Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
File:                     V1TRlSf9hdDURKyt1EoBZV_cdAA.cer (raw, json)
Hash identifier:          Lh4/8Jhhe0T7rN0YBRW0jlT4Z5WlKIoO9mSkq5Lae20=
Subject key identifier:   57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D80EF87BF09826CCD25588D5217AFEE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Mar 2025 14:43:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199196
                          AS: 211267
                          IP: 62.69.136.0/21
                          IP: 62.109.192.0/18
                          IP: 185.29.44.0/22
                          IP: 2a00:a640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d8:0e:f8:7b:f0:98:26:cc:d2:55:88:d5:21:7a:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 14:43:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5754d19527fd85d0d444acadd44a01655fdc7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:0b:fa:e6:64:06:b6:2e:79:be:ae:f2:b1:
                    f0:c3:b9:29:e3:72:9b:6d:cd:62:ad:42:f6:b6:19:
                    89:c7:e1:ef:24:4a:81:28:d7:6e:ce:ae:78:83:e9:
                    d4:ba:9d:c7:7c:0b:50:ca:7c:46:38:1d:93:f2:9b:
                    93:5d:05:03:8b:22:d4:78:8b:c7:c1:8c:d8:40:24:
                    33:f9:45:a7:82:8f:21:c8:b0:a4:e8:0a:0a:c3:82:
                    b4:3d:b0:52:a1:9a:37:fd:a4:bd:a8:37:1f:1e:a9:
                    43:11:7e:85:39:ec:3d:6b:03:6c:3a:60:ef:75:24:
                    cb:cb:2f:95:19:b2:22:c7:07:56:d1:4f:3c:06:dc:
                    36:2b:91:8d:1a:f9:1a:3f:c9:b4:43:9a:45:80:a8:
                    2c:18:dd:c8:74:82:9b:53:86:42:82:f7:fa:ed:61:
                    a3:84:97:b1:04:cc:fc:52:f0:d7:47:47:30:a1:1a:
                    f3:7f:fd:e8:75:37:80:37:68:09:2a:a2:70:6e:b5:
                    18:c2:84:0b:77:3f:4b:49:51:be:28:f9:64:5a:d0:
                    a4:20:d2:6f:4b:2e:19:a3:0f:75:d3:eb:0a:aa:b6:
                    ed:5c:79:77:3b:ae:ad:68:22:f4:70:0c:69:d3:b2:
                    be:41:e0:bf:89:d6:03:37:4b:01:ea:50:52:6f:1d:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.69.136.0/21
                  62.109.192.0/18
                  185.29.44.0/22
                IPv6:
                  2a00:a640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199196
                  211267

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:5b:0b:02:45:1c:5e:f2:11:dc:0f:d0:74:de:7a:a4:51:
         a7:dc:e3:81:fd:66:ef:58:0d:7b:f7:f0:4c:0b:bc:42:af:f7:
         8f:ab:b5:44:1d:6d:1c:5e:37:da:0e:fd:15:bd:61:74:87:4a:
         46:7c:6e:f4:df:21:64:e6:bc:b2:bd:0d:59:69:72:ae:d3:e6:
         16:4a:b1:39:77:81:ee:ee:63:25:36:e4:5b:29:ab:95:95:4b:
         4f:d2:ce:41:90:f4:e3:89:4e:40:6e:63:24:e3:4a:64:d1:29:
         bf:7d:e3:c6:e1:51:ac:e8:39:ab:c3:87:04:ae:1f:f5:95:a2:
         a6:de:f2:63:57:94:b6:9c:a5:3c:9b:9f:02:b9:6f:cd:83:91:
         36:44:5b:b9:dc:c8:b0:08:0d:bd:61:7a:fc:a5:23:a1:19:21:
         9a:a6:c4:7b:ef:e0:65:82:79:f9:df:66:8d:d2:87:b4:26:7a:
         b4:dd:4a:73:db:3b:25:8a:f2:d8:70:f7:cc:26:9c:f3:ad:d5:
         1c:f1:a6:2a:56:87:8d:16:d9:9f:c2:3c:0c:d9:b2:32:ee:35:
         d5:d4:bf:77:71:44:05:4d:96:fb:73:72:48:8e:b0:45:66:32:
         85:20:03:5a:16:7d:88:7a:cb:01:d3:1d:1d:0b:49:24:cd:aa:
         e1:f7:b3:90
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZXYDvh78JgmzNJViNUhev7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI3MTQ0MzM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU0ZDE5NTI3ZmQ4NWQwZDQ0NGFjYWRkNDRhMDE2NTVmZGM3NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KwL+uZkBrYueb6u8rHww7kp43Kb
bc1irUL2thmJx+HvJEqBKNduzq54g+nUup3HfAtQynxGOB2T8puTXQUDiyLUeIvH
wYzYQCQz+UWngo8hyLCk6AoKw4K0PbBSoZo3/aS9qDcfHqlDEX6FOew9awNsOmDv
dSTLyy+VGbIixwdW0U88Btw2K5GNGvkaP8m0Q5pFgKgsGN3IdIKbU4ZCgvf67WGj
hJexBMz8UvDXR0cwoRrzf/3odTeAN2gJKqJwbrUYwoQLdz9LSVG+KPlkWtCkINJv
Sy4Zow910+sKqrbtXHl3O66taCL0cAxp07K+QeC/idYDN0sB6lBSbx0Z9QIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzdjOWZj
Yy04ZmNlLTQ0YjctYjZiZi0xMTc3NjAzMTQxNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvN2M5ZmNj
LThmY2UtNDRiNy1iNmJmLTExNzc2MDMxNDE1Zi8xL1YxVFJsU2Y5aGREVVJLeXQx
RW9CWlZfY2RBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDPkWIAwQGPm3AAwQCuR0sMA0EAgACMAcDBQAq
AKZAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMKHAIDAzlDMA0GCSqGSIb3DQEB
CwUAA4IBAQCuGlsLAkUcXvIR3A/QdN56pFGn3OOB/WbvWA179/BMC7xCr/ePq7VE
HW0cXjfaDv0VvWF0h0pGfG703yFk5ryyvQ1ZaXKu0+YWSrE5d4Hu7mMlNuRbKauV
lUtP0s5BkPTjiU5AbmMk40pk0Sm/fePG4VGs6Dmrw4cErh/1laKm3vJjV5S2nKU8
m58CuW/Ng5E2RFu53MiwCA29YXr8pSOhGSGapsR77+Blgnn532aN0oe0Jnq03Upz
2zslivLYcPfMJpzzrdUc8aYqVoeNFtmfwjwM2bIy7jXV1L93cUQFTZb7c3JIjrBF
ZjKFIANaFn2IessB0x0dC0kkzarh97OQ
-----END CERTIFICATE-----