Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
File:                     S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer (raw, json)
Hash identifier:          qauibm3bzGdoFI5Su01QkZnvgbnNK5Efo1qTS55GIZI=
Subject key identifier:   4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421443FD966F0FE1EB9E8D83B57B57561
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56697
                          IP: 185.130.216.0/22
                          IP: 2a06:e2c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:3f:d9:66:f0:fe:1e:b9:e8:d8:3b:57:b5:75:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:f6:de:44:65:26:72:0b:f9:ef:59:d0:2f:
                    fc:61:f8:1b:61:98:0e:a2:57:94:93:b5:a6:35:b7:
                    03:26:97:af:39:46:38:b9:c3:14:d4:bd:a6:f9:d4:
                    f7:01:8b:4b:e8:71:42:59:d1:93:33:e6:f9:bc:74:
                    ea:2e:f8:70:9f:7c:5b:1a:13:67:6f:5d:27:88:c7:
                    4c:63:af:b1:59:89:e2:1f:d5:32:9e:da:5c:04:0c:
                    0a:60:6a:a4:a0:d7:f1:ab:a9:96:58:47:d9:95:61:
                    0f:16:f6:40:77:35:7a:3c:d2:1c:16:36:56:06:72:
                    34:fc:2a:f2:0a:58:9e:23:69:de:3d:00:4b:ae:76:
                    3d:97:da:32:9e:ae:04:a9:de:f4:9f:cd:a6:07:02:
                    48:a7:e8:1e:b1:88:f8:11:24:95:bc:27:86:f1:95:
                    78:60:df:96:39:15:ed:77:3e:be:00:0c:0a:55:28:
                    1e:17:33:cf:b3:b3:41:af:96:6f:3d:26:d2:fa:c5:
                    e9:41:7a:f8:6e:62:57:41:15:5e:36:11:83:77:48:
                    ea:38:e7:bb:2d:b4:5c:40:91:b3:9e:b8:0e:0e:37:
                    c5:1a:66:ae:83:20:b9:29:d2:f2:6b:65:2c:c8:9a:
                    b8:c5:1f:ba:ad:30:53:f1:e8:a9:30:f8:ee:14:db:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.216.0/22
                IPv6:
                  2a06:e2c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56697

    Signature Algorithm: sha256WithRSAEncryption
         62:86:30:2a:32:39:06:ed:0d:33:39:f1:b5:34:2f:14:15:22:
         f5:da:64:aa:34:4b:50:0c:c0:41:7f:cc:e3:12:a4:95:05:ae:
         c7:3f:de:e3:88:0e:d5:63:65:62:e7:7f:b2:ec:02:c2:fa:48:
         9a:04:95:da:3d:24:d6:f6:36:4f:d1:4f:e2:a2:40:7f:5a:57:
         c5:05:2d:8d:a7:97:c7:8d:3b:a6:7a:0d:91:24:26:37:e5:10:
         7e:b4:5c:dd:36:fb:f3:85:33:3a:36:80:dd:4d:a3:21:55:5d:
         24:c8:03:2e:6e:7d:f6:d5:b7:25:d9:15:56:4c:89:d1:fa:a6:
         14:22:2e:74:9b:35:e5:30:06:16:0d:f1:3d:8f:16:9d:5a:57:
         1f:10:10:21:bd:92:de:ba:74:c5:41:19:98:f7:64:29:3b:22:
         5e:c5:7b:04:8f:4b:52:3c:8f:91:d7:dc:6e:f4:01:7f:d3:58:
         9c:64:ea:92:2c:a9:9b:94:bb:d6:69:61:91:81:7c:e8:51:a2:
         5a:42:6c:a3:96:89:42:c2:48:8b:24:c8:6a:18:1a:b8:41:e7:
         28:2c:af:83:e9:15:4b:bb:5a:11:cb:fd:46:30:80:2d:20:20:
         ca:1d:a8:d8:a2:20:17:29:1d:12:24:25:a1:c6:7c:20:c7:2c:
         1e:4b:55:04
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhRD/ZZvD+Hrno2DtXtXVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjg5ZDg3ZjhlNDFiNTA4MmQzODkxNjAxNWUwNTllNTZkZDAxMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rn23kRlJnIL+e9Z0C/8YfgbYZgO
oleUk7WmNbcDJpevOUY4ucMU1L2m+dT3AYtL6HFCWdGTM+b5vHTqLvhwn3xbGhNn
b10niMdMY6+xWYniH9UyntpcBAwKYGqkoNfxq6mWWEfZlWEPFvZAdzV6PNIcFjZW
BnI0/CryClieI2nePQBLrnY9l9oynq4Eqd70n82mBwJIp+gesYj4ESSVvCeG8ZV4
YN+WORXtdz6+AAwKVSgeFzPPs7NBr5ZvPSbS+sXpQXr4bmJXQRVeNhGDd0jqOOe7
LbRcQJGznrgODjfFGmaugyC5KdLya2UsyJq4xR+6rTBT8eipMPjuFNuZnQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEuJ2H+OQbUILTiRYBXgWeVt0BFOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzRiYTk3
My0wZTlmLTQzNTItOTgzOC02NDJkYzkxMjc2ODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNGJhOTcz
LTBlOWYtNDM1Mi05ODM4LTY0MmRjOTEyNzY4MC8xL1M0bllmNDVCdFFndE9KRmdG
ZUJaNVczUUVVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYLYMA0EAgACMAcDBQMqBuLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDdeTANBgkqhkiG9w0BAQsFAAOCAQEAYoYwKjI5Bu0N
MznxtTQvFBUi9dpkqjRLUAzAQX/M4xKklQWuxz/e44gO1WNlYud/suwCwvpImgSV
2j0k1vY2T9FP4qJAf1pXxQUtjaeXx407pnoNkSQmN+UQfrRc3Tb784UzOjaA3U2j
IVVdJMgDLm599tW3JdkVVkyJ0fqmFCIudJs15TAGFg3xPY8WnVpXHxAQIb2S3rp0
xUEZmPdkKTsiXsV7BI9LUjyPkdfcbvQBf9NYnGTqkiypm5S71mlhkYF86FGiWkJs
o5aJQsJIiyTIahgauEHnKCyvg+kVS7taEcv9RjCALSAgyh2o2KIgFykdEiQlocZ8
IMcsHktVBA==
-----END CERTIFICATE-----