Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
File:                     XCnLotrPDvn6IgkAMrsVmhCRQPA.cer (raw, json)
Hash identifier:          6AHzq4pmc3ylshCxl1lqA/JIMF9QNhGyYIXgVQZN4ms=
Subject key identifier:   5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420686C0F0D7DC3BE134E842F163113C0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57292
                          IP: 185.130.76.0/22
                          IP: 2a06:d940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:6c:0f:0d:7d:c3:be:13:4e:84:2f:16:31:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:93:e3:24:a2:ba:ce:88:ab:93:3b:e4:76:4f:
                    56:1e:d7:21:94:f8:63:72:38:2e:28:85:3c:55:02:
                    91:5c:b1:a5:d4:55:54:96:d4:c7:61:c2:f6:b5:c6:
                    e5:14:de:f1:0f:a7:f8:d3:c7:bc:2c:4a:a6:87:15:
                    74:00:1c:c5:09:31:42:90:b8:44:65:f1:a6:88:d6:
                    0e:42:b8:f6:b8:5e:8b:15:12:2e:c8:2d:22:7e:42:
                    a3:6c:06:19:a0:3a:e9:48:eb:b9:cb:83:43:91:dc:
                    0f:07:31:05:7e:96:fb:11:19:11:96:93:fc:66:48:
                    f8:85:e0:b8:27:a7:00:b1:ba:d5:d6:26:75:2b:1e:
                    a4:85:fe:89:05:cd:74:0f:f0:1e:9e:60:ca:e4:4f:
                    7d:28:89:67:00:af:c2:32:c2:84:83:08:7e:15:f0:
                    b9:7f:7e:7c:e5:46:0f:3d:12:c6:b5:90:44:57:61:
                    45:11:48:19:d2:0c:aa:72:2a:7c:a0:49:28:11:57:
                    4d:9d:1a:e4:8b:1c:b4:1e:d6:d3:d7:36:ac:81:e7:
                    a1:38:e8:8d:23:c3:a1:de:24:44:45:4c:a6:93:fd:
                    c9:74:4c:25:e8:2c:c5:03:3c:01:54:79:4f:f8:d0:
                    19:dd:41:0b:09:d7:be:95:41:81:ea:2e:66:ad:86:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.76.0/22
                IPv6:
                  2a06:d940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57292

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:7e:94:33:b8:0d:1c:04:a3:d4:dc:bf:95:11:6b:fe:d8:
         d2:8c:a1:61:7c:1d:04:95:7e:71:aa:f4:19:78:3d:e3:04:73:
         0a:62:35:f1:9c:0a:e6:98:89:36:3b:84:a7:46:e6:5c:c5:df:
         30:81:8a:70:06:a9:18:cb:03:ad:0f:ac:4a:dc:cf:fb:2c:bd:
         d4:6a:2b:ac:bf:4a:de:cf:92:ff:fd:03:ba:e7:b6:04:9d:8b:
         c1:07:05:b1:46:95:60:18:c4:d3:3e:02:07:85:ff:d1:35:1e:
         00:68:e3:a9:cf:f8:50:bf:46:60:6a:fc:e6:0a:6a:53:63:68:
         1a:4a:b7:a2:e3:60:7b:6b:f9:a4:5f:d6:87:9a:d4:28:c5:89:
         65:ec:01:ea:70:23:5d:cb:84:60:26:c6:98:8b:0f:9c:c5:ba:
         14:bd:c7:19:6d:50:fa:b0:88:d9:15:54:27:3d:7e:18:0a:b3:
         67:0b:22:05:f0:7e:27:aa:2a:0c:30:ff:58:ab:7b:7d:a0:8e:
         41:6a:1c:11:4b:12:1d:d6:cc:a4:e1:8b:98:ac:5a:10:84:92:
         69:e8:92:8d:3c:b6:99:93:6e:8b:3a:b2:0d:e3:d0:43:94:4c:
         d5:8c:dc:41:70:ce:c0:0e:f1:fd:b5:53:d5:45:f6:49:3d:85:
         30:2e:fc:f1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaGwPDX3DvhNOhC8WMRPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzI5Y2JhMmRhY2YwZWY5ZmEyMjA5MDAzMmJiMTU5YTEwOTE0MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pPjJKK6zoirkzvkdk9WHtchlPhj
cjguKIU8VQKRXLGl1FVUltTHYcL2tcblFN7xD6f408e8LEqmhxV0ABzFCTFCkLhE
ZfGmiNYOQrj2uF6LFRIuyC0ifkKjbAYZoDrpSOu5y4NDkdwPBzEFfpb7ERkRlpP8
Zkj4heC4J6cAsbrV1iZ1Kx6khf6JBc10D/AenmDK5E99KIlnAK/CMsKEgwh+FfC5
f3585UYPPRLGtZBEV2FFEUgZ0gyqcip8oEkoEVdNnRrkixy0HtbT1zasgeehOOiN
I8Oh3iRERUymk/3JdEwl6CzFAzwBVHlP+NAZ3UELCde+lUGB6i5mrYZGNwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFwpy6Lazw75+iIJADK7FZoQkUDwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzcyOWZk
YS1kODUyLTRhY2EtOWFmZi02ZDFmYTQyZDBiODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNzI5ZmRh
LWQ4NTItNGFjYS05YWZmLTZkMWZhNDJkMGI4MC8xL1hDbkxvdHJQRHZuNklna0FN
cnNWbWhDUlFQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYJMMA0EAgACMAcDBQMqBtlAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDfzDANBgkqhkiG9w0BAQsFAAOCAQEAT6R+lDO4DRwE
o9Tcv5URa/7Y0oyhYXwdBJV+car0GXg94wRzCmI18ZwK5piJNjuEp0bmXMXfMIGK
cAapGMsDrQ+sStzP+yy91GorrL9K3s+S//0Duue2BJ2LwQcFsUaVYBjE0z4CB4X/
0TUeAGjjqc/4UL9GYGr85gpqU2NoGkq3ouNge2v5pF/Wh5rUKMWJZewB6nAjXcuE
YCbGmIsPnMW6FL3HGW1Q+rCI2RVUJz1+GAqzZwsiBfB+J6oqDDD/WKt7faCOQWoc
EUsSHdbMpOGLmKxaEISSaeiSjTy2mZNuizqyDePQQ5RM1YzcQXDOwA7x/bVT1UX2
ST2FMC788Q==
-----END CERTIFICATE-----