Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
File:                     PrRw_U1nQhL_yCqZNvP-JUvszmY.cer (raw, json)
Hash identifier:          pHyOY5/14ZL0IW7Ss/a+xxCb2aUtoyj0DGEkkT2ZWQc=
Subject key identifier:   3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC027ED7B30B5F00138DFBE31B78F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48360
                          IP: 185.77.104.0/22
                          IP: 2a05:62c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:02:7e:d7:b3:0b:5f:00:13:8d:fb:e3:1b:78:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:4b:e7:c6:d6:f9:4a:98:cd:32:df:21:26:
                    e0:9f:90:d4:36:4b:62:c8:f3:a5:35:1d:d9:f5:57:
                    37:c0:dd:f0:62:0a:24:0f:9c:28:72:8f:4c:12:03:
                    51:55:97:e3:32:8e:6b:f6:88:7e:98:85:95:72:c0:
                    99:57:02:03:42:93:b9:3b:51:b8:6a:9e:6f:06:7a:
                    84:9f:3e:ac:9f:8f:bf:18:cc:f9:c5:5f:f0:12:13:
                    2f:4d:82:ad:0d:ff:fa:eb:af:91:dd:38:b6:8c:ce:
                    b9:b4:3d:ad:10:2a:cb:d0:c6:21:35:87:5d:1e:07:
                    dd:b9:d5:e5:34:16:de:d8:d2:18:a5:ee:09:18:f0:
                    d0:94:93:cb:ef:9c:87:1a:06:11:f2:05:2b:8d:af:
                    20:69:bf:bf:de:ad:3f:58:4e:fb:c1:ce:14:69:8b:
                    03:74:f2:f8:05:ed:22:28:7d:42:8f:cf:e6:31:3e:
                    be:cb:82:f2:2b:71:fd:49:eb:ed:8a:7d:53:5b:9a:
                    bc:30:e5:a3:87:94:a1:c7:4f:20:d2:78:0f:d0:aa:
                    31:e1:36:01:e5:7d:dd:92:93:2e:12:78:95:48:93:
                    4a:87:6d:95:2e:cd:d2:f4:af:11:0e:7d:50:e1:c5:
                    29:fb:09:80:c1:fa:91:b2:0e:57:43:27:3e:4d:c6:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.104.0/22
                IPv6:
                  2a05:62c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48360

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:ed:e9:e1:1f:f6:30:0c:c1:6a:77:58:af:72:3a:a1:d5:
         c8:f0:ab:69:2f:99:ef:4d:99:7c:71:4a:5c:13:e9:93:94:37:
         be:fd:72:31:23:ca:c2:19:10:36:51:08:5e:04:b0:c6:8a:12:
         86:3c:70:2e:9f:8c:d5:73:c3:57:05:2d:cd:26:7f:47:19:f2:
         9f:ff:7e:44:28:8d:cc:24:68:58:ba:07:96:05:fe:83:7f:a9:
         b6:e6:6c:24:39:92:51:58:83:b9:f1:2d:d7:52:c2:1f:c2:60:
         73:f3:67:82:ca:70:74:2a:cc:b0:be:c5:1c:d3:d2:25:a8:80:
         0a:3c:56:ee:b3:20:a8:63:e5:5b:65:17:2a:48:b3:fc:50:59:
         ab:13:64:5f:56:ad:4b:88:82:c3:a7:40:6f:3b:5b:d2:bb:f4:
         ed:8f:9b:5a:5f:1b:ab:c5:45:41:fd:6e:67:cb:c2:2a:b3:9e:
         90:9c:fc:0e:06:5d:5c:94:7c:18:0b:a6:be:70:95:c2:da:8b:
         62:3d:5e:62:38:ed:91:f6:59:40:e2:36:82:6b:d8:74:85:ca:
         88:14:b1:0e:91:7c:05:f2:66:f6:a2:a1:08:0f:38:4d:ed:81:
         86:d2:7d:9b:6a:74:35:43:3f:73:4c:99:e6:0b:9e:72:6b:2b:
         81:90:b7:0e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi/AJ+17MLXwATjfvjG3j3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWI0NzBmZDRkNjc0MjEyZmZjODJhOTkzNmYzZmUyNTRiZWNjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDBL58bW+UqYzTLfISbgn5DUNkti
yPOlNR3Z9Vc3wN3wYgokD5woco9MEgNRVZfjMo5r9oh+mIWVcsCZVwIDQpO5O1G4
ap5vBnqEnz6sn4+/GMz5xV/wEhMvTYKtDf/666+R3Ti2jM65tD2tECrL0MYhNYdd
HgfdudXlNBbe2NIYpe4JGPDQlJPL75yHGgYR8gUrja8gab+/3q0/WE77wc4UaYsD
dPL4Be0iKH1Cj8/mMT6+y4LyK3H9Sevtin1TW5q8MOWjh5Shx08g0ngP0Kox4TYB
5X3dkpMuEniVSJNKh22VLs3S9K8RDn1Q4cUp+wmAwfqRsg5XQyc+TcaXvQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFD60cP1NZ0IS/8gqmTbz/iVL7M5mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzc0NGU1
My04ZGU2LTQ2NzEtOWY4MC01ZjAxNTczMGQ4MTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNzQ0ZTUz
LThkZTYtNDY3MS05ZjgwLTVmMDE1NzMwZDgxMS8xL1ByUndfVTFuUWhMX3lDcVpO
dlAtSlV2c3ptWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuU1oMA0EAgACMAcDBQMqBWLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC86DANBgkqhkiG9w0BAQsFAAOCAQEAS3ft6eEf9jAM
wWp3WK9yOqHVyPCraS+Z702ZfHFKXBPpk5Q3vv1yMSPKwhkQNlEIXgSwxooShjxw
Lp+M1XPDVwUtzSZ/Rxnyn/9+RCiNzCRoWLoHlgX+g3+ptuZsJDmSUViDufEt11LC
H8Jgc/NngspwdCrMsL7FHNPSJaiACjxW7rMgqGPlW2UXKkiz/FBZqxNkX1atS4iC
w6dAbztb0rv07Y+bWl8bq8VFQf1uZ8vCKrOekJz8DgZdXJR8GAumvnCVwtqLYj1e
YjjtkfZZQOI2gmvYdIXKiBSxDpF8BfJm9qKhCA84Te2BhtJ9m2p0NUM/c0yZ5gue
cmsrgZC3Dg==
-----END CERTIFICATE-----