Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
File:                     Oe6oRlUcbkGblH4NoQfuywBwQZo.cer (raw, json)
Hash identifier:          fXPy3i8E3bVV6unbUMM3NtWcRzjJgaODkcZe0w4dMOg=
Subject key identifier:   39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B72399B348B73BC658E55C05C7BFC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.229.80.0/22
                          IP: 2a0c:76c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:72:39:9b:34:8b:73:bc:65:8e:55:c0:5c:7b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=39eea846551c6e419b947e0da107eecb0070419a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:2e:34:64:77:c2:c2:46:9a:d8:39:50:8c:
                    ce:4b:bc:2b:24:b1:53:2a:22:79:4a:0b:1e:d8:fa:
                    c4:3e:ab:43:d7:79:3f:f6:49:fd:32:9e:42:05:a2:
                    bb:10:42:e2:22:06:e6:05:b0:a4:74:aa:b1:fe:be:
                    cd:96:00:51:c1:57:d3:9c:b7:39:87:0c:43:3e:b5:
                    bf:a5:6d:0f:dc:46:1d:27:af:87:46:7f:d3:47:98:
                    a3:e0:1f:d0:62:63:2b:3c:61:8a:0e:f9:59:70:6e:
                    a9:ac:7d:75:5c:f1:3f:e1:3a:ea:92:41:4c:dd:f2:
                    c5:e5:4f:1f:63:91:1e:f4:a0:de:5c:50:c5:6a:27:
                    c3:5d:17:ea:50:2c:35:39:f4:56:7c:c3:ab:d5:89:
                    a1:04:af:d6:da:8e:de:c6:b8:69:b1:9e:78:d0:72:
                    0a:77:21:c5:7b:47:4e:af:b1:35:58:82:b0:61:2f:
                    21:82:d1:2f:ef:db:7b:94:90:f8:94:93:61:9a:fa:
                    a5:0d:78:47:5d:f9:ee:a6:ff:4a:3a:bc:bf:a5:cf:
                    0d:61:d3:fe:97:fa:e8:34:f7:c9:f9:50:bb:6b:cb:
                    5a:f6:79:ee:8c:70:67:95:d3:36:dc:a0:f8:45:33:
                    91:ba:d1:75:a6:54:c6:ea:95:dd:98:6d:5c:8c:53:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.80.0/22
                IPv6:
                  2a0c:76c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:72:c0:16:c4:7a:a0:97:53:97:af:7a:95:08:78:28:1c:
         c9:5c:0e:20:aa:6b:e0:33:34:b0:6c:08:0d:0f:19:ac:c6:e5:
         62:70:0d:33:81:68:d1:f5:4d:db:f7:55:0c:92:7a:1d:f8:4c:
         36:7c:14:2f:fc:3a:85:68:3e:44:1b:3b:76:d9:b3:b0:eb:01:
         ab:c2:e2:74:3f:4a:55:ac:db:43:e2:44:de:dd:bc:25:bc:94:
         cc:55:d9:e7:22:e9:fd:c8:02:6b:58:0b:30:da:ac:8b:50:04:
         c4:21:0f:0d:50:d5:d0:32:11:43:59:ac:6e:33:bc:cc:91:6d:
         f0:c8:87:8d:3a:1a:34:f0:3b:98:5a:61:c7:6e:c0:38:95:e3:
         5b:fc:36:43:47:d4:58:12:8d:04:06:59:03:94:76:c4:20:47:
         39:af:60:e0:a1:27:85:be:d6:e6:42:a3:42:7e:44:f6:f1:f9:
         25:6a:a7:9b:88:23:af:04:f0:c1:5e:02:a4:73:3c:bb:b6:2a:
         df:4a:0c:e0:12:2e:79:f3:01:b6:a5:fd:56:76:a0:12:a7:c5:
         ed:b6:3c:15:75:b2:b7:25:00:ff:84:7c:cd:9d:9b:12:25:94:
         34:75:03:b1:78:87:cf:1d:ce:d8:73:c2:2c:be:f5:3f:00:98:
         51:0c:a2:a1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQma3I5mzSLc7xljlXAXHv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWVlYTg0NjU1MWM2ZTQxOWI5NDdlMGRhMTA3ZWVjYjAwNzA0MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuowuNGR3wsJGmtg5UIzOS7wrJLFT
KiJ5Sgse2PrEPqtD13k/9kn9Mp5CBaK7EELiIgbmBbCkdKqx/r7NlgBRwVfTnLc5
hwxDPrW/pW0P3EYdJ6+HRn/TR5ij4B/QYmMrPGGKDvlZcG6prH11XPE/4TrqkkFM
3fLF5U8fY5Ee9KDeXFDFaifDXRfqUCw1OfRWfMOr1YmhBK/W2o7exrhpsZ540HIK
dyHFe0dOr7E1WIKwYS8hgtEv79t7lJD4lJNhmvqlDXhHXfnupv9KOry/pc8NYdP+
l/roNPfJ+VC7a8ta9nnujHBnldM23KD4RTORutF1plTG6pXdmG1cjFNiiwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzA5ZDMy
OS03ZmZlLTQ1MWItYmM4Mi0yODMxYTQ4NTA2NDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDlkMzI5
LTdmZmUtNDUxYi1iYzgyLTI4MzFhNDg1MDY0NS8xL09lNm9SbFVjYmtHYmxINE5v
UWZ1eXdCd1Faby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCW+VQMA0EAgACMAcDBQAqDHbAMA0GCSqGSIb3
DQEBCwUAA4IBAQAhy3LAFsR6oJdTl696lQh4KBzJXA4gqmvgMzSwbAgNDxmsxuVi
cA0zgWjR9U3b91UMknod+Ew2fBQv/DqFaD5EGzt22bOw6wGrwuJ0P0pVrNtD4kTe
3bwlvJTMVdnnIun9yAJrWAsw2qyLUATEIQ8NUNXQMhFDWaxuM7zMkW3wyIeNOho0
8DuYWmHHbsA4leNb/DZDR9RYEo0EBlkDlHbEIEc5r2DgoSeFvtbmQqNCfkT28fkl
aqebiCOvBPDBXgKkczy7tirfSgzgEi558wG2pf1WdqASp8XttjwVdbK3JQD/hHzN
nZsSJZQ0dQOxeIfPHc7Yc8IsvvU/AJhRDKKh
-----END CERTIFICATE-----