Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
File:                     RhU-isRttc5XS6fjnoforwlsGok.cer (raw, json)
Hash identifier:          ka5qeFEM4yKb2qLbOxI8Z9af9w5Bvs+0vtM3UsQ6BBU=
Subject key identifier:   46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA2AB4DF2B6E388AB9D62B8E25BC1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215031
                          IP: 195.8.36.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:2a:b4:df:2b:6e:38:8a:b9:d6:2b:8e:25:bc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:6e:9c:2b:4e:00:93:0d:8a:16:c5:00:33:
                    a7:87:40:d6:65:7e:fc:32:c4:5f:e3:40:f4:85:07:
                    c8:57:a2:b6:e8:13:b2:12:c5:5a:b0:d0:03:d0:a0:
                    ed:1d:69:36:56:e4:d0:ca:ae:31:92:bb:38:20:1c:
                    fd:01:3b:0c:d7:fb:96:ff:5a:69:02:0d:4b:5a:67:
                    9a:90:b9:36:67:e1:56:80:04:d5:5e:6a:23:ed:08:
                    57:2e:21:c9:30:dd:9c:ea:1a:c7:49:9f:bf:18:d2:
                    03:f2:ab:1f:7a:72:89:92:c5:d3:ee:94:37:6b:3c:
                    30:87:13:69:c2:2c:93:91:a5:2f:b5:1a:f7:b7:b6:
                    6c:d4:8f:25:96:b7:22:42:ce:ba:2c:0d:5f:ff:5a:
                    6c:4f:fa:b6:62:4c:1e:e1:d9:fa:66:cb:ab:49:a1:
                    4c:b4:81:17:03:6c:a7:39:9c:c5:73:2f:f8:f5:e3:
                    eb:ea:21:a4:c3:9c:0b:d4:05:db:29:8f:f7:ed:22:
                    cc:04:ec:7a:a1:4b:62:0e:15:0c:ae:2e:54:a3:1b:
                    34:cc:14:16:bf:d2:70:b5:f3:b2:59:6e:29:50:0d:
                    6a:b4:ad:2c:dd:2b:d2:db:b0:f7:64:88:fb:45:85:
                    f0:62:3b:b5:29:cc:1a:48:43:87:aa:85:23:4d:4e:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.36.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215031

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:15:71:88:03:98:3a:3f:86:29:a9:cd:76:ab:78:36:e7:
         35:35:85:f6:8b:05:6d:0e:45:f5:a1:cf:97:78:7b:23:67:ea:
         b7:41:c2:71:13:c4:d5:3e:1e:de:5d:ab:7b:ea:4c:9e:d5:e3:
         ab:3a:a9:50:bb:73:c2:fd:af:2f:af:20:d4:3c:ef:6a:cd:b2:
         27:29:8b:2c:a6:51:6e:c7:de:88:5d:b3:21:58:cd:0d:98:99:
         a3:99:ad:e2:7a:3d:90:d3:de:9d:ed:f4:00:51:95:3f:ab:5b:
         6e:dc:86:ba:d5:cc:11:12:bb:67:48:c8:21:c2:8d:1c:9e:2b:
         6b:29:c0:d0:87:85:10:05:d0:ed:c1:09:a2:a6:f3:4b:79:43:
         fb:de:98:65:6c:67:55:c8:e4:6f:1d:a4:ee:f0:67:62:9f:03:
         29:56:36:5f:81:3c:c0:9c:7c:bb:ec:6c:cd:66:c9:a0:a9:79:
         26:c6:79:2e:52:4a:d7:47:8c:3b:73:69:94:ce:e5:e8:b2:32:
         32:10:80:77:52:6b:c2:e1:f1:57:46:02:76:e5:b6:a0:3e:11:
         34:52:dd:f6:3e:c1:91:62:97:5f:ab:0d:b6:af:27:a7:28:17:
         d9:7a:c2:b1:d8:64:f1:25:25:90:e1:d4:a4:b4:52:a3:41:df:
         a1:bf:6b:4b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQf+iq03ytuOIq51iuOJbweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjE1M2U4YWM0NmRiNWNlNTc0YmE3ZTM5ZTg3ZThhZjA5NmMxYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtJunCtOAJMNihbFADOnh0DWZX78
MsRf40D0hQfIV6K26BOyEsVasNAD0KDtHWk2VuTQyq4xkrs4IBz9ATsM1/uW/1pp
Ag1LWmeakLk2Z+FWgATVXmoj7QhXLiHJMN2c6hrHSZ+/GNID8qsfenKJksXT7pQ3
azwwhxNpwiyTkaUvtRr3t7Zs1I8llrciQs66LA1f/1psT/q2Ykwe4dn6ZsurSaFM
tIEXA2ynOZzFcy/49ePr6iGkw5wL1AXbKY/37SLMBOx6oUtiDhUMri5Uoxs0zBQW
v9JwtfOyWW4pUA1qtK0s3SvS27D3ZIj7RYXwYju1KcwaSEOHqoUjTU6qSwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFEYVPorEbbXOV0un456H6K8JbBqJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzBkMTE3
Mi00YmIyLTQ5MmMtYjUxMS03OGRjN2IyYzNlODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMGQxMTcy
LTRiYjItNDkyYy1iNTExLTc4ZGM3YjJjM2U4OC8xL1JoVS1pc1J0dGM1WFM2Zmpu
b2Zvcndsc0dvay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwwgkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNH9zANBgkqhkiG9w0BAQsFAAOCAQEAjekVcYgDmDo/himpzXareDbnNTWF9osF
bQ5F9aHPl3h7I2fqt0HCcRPE1T4e3l2re+pMntXjqzqpULtzwv2vL68g1Dzvas2y
JymLLKZRbsfeiF2zIVjNDZiZo5mt4no9kNPene30AFGVP6tbbtyGutXMERK7Z0jI
IcKNHJ4raynA0IeFEAXQ7cEJoqbzS3lD+96YZWxnVcjkbx2k7vBnYp8DKVY2X4E8
wJx8u+xszWbJoKl5JsZ5LlJK10eMO3NplM7l6LIyMhCAd1JrwuHxV0YCduW2oD4R
NFLd9j7BkWKXX6sNtq8npygX2XrCsdhk8SUlkOHUpLRSo0Hfob9rSw==
-----END CERTIFICATE-----