Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
File:                     U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer (raw, json)
Hash identifier:          zmHjJeGHINyoi+FNZwTz6QUQPMX3FLkkkswEOZ5KoI8=
Subject key identifier:   53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD98A618F692D7ECA3C83D029236EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59869
                          IP: 45.84.132.0/22
                          IP: 81.22.176.0/20
                          IP: 178.22.224.0/21
                          IP: 2a07:ed80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:98:a6:18:f6:92:d7:ec:a3:c8:3d:02:92:36:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:39:c9:72:89:7b:bc:84:b6:93:4c:49:5e:
                    ad:ed:85:ed:f1:c3:ab:91:6d:70:1d:76:75:7e:59:
                    b5:90:5c:56:e3:d3:98:89:06:b1:43:04:f0:2b:ea:
                    6c:99:3b:b7:0a:1b:90:7a:4b:a6:e4:44:a2:80:f1:
                    4e:dc:08:e4:3e:48:ef:0c:fe:07:65:27:52:e0:e9:
                    05:21:dd:a7:40:a1:90:68:7a:9d:9f:bf:9d:f4:a7:
                    9c:6b:a6:ba:8d:25:80:a2:e2:34:0c:b4:70:c6:1f:
                    20:61:b5:27:74:c7:ff:21:35:d3:90:d4:2d:1f:c1:
                    d1:2a:35:06:b8:5b:59:07:6c:df:90:8f:c2:e0:7a:
                    f1:e1:20:5a:e8:74:b7:07:57:8e:5a:ea:c2:27:14:
                    00:45:d3:b7:b9:ed:59:9b:30:9e:f8:81:48:1c:b1:
                    58:0b:ca:4d:d3:fa:11:e5:14:5f:af:44:4a:5d:ab:
                    4d:e7:ab:78:44:32:ea:b9:cb:09:34:4b:3b:5a:42:
                    8b:92:82:21:31:27:c4:03:a3:70:dc:07:6e:53:15:
                    74:ea:e1:2b:ea:95:59:f5:4f:0e:a7:8b:6e:2d:53:
                    b1:b0:3a:5b:b4:6c:07:6b:a5:15:c0:3a:0d:30:b4:
                    fc:af:15:4f:5a:9b:e9:f5:d2:2d:a0:28:61:1c:08:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.132.0/22
                  81.22.176.0/20
                  178.22.224.0/21
                IPv6:
                  2a07:ed80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59869

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:14:80:43:da:8d:c0:80:6a:6f:50:2b:ff:4e:c4:bc:8a:
         b7:5a:8e:78:3f:eb:ee:ab:d2:4a:82:42:01:c9:03:ca:4f:d3:
         93:5b:08:54:89:54:6e:80:c3:32:ff:37:91:7f:49:6e:c6:54:
         91:98:90:7c:b2:61:6c:54:09:41:04:02:d7:e4:93:46:0f:76:
         4b:b5:39:5b:6c:df:65:d0:db:c8:dd:a3:e4:bf:80:ce:fc:24:
         0d:ab:13:8f:4a:49:9e:9b:7b:97:d7:36:91:89:5f:ca:c2:0d:
         fa:b0:80:7b:df:00:96:f8:f5:eb:3e:18:d6:62:ea:23:75:89:
         52:ec:34:61:7a:55:ab:f6:93:6a:a8:c0:cb:93:78:c6:c6:9a:
         01:ac:a6:f2:1b:46:15:dd:83:1f:fe:54:c6:7d:b5:4c:8a:5c:
         7c:e0:95:2b:6e:31:89:15:ee:5b:2b:cb:3a:50:81:a4:51:b6:
         2a:70:80:78:8c:90:f3:7b:c7:83:ca:6b:6e:98:19:f1:f3:87:
         87:15:6f:28:41:8c:88:a5:c9:90:83:2e:43:97:c9:5a:96:99:
         47:d9:70:02:e6:e4:f9:b0:e1:13:00:72:57:a6:76:33:a9:89:
         43:7f:6b:31:fd:db:d3:1f:2f:ad:6a:41:cf:fe:2b:83:b8:24:
         69:1d:4d:01
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQl/ZimGPaS1+yjyD0CkjbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ2YzRkMjAwZmU1MDM1YzYxYjBjODk0Yjk0NTRlNzJkMjdjOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoc5yXKJe7yEtpNMSV6t7YXt8cOr
kW1wHXZ1flm1kFxW49OYiQaxQwTwK+psmTu3ChuQekum5ESigPFO3AjkPkjvDP4H
ZSdS4OkFId2nQKGQaHqdn7+d9Keca6a6jSWAouI0DLRwxh8gYbUndMf/ITXTkNQt
H8HRKjUGuFtZB2zfkI/C4Hrx4SBa6HS3B1eOWurCJxQARdO3ue1ZmzCe+IFIHLFY
C8pN0/oR5RRfr0RKXatN56t4RDLqucsJNEs7WkKLkoIhMSfEA6Nw3AduUxV06uEr
6pVZ9U8Op4tuLVOxsDpbtGwHa6UVwDoNMLT8rxVPWpvp9dItoChhHAj+ZQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFFNGxNIA/lA1xhsMiUuUVOctJ8kfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzU4N2E3
OS0xYjZjLTRjMmEtYjEzOS0yNGFhYjQ0ZjI1MzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNTg3YTc5
LTFiNmMtNGMyYS1iMTM5LTI0YWFiNDRmMjUzOS8xL1UwYkUwZ0QtVURYR0d3eUpT
NVJVNXkwbnlSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLVSEAwQEURawAwQDshbgMA0EAgACMAcDBQAq
B+2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDp3TANBgkqhkiG9w0BAQsFAAOC
AQEAU/wUgEPajcCAam9QK/9OxLyKt1qOeD/r7qvSSoJCAckDyk/Tk1sIVIlUboDD
Mv83kX9JbsZUkZiQfLJhbFQJQQQC1+STRg92S7U5W2zfZdDbyN2j5L+AzvwkDasT
j0pJnpt7l9c2kYlfysIN+rCAe98Alvj16z4Y1mLqI3WJUuw0YXpVq/aTaqjAy5N4
xsaaAaym8htGFd2DH/5Uxn21TIpcfOCVK24xiRXuWyvLOlCBpFG2KnCAeIyQ83vH
g8prbpgZ8fOHhxVvKEGMiKXJkIMuQ5fJWpaZR9lwAubk+bDhEwByV6Z2M6mJQ39r
Mf3b0x8vrWpBz/4rg7gkaR1NAQ==
-----END CERTIFICATE-----