Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
File:                     N5fgOfAlolqm6ZI5HZJCYGmbpns.cer (raw, json)
Hash identifier:          dnqghpKZOXBQKXdMy5SPMY7VsW8OwD3M/l99mEct8E8=
Subject key identifier:   37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B31121072B2D7DDFF1424A4CF41ADF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.96.72.0/22
                          IP: 2a00:4b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:11:21:07:2b:2d:7d:df:f1:42:4a:4c:f4:1a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3797e039f025a25aa6e992391d924260699ba67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:3d:80:dd:1a:43:a1:fd:0f:43:d8:a0:4e:
                    5b:19:f5:be:6e:d6:a9:91:73:31:77:fd:85:07:c5:
                    b5:25:20:af:51:d2:a0:db:17:3e:de:3a:cf:6f:1e:
                    85:c8:56:ef:b4:04:b4:2c:85:5f:f1:c1:a1:e2:a5:
                    33:15:53:1c:b6:24:71:60:37:2c:63:0b:cd:33:50:
                    22:27:d2:86:38:3b:38:32:33:18:4d:95:53:71:34:
                    54:02:0a:ba:00:be:8d:5b:7f:d1:59:e2:db:0c:b5:
                    69:38:25:f8:b9:71:c8:f2:bb:4a:bb:8d:09:05:bf:
                    0f:12:9a:c6:52:44:b4:b4:25:93:49:e1:f1:8a:50:
                    f0:89:27:63:19:38:0d:14:f8:9d:52:67:dc:c3:7a:
                    d9:ee:c9:93:88:31:4a:0c:80:61:d7:af:80:0b:54:
                    3c:e9:49:54:62:7f:61:c6:72:08:70:91:1a:7f:94:
                    8e:77:51:01:71:80:7d:b8:3b:78:3b:ad:3e:b8:f0:
                    29:03:db:68:7d:2b:3c:d4:22:e9:e0:e4:3d:b6:a2:
                    8b:5f:ca:52:9e:d1:a0:50:4e:ef:fe:70:91:f1:28:
                    9a:71:93:56:57:3d:5a:71:cf:24:5c:60:38:26:9c:
                    1d:e3:7d:15:f7:db:f9:bf:ce:32:0c:8a:bf:e8:18:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.72.0/22
                IPv6:
                  2a00:4b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:81:c6:14:52:57:9c:62:ec:3f:a4:91:5d:de:85:9a:77:1e:
         12:93:70:d1:f8:da:d8:92:d7:5e:b2:c5:c3:10:fc:31:63:da:
         02:04:57:bb:22:fd:ce:37:d7:81:cd:28:8e:72:47:c3:a2:8e:
         c9:74:e9:a2:0e:cc:26:eb:bb:27:01:d1:2e:e1:49:68:43:e8:
         d4:bf:87:84:dc:a8:82:89:f7:63:31:96:c0:f8:6c:a7:37:c2:
         9c:8b:ba:b8:4b:4c:d1:3f:e3:c0:32:f2:f8:e8:10:69:bb:c0:
         ad:c1:67:86:bd:6d:8e:4e:c9:05:fb:a6:c2:b2:2a:cf:18:c3:
         dc:a5:d2:7d:1c:f0:32:81:6a:64:50:86:35:84:c0:c3:4f:c0:
         61:b4:e2:e4:ab:90:6d:d8:d8:83:3b:9e:42:b8:d7:23:ef:5d:
         21:27:43:05:98:05:ae:65:7d:21:e3:9e:da:8d:11:e6:1e:0d:
         99:8c:40:5c:9f:93:63:8b:ff:ec:45:0b:f3:1b:18:dc:c6:7c:
         f6:35:b3:db:30:85:5e:59:25:14:40:35:da:44:5c:98:a2:e5:
         a2:d2:40:3b:e4:e7:50:fb:f4:36:1d:11:32:33:44:45:82:af:
         b6:f3:9e:26:91:8c:0f:d4:a2:61:52:e7:2b:14:fa:f5:68:82:
         ad:38:f5:84
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQksxEhBystfd/xQkpM9BrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk3ZTAzOWYwMjVhMjVhYTZlOTkyMzkxZDkyNDI2MDY5OWJhNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCM9gN0aQ6H9D0PYoE5bGfW+btap
kXMxd/2FB8W1JSCvUdKg2xc+3jrPbx6FyFbvtAS0LIVf8cGh4qUzFVMctiRxYDcs
YwvNM1AiJ9KGODs4MjMYTZVTcTRUAgq6AL6NW3/RWeLbDLVpOCX4uXHI8rtKu40J
Bb8PEprGUkS0tCWTSeHxilDwiSdjGTgNFPidUmfcw3rZ7smTiDFKDIBh16+AC1Q8
6UlUYn9hxnIIcJEaf5SOd1EBcYB9uDt4O60+uPApA9tofSs81CLp4OQ9tqKLX8pS
ntGgUE7v/nCR8SiacZNWVz1acc8kXGA4Jpwd430V99v5v84yDIq/6BjJ1wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDeX4DnwJaJapumSOR2SQmBpm6Z7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzBhYmI4
YS05Nzk4LTRiZjgtYmFlMS1jMWMwNWNkYjc4NDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMGFiYjhh
LTk3OTgtNGJmOC1iYWUxLWMxYzA1Y2RiNzg0MS8xL041ZmdPZkFsb2xxbTZaSTVI
WkpDWUdtYnBucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWBIMA0EAgACMAcDBQAqAEsgMA0GCSqGSIb3
DQEBCwUAA4IBAQBIgcYUUlecYuw/pJFd3oWadx4Sk3DR+NrYktdessXDEPwxY9oC
BFe7Iv3ON9eBzSiOckfDoo7JdOmiDswm67snAdEu4UloQ+jUv4eE3KiCifdjMZbA
+GynN8Kci7q4S0zRP+PAMvL46BBpu8CtwWeGvW2OTskF+6bCsirPGMPcpdJ9HPAy
gWpkUIY1hMDDT8BhtOLkq5Bt2NiDO55CuNcj710hJ0MFmAWuZX0h457ajRHmHg2Z
jEBcn5Nji//sRQvzGxjcxnz2NbPbMIVeWSUUQDXaRFyYouWi0kA75OdQ+/Q2HREy
M0RFgq+2854mkYwP1KJhUucrFPr1aIKtOPWE
-----END CERTIFICATE-----