Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.cer (raw, json)
Hash identifier:          jDAb0XQYKmvJzpL79PrgQxGDnOFUyx/7v29b8mXRzoY=
Subject key identifier:   53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA6DC30CFF3A2E9368243BC24B4F1C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209240
                          IP: 92.119.236.0/22
                          IP: 2a09:bc40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:6d:c3:0c:ff:3a:2e:93:68:24:3b:c2:4b:4f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:d8:35:bd:9d:b2:ea:20:77:32:3f:2f:17:
                    8a:2c:16:50:21:9a:cb:e6:1e:7c:ed:24:f5:7f:00:
                    b5:ae:db:7b:06:17:83:8d:b9:c0:a5:58:c0:17:02:
                    1e:89:64:d2:4f:71:f5:d4:bb:27:70:da:53:88:77:
                    4a:1d:f5:af:48:f1:74:41:9a:13:88:c6:71:3f:5c:
                    88:8d:89:25:7a:66:ac:a4:b3:2d:a1:41:97:19:17:
                    8d:d4:6c:8b:10:7b:2c:a7:8e:e6:a6:0b:cf:ed:95:
                    4b:e5:83:66:d9:33:8c:95:54:c9:d3:f2:81:a0:8c:
                    f2:e7:7a:9d:a8:5b:fa:90:e1:a3:f1:a8:59:e5:6b:
                    e9:9d:c8:77:1d:06:d4:41:59:9c:44:72:2f:85:34:
                    85:13:06:af:61:76:b2:31:1e:27:02:a2:91:52:7e:
                    23:e8:6d:55:ed:56:51:d3:34:1d:b0:62:ac:2f:48:
                    d9:f6:be:8f:6d:46:06:e1:b4:4e:6c:a6:4d:32:21:
                    90:30:30:e1:5b:f4:6d:bf:8c:dc:0c:b7:7c:a1:f7:
                    a5:b7:77:22:0e:b9:9c:ea:c2:3b:8e:ce:d1:f4:16:
                    ab:e5:82:e0:ff:58:9d:f3:71:5b:e1:d4:5e:05:e6:
                    9e:f9:a3:e6:a3:51:f6:12:6c:57:a5:79:b8:03:1e:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.236.0/22
                IPv6:
                  2a09:bc40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209240

    Signature Algorithm: sha256WithRSAEncryption
         92:67:25:79:f0:04:22:07:2c:6d:66:73:6f:ac:9a:74:89:d8:
         1c:0a:4d:2e:c6:2f:7e:2a:21:0c:3e:99:34:ee:09:49:d1:ba:
         0b:76:6d:be:bf:c5:68:d0:90:0c:f5:b1:7e:2a:43:e6:9b:b7:
         07:33:79:f3:4b:4a:98:bd:a9:e1:bb:4d:19:44:54:56:2c:75:
         2b:2b:9b:3b:a4:34:15:33:ea:07:dc:30:8e:6d:ef:0c:31:27:
         22:da:e2:4f:37:8a:59:ab:95:bc:52:8a:3b:42:8c:6c:fd:3e:
         88:7c:43:df:87:10:0e:59:c7:12:50:c8:2b:94:7a:de:84:e8:
         f5:2f:1d:35:d2:3f:55:2c:b2:13:44:4a:38:89:1f:8f:71:f9:
         59:23:91:38:88:d4:7f:06:16:1b:af:aa:ec:12:42:9e:70:90:
         1c:42:64:d0:b7:f0:9e:07:cd:c2:fa:54:70:1f:f9:8a:0a:6d:
         69:80:b6:e9:32:e7:32:80:00:8e:d2:ea:b0:04:5a:14:a3:2d:
         d3:5e:20:95:39:c7:2a:68:31:24:c0:ca:42:77:d4:c3:47:13:
         ca:33:01:58:ed:8b:cf:3b:26:e2:19:ce:47:7f:89:0b:05:c2:
         6c:2c:97:e0:a8:67:e7:5b:ff:27:00:d2:ab:cf:85:3d:46:6f:
         44:a9:41:9b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQf+m3DDP86LpNoJDvCS08cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2M3NzMxMmUwZDJjZWM4NDVhMDQ2MTM4NDVmOGExYmUyNjNjMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGzYNb2dsuogdzI/LxeKLBZQIZrL
5h587ST1fwC1rtt7BheDjbnApVjAFwIeiWTST3H11LsncNpTiHdKHfWvSPF0QZoT
iMZxP1yIjYklemaspLMtoUGXGReN1GyLEHssp47mpgvP7ZVL5YNm2TOMlVTJ0/KB
oIzy53qdqFv6kOGj8ahZ5Wvpnch3HQbUQVmcRHIvhTSFEwavYXayMR4nAqKRUn4j
6G1V7VZR0zQdsGKsL0jZ9r6PbUYG4bRObKZNMiGQMDDhW/Rtv4zcDLd8ofelt3ci
Drmc6sI7js7R9Bar5YLg/1id83Fb4dReBeae+aPmo1H2EmxXpXm4Ax6gnQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFPHcxLg0s7IRaBGE4RfihviY8OZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlL2RkOTgx
ZC1lMWY1LTQ4MzctOTAyNy1jOWJmNTVkOWQxYmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvZGQ5ODFk
LWUxZjUtNDgzNy05MDI3LWM5YmY1NWQ5ZDFiYS8xL1U4ZHpFdURTenNoRm9FWVRo
Ri1LRy1Kanc1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCXHfsMA0EAgACMAcDBQMqCbxAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMxWDANBgkqhkiG9w0BAQsFAAOCAQEAkmclefAEIgcs
bWZzb6yadInYHApNLsYvfiohDD6ZNO4JSdG6C3Ztvr/FaNCQDPWxfipD5pu3BzN5
80tKmL2p4btNGURUVix1KyubO6Q0FTPqB9wwjm3vDDEnItriTzeKWauVvFKKO0KM
bP0+iHxD34cQDlnHElDIK5R63oTo9S8dNdI/VSyyE0RKOIkfj3H5WSOROIjUfwYW
G6+q7BJCnnCQHEJk0LfwngfNwvpUcB/5igptaYC26TLnMoAAjtLqsARaFKMt014g
lTnHKmgxJMDKQnfUw0cTyjMBWO2Lzzsm4hnOR3+JCwXCbCyX4Khn51v/JwDSq8+F
PUZvRKlBmw==
-----END CERTIFICATE-----