f:b3:8b:21:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:fe:c2:13:01:91:fe:3e:70:b6:e4:77:db:
                    e4:3f:cf:cc:d1:f5:27:c8:68:f6:af:ae:88:0d:4b:
                    e5:4a:11:e6:03:a8:c8:94:79:e4:cd:4b:de:24:26:
                    49:6f:41:37:77:2e:72:a0:25:53:2b:96:f3:ba:8f:
                    06:3d:f4:57:d2:1a:59:ab:12:2d:af:e5:35:4a:64:
                    f6:83:67:6c:70:6c:d3:e3:17:25:24:3e:85:ad:32:
                    4a:cf:90:76:50:9d:89:12:cd:03:f6:e4:cd:10:e3:
                    e2:8c:c0:94:a6:f6:74:16:5a:42:09:99:85:d5:a8:
                    de:5c:ab:70:3d:a2:f8:67:cf:15:90:2c:7e:0a:d6:
                    f9:c4:c4:fb:ba:ad:49:67:7a:38:d6:b1:38:65:ab:
                    49:9f:0f:c5:56:5d:93:79:b2:f7:2c:76:ad:4f:10:
                    d1:27:e4:4f:54:16:cd:88:4d:08:18:db:00:b0:f2:
                    fa:64:f6:77:12:c0:45:f5:d0:2f:6e:4d:7c:85:3b:
                    ae:35:a4:85:b5:b9:3c:9b:f5:e7:8c:a6:d6:69:ea:
                    ef:fe:f9:da:01:5c:04:f2:5d:3d:90:59:ec:68:c7:
                    3c:9a:a4:22:fe:c4:7c:10:06:9d:f7:5e:08:8e:f9:
                    cd:2e:f1:af:11:ce:36:10:dd:15:fd:5d:55:58:9f:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.52.0/22
                IPv6:
                  2a07:df40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57743
                  209000

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:12:a8:b6:de:f4:b3:6c:a1:60:94:ab:0f:68:28:09:22:
         87:53:ae:69:34:ad:cd:a6:d7:a7:ba:a4:ff:08:f5:f1:a3:cc:
         10:23:cb:b0:36:61:e6:26:82:90:fd:bd:67:f9:c6:04:8c:42:
         99:40:5c:88:02:02:75:22:9b:55:9e:04:0b:5e:d0:19:aa:d9:
         3e:a6:85:06:f6:d9:0e:00:10:46:61:bd:c8:af:c6:18:7f:e8:
         72:30:18:a8:e7:38:9e:cc:ec:77:8b:03:9c:ec:6f:c9:03:e6:
         aa:9b:8f:00:7e:81:ab:8f:8e:85:93:2f:c7:dd:2d:81:9a:fa:
         4a:da:35:4b:b7:09:15:e6:28:f4:5d:92:06:a0:92:57:a8:5f:
         03:cc:11:a2:42:a8:0d:bc:b6:79:80:46:cc:ee:09:35:87:0b:
         c5:6e:5b:7d:f4:7d:ea:b5:48:67:06:fc:fe:a3:4f:8d:f8:68:
         02:3d:47:b3:f7:17:d7:a5:69:5f:ee:5c:8d:9b:8b:35:56:7d:
         81:35:19:c0:9c:96:83:e0:f5:b1:2a:87:37:61:d5:41:96:b0:
         7b:e0:c3:d1:3f:33:c4:ee:b7:44:46:44:df:6c:78:98:94:c6:
         61:a3:71:54:27:4d:a3:54:03:f0:22:05:37:09:e6:c5:91:ff:
         14:bd:05:f5
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQmbBGTb6U0e3vqtS+ziyGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTE5OTY2YzBlYTVkZjNhOTg3ZjgzNjU1MjRiNTEyOGNiYTdmYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1T+whMBkf4+cLbkd9vkP8/M0fUn
yGj2r66IDUvlShHmA6jIlHnkzUveJCZJb0E3dy5yoCVTK5bzuo8GPfRX0hpZqxIt
r+U1SmT2g2dscGzT4xclJD6FrTJKz5B2UJ2JEs0D9uTNEOPijMCUpvZ0FlpCCZmF
1ajeXKtwPaL4Z88VkCx+Ctb5xMT7uq1JZ3o41rE4ZatJnw/FVl2TebL3LHatTxDR
J+RPVBbNiE0IGNsAsPL6ZPZ3EsBF9dAvbk18hTuuNaSFtbk8m/XnjKbWaerv/vna
AVwE8l09kFnsaMc8mqQi/sR8EAad914IjvnNLvGvEc42EN0V/V1VWJ9HVwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFC4ZlmwOpd86mH+DZVJLUSjLp/yQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2E2YjYx
My02NmJkLTQzMTItOGYwYy0zNmI1ZGRhOWZiZTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYTZiNjEz
LTY2YmQtNDMxMi04ZjBjLTM2YjVkZGE5ZmJlOC8xL0xobVdiQTZsM3pxWWY0TmxV
a3RSS011bl9KQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYg0MA0EAgACMAcDBQMqB99AMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDhjwIDAzBoMA0GCSqGSIb3DQEBCwUAA4IBAQBfthKo
tt70s2yhYJSrD2goCSKHU65pNK3NptenuqT/CPXxo8wQI8uwNmHmJoKQ/b1n+cYE
jEKZQFyIAgJ1IptVngQLXtAZqtk+poUG9tkOABBGYb3Ir8YYf+hyMBio5ziezOx3
iwOc7G/JA+aqm48AfoGrj46Fky/H3S2BmvpK2jVLtwkV5ij0XZIGoJJXqF8DzBGi
QqgNvLZ5gEbM7gk1hwvFblt99H3qtUhnBvz+o0+N+GgCPUez9xfXpWlf7lyNm4s1
Vn2BNRnAnJaD4PWxKoc3YdVBlrB74MPRPzPE7rdERkTfbHiYlMZho3FUJ02jVAPw
IgU3CebFkf8UvQX1
-----END CERTIFICATE-----