Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer
File:                     RBMe6Tam-kL_OvCmrobCxmU91XM.cer (raw, json)
Hash identifier:          eNlk5iPsUBFpbYknKeb48q8sTfSVLRFb/4q5MfHVHgk=
Subject key identifier:   44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422200D9DE808B9269F7C6EC4B317531C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60906
                          IP: 193.23.16.0/22
                          IP: 2a0f:5680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:0d:9d:e8:08:b9:26:9f:7c:6e:c4:b3:17:53:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:8c:90:1f:0a:82:7d:d2:d8:32:5e:9f:ec:
                    ac:6d:76:7c:90:da:cc:3b:5f:3f:73:3d:9b:c9:53:
                    d5:c1:f1:95:bd:7b:92:f7:b4:06:97:94:0e:65:2c:
                    b6:14:a4:78:20:0d:cc:d1:2d:69:ec:cd:9d:cb:7e:
                    a2:d6:c0:21:35:48:5a:28:ee:aa:3c:5b:03:e9:8c:
                    d5:35:53:24:2d:26:16:3c:7c:0a:da:99:75:6d:76:
                    56:8f:51:ff:36:05:c8:69:69:61:ac:89:6c:bd:96:
                    e1:d7:ae:62:0c:6d:bd:63:4a:7e:20:af:e6:47:1e:
                    89:0a:ae:ec:bb:51:ab:dd:64:e1:9e:0e:27:05:a9:
                    b4:2c:49:8b:61:e5:17:5e:bf:2d:56:a2:88:db:22:
                    dd:91:97:6e:cf:1c:15:03:3a:d2:64:78:75:e7:46:
                    7a:6b:74:d8:91:ea:44:b3:0a:f8:7b:82:17:fa:3e:
                    f9:e0:15:10:4f:ec:b4:62:49:79:53:d1:4c:49:57:
                    46:8f:c7:4d:22:2d:4d:2a:fc:9b:6a:5b:54:69:07:
                    0c:49:fc:38:a9:0b:79:8b:0f:0d:c5:11:29:04:01:
                    48:7d:4a:8d:ac:10:df:e2:ed:ce:96:fd:f7:0e:20:
                    80:18:6f:ca:5e:0d:5e:48:5c:7d:47:2d:5c:0f:26:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.16.0/22
                IPv6:
                  2a0f:5680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60906

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:50:5b:62:9c:87:d5:c6:99:f8:32:f5:13:7e:7a:98:6e:
         79:ec:6e:3a:9b:76:ef:c7:54:11:6f:79:4a:0f:7a:e8:bb:2d:
         7b:ca:96:6e:9d:b3:ed:9f:68:1e:b2:00:44:ce:41:91:65:ce:
         a9:29:d9:fc:00:48:bb:fb:07:06:53:ea:3f:59:72:c9:b8:80:
         0c:4f:c3:e4:16:1c:47:d9:8d:84:0d:ec:c1:b5:89:5b:d1:d5:
         b8:51:f6:4c:3f:ed:48:b2:ec:e5:07:b4:d7:45:5a:3c:a8:3e:
         4f:64:fb:e3:05:a9:f0:71:2c:3d:24:85:9a:89:e9:d3:ac:26:
         76:00:99:31:b9:e8:ba:5e:cd:4c:ff:08:90:c1:4f:1f:8a:93:
         22:38:c5:7c:78:56:a5:c9:38:8e:f4:0f:ec:6c:fb:62:b9:6c:
         7f:34:48:43:9b:e6:0e:f0:fe:15:26:9e:82:bf:30:a1:70:9d:
         b8:f7:3c:2b:49:d0:75:5d:5e:cb:3b:f4:68:cc:7f:81:bf:cc:
         97:03:1e:e8:65:e4:5b:9f:cd:f6:60:83:76:f0:67:c2:cd:ba:
         9c:47:08:72:ee:4c:b8:07:82:85:a4:88:03:99:ad:59:79:3c:
         d3:e2:ec:15:a5:c3:36:f9:82:b0:1d:e6:02:77:7b:f9:73:47:
         d9:81:5e:c1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiIA2d6Ai5Jp98bsSzF1McMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDEzMWVlOTM2YTZmYTQyZmYzYWYwYTZhZTg2YzJjNjY1M2RkNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AmMkB8Kgn3S2DJen+ysbXZ8kNrM
O18/cz2byVPVwfGVvXuS97QGl5QOZSy2FKR4IA3M0S1p7M2dy36i1sAhNUhaKO6q
PFsD6YzVNVMkLSYWPHwK2pl1bXZWj1H/NgXIaWlhrIlsvZbh165iDG29Y0p+IK/m
Rx6JCq7su1Gr3WThng4nBam0LEmLYeUXXr8tVqKI2yLdkZduzxwVAzrSZHh150Z6
a3TYkepEswr4e4IX+j754BUQT+y0Ykl5U9FMSVdGj8dNIi1NKvybaltUaQcMSfw4
qQt5iw8NxREpBAFIfUqNrBDf4u3Olv33DiCAGG/KXg1eSFx9Ry1cDyZ0xQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEQTHuk2pvpC/zrwpq6GwsZlPdVzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzFkNDRm
Mi0xNzA2LTRiZjEtYjcxZC03NGNhMzY0MDJhODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvMWQ0NGYy
LTE3MDYtNGJmMS1iNzFkLTc0Y2EzNjQwMmE4NS8xL1JCTWU2VGFtLWtMX092Q21y
b2JDeG1VOTFYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwRcQMA0EAgACMAcDBQMqD1aAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDt6jANBgkqhkiG9w0BAQsFAAOCAQEAHyZQW2Kch9XG
mfgy9RN+ephueexuOpt278dUEW95Sg966Lste8qWbp2z7Z9oHrIARM5BkWXOqSnZ
/ABIu/sHBlPqP1lyybiADE/D5BYcR9mNhA3swbWJW9HVuFH2TD/tSLLs5Qe010Va
PKg+T2T74wWp8HEsPSSFmonp06wmdgCZMbnoul7NTP8IkMFPH4qTIjjFfHhWpck4
jvQP7Gz7YrlsfzRIQ5vmDvD+FSaegr8woXCduPc8K0nQdV1eyzv0aMx/gb/MlwMe
6GXkW5/N9mCDdvBnws26nEcIcu5MuAeChaSIA5mtWXk80+LsFaXDNvmCsB3mAnd7
+XNH2YFewQ==
-----END CERTIFICATE-----