Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
File:                     SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer (raw, json)
Hash identifier:          gWxMEEjKQPwb3YhX3xM/O19K/CzLvXsX3Xu64fdd0RY=
Subject key identifier:   49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423692207CEDDF3160DC2357C9B2533F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59708
                          IP: 185.4.104.0/22
                          IP: 2a02:6ec0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:22:07:ce:dd:f3:16:0d:c2:35:7c:9b:25:33:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:c1:04:c4:ee:2f:96:e6:2d:a2:08:ca:09:
                    dc:15:1d:80:a0:22:90:50:25:3d:b7:56:73:b7:12:
                    0c:bd:73:92:b9:a1:0d:df:66:e9:e0:88:87:8a:f3:
                    42:77:35:2f:e1:7b:1b:a8:8f:f1:90:0f:83:77:d7:
                    36:cd:92:94:9c:8a:eb:a1:d7:fd:e1:59:e1:b7:29:
                    45:1a:97:7e:1d:7b:59:cb:cb:9f:bd:b9:2b:ed:e7:
                    dc:23:50:32:fe:33:c5:2a:f5:99:2f:37:48:f9:c8:
                    65:9b:7d:be:1e:da:41:dd:65:90:49:e5:da:93:62:
                    ba:c5:c0:fc:d5:1c:33:7d:1e:8c:78:f2:ca:b1:c6:
                    16:ac:c3:79:27:4b:6f:d3:31:f4:f8:a0:5d:c0:55:
                    a8:52:ed:9c:96:17:cf:58:6c:7f:16:50:33:77:e6:
                    3c:b1:6b:d9:56:ef:91:56:5a:8a:a5:63:12:09:d2:
                    f4:41:42:6b:ac:37:d9:bd:af:02:c0:77:bc:90:ad:
                    f2:61:51:77:66:92:f7:db:c1:37:3f:ce:cd:a6:b8:
                    2b:f4:f4:a5:b1:d8:d5:aa:b3:dc:d4:f1:dc:e9:e4:
                    c1:35:c4:4f:82:00:3a:9b:d7:b4:79:f1:8d:5c:40:
                    7a:7c:09:41:12:8d:78:6a:f3:e1:3e:4e:e8:88:8b:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.4.104.0/22
                IPv6:
                  2a02:6ec0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59708

    Signature Algorithm: sha256WithRSAEncryption
         52:af:f0:8c:0d:2c:8e:25:ed:d5:7b:89:15:b8:27:d3:95:02:
         85:fa:a7:05:2e:75:e3:45:ab:8c:d6:ed:90:69:ed:a6:45:fd:
         09:90:e3:39:73:5a:3f:63:b3:86:42:e4:09:d5:d1:d2:0b:93:
         73:d6:3f:e5:8a:ab:16:3c:bb:56:be:3a:2a:37:7b:5c:d9:88:
         44:6b:5f:48:c4:29:5c:a9:8b:b5:40:54:c1:ab:13:4d:a3:00:
         f1:45:a7:ac:28:fc:25:b7:b5:a3:80:4d:c3:4c:6f:0a:31:a9:
         92:53:50:96:21:3c:87:70:eb:a0:13:6b:21:73:8b:53:d6:70:
         18:f4:46:00:b1:65:44:94:4d:1b:ac:5a:28:9f:85:a0:8d:80:
         59:d8:48:68:9d:d9:6d:8b:4a:09:76:93:2a:8f:f2:e9:4a:35:
         94:bc:a5:1b:c3:e4:fc:e6:22:d3:aa:78:06:59:59:20:26:c5:
         e2:b3:e5:03:99:2c:de:5b:1b:df:3d:4a:10:76:d8:4d:97:66:
         ba:c3:1a:c9:37:62:b2:77:6d:e5:66:1c:fa:98:20:db:4c:cd:
         5d:42:7b:cc:9e:af:12:f3:d3:3e:d2:c9:26:97:79:a1:38:d2:
         81:8c:c6:5a:a0:b5:aa:1b:da:9e:3a:1d:56:5e:be:fa:23:d3:
         9d:93:aa:d4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaSIHzt3zFg3CNXybJTP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTI0MGI1OWJiZjY5MDZhNTU1ZTEwNzRjNWFlNzNlYzYyZGZmYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYXBBMTuL5bmLaIIygncFR2AoCKQ
UCU9t1ZztxIMvXOSuaEN32bp4IiHivNCdzUv4XsbqI/xkA+Dd9c2zZKUnIrrodf9
4VnhtylFGpd+HXtZy8ufvbkr7efcI1Ay/jPFKvWZLzdI+chlm32+HtpB3WWQSeXa
k2K6xcD81RwzfR6MePLKscYWrMN5J0tv0zH0+KBdwFWoUu2clhfPWGx/FlAzd+Y8
sWvZVu+RVlqKpWMSCdL0QUJrrDfZva8CwHe8kK3yYVF3ZpL328E3P87Nprgr9PSl
sdjVqrPc1PHc6eTBNcRPggA6m9e0efGNXEB6fAlBEo14avPhPk7oiIvspwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEkkC1m79pBqVV4QdMWuc+xi3/xfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzIyNmJl
OC1jN2I3LTQ3ZjAtYjBkNS1kMTRhZjJjYjhmZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMjI2YmU4
LWM3YjctNDdmMC1iMGQ1LWQxNGFmMmNiOGZkZS8xL1NTUUxXYnYya0dwVlhoQjB4
YTV6N0dMZl9GOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQRoMA0EAgACMAcDBQMqAm7AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpPDANBgkqhkiG9w0BAQsFAAOCAQEAUq/wjA0sjiXt
1XuJFbgn05UChfqnBS5140WrjNbtkGntpkX9CZDjOXNaP2OzhkLkCdXR0guTc9Y/
5YqrFjy7Vr46Kjd7XNmIRGtfSMQpXKmLtUBUwasTTaMA8UWnrCj8Jbe1o4BNw0xv
CjGpklNQliE8h3DroBNrIXOLU9ZwGPRGALFlRJRNG6xaKJ+FoI2AWdhIaJ3ZbYtK
CXaTKo/y6Uo1lLylG8Pk/OYi06p4BllZICbF4rPlA5ks3lsb3z1KEHbYTZdmusMa
yTdisndt5WYc+pgg20zNXUJ7zJ6vEvPTPtLJJpd5oTjSgYzGWqC1qhvanjodVl6+
+iPTnZOq1A==
-----END CERTIFICATE-----