Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
File:                     XaewUFU8jungWrTDf9l9KCEha0E.cer (raw, json)
Hash identifier:          24ExvPPpm8oWicBafvAW4oSxZLMP52RlS1b+K2UjTFQ=
Subject key identifier:   5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D636D3830D3B5C5F546E5C572525E7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62139
                          IP: 185.46.80.0/22
                          IP: 2a01:84e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:36:d3:83:0d:3b:5c:5f:54:6e:5c:57:25:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:f6:c1:d7:8a:66:4a:67:14:45:13:3f:73:
                    b8:1b:4d:53:cd:c3:55:18:77:83:de:0a:44:90:2a:
                    df:60:4a:be:19:fa:7c:06:a3:fa:f3:cb:38:77:60:
                    3b:f6:a7:71:47:e2:6a:e9:3f:f3:24:93:a2:eb:18:
                    83:93:a6:b4:fe:bd:9f:a4:04:ff:5d:68:57:77:b6:
                    9c:f5:49:d8:7a:92:f5:cd:c2:a0:1f:bf:9b:27:5a:
                    ad:c0:fe:22:ca:a3:d1:90:13:7c:02:4f:50:a9:ec:
                    58:4d:95:0b:71:cd:72:0b:24:de:62:cd:32:60:11:
                    56:6c:f1:c3:e0:9e:30:da:ad:cc:67:52:ec:b0:c6:
                    5e:dc:8c:5f:5b:80:70:ab:c6:72:de:4f:6a:df:ae:
                    68:c5:d4:4d:41:69:55:e4:b8:f9:0a:74:ff:38:51:
                    98:ca:2d:76:72:a8:1d:3c:93:3c:7a:ab:1d:06:bf:
                    5e:52:79:a4:2d:36:3c:61:9a:c0:a4:58:7b:8e:62:
                    73:1e:c0:37:d2:39:59:70:36:aa:e3:a3:76:8e:c0:
                    5e:b4:60:9b:67:3e:bb:04:40:1e:2c:9e:36:3d:1f:
                    a3:3c:4f:20:41:23:35:75:c7:3b:cd:c4:32:29:b6:
                    f8:1c:99:8e:08:9a:97:a5:32:83:9e:9a:b6:7e:70:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.80.0/22
                IPv6:
                  2a01:84e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62139

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:69:ac:fb:df:b9:8d:fd:0e:b3:25:1b:66:e2:c2:a9:13:
         a9:d1:1f:fd:49:42:8b:e5:9c:bf:b2:eb:aa:d2:6d:72:23:4e:
         54:31:ff:43:76:78:c6:33:72:bd:0d:a0:ea:6f:d5:66:2f:11:
         bc:3d:8e:3b:b8:6e:4b:bc:ba:c5:9b:0c:79:d9:96:c9:4e:24:
         a9:d1:cf:69:9d:58:e0:99:fa:ae:af:48:32:ab:b1:1d:ce:ac:
         fb:fe:b7:85:34:a9:44:f9:7f:c1:74:61:78:2e:a2:9f:ab:53:
         63:26:be:ba:18:d8:db:49:87:07:04:48:d7:97:24:63:68:71:
         f8:89:01:bd:23:b0:55:6d:12:fb:f2:30:a4:b1:2c:0e:aa:14:
         2f:20:b0:99:3b:58:ff:01:56:93:76:c5:65:79:79:b8:48:d4:
         45:88:d7:0e:47:00:74:35:8a:52:ec:ae:91:3c:2b:62:3b:07:
         0e:ad:0c:62:ad:4a:15:9c:9b:32:e1:c2:61:70:ee:e0:65:95:
         9b:5b:fe:e6:55:b7:1a:ee:1f:b9:01:67:e8:8b:db:7b:ed:7c:
         d3:18:3c:c2:22:75:99:b8:4b:a7:c2:a1:39:dd:ff:7e:8e:f9:
         53:81:b9:36:d8:f9:a0:05:43:ee:5f:9f:cd:57:d1:2d:07:db:
         52:77:95:82
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1jbTgw07XF9UblxXJSXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGE3YjA1MDU1M2M4ZWU5ZTA1YWI0YzM3ZmQ5N2QyODIxMjE2YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr72wdeKZkpnFEUTP3O4G01TzcNV
GHeD3gpEkCrfYEq+Gfp8BqP688s4d2A79qdxR+Jq6T/zJJOi6xiDk6a0/r2fpAT/
XWhXd7ac9UnYepL1zcKgH7+bJ1qtwP4iyqPRkBN8Ak9QqexYTZULcc1yCyTeYs0y
YBFWbPHD4J4w2q3MZ1LssMZe3IxfW4Bwq8Zy3k9q365oxdRNQWlV5Lj5CnT/OFGY
yi12cqgdPJM8eqsdBr9eUnmkLTY8YZrApFh7jmJzHsA30jlZcDaq46N2jsBetGCb
Zz67BEAeLJ42PR+jPE8gQSM1dcc7zcQyKbb4HJmOCJqXpTKDnpq2fnDOkQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2RjOWRk
Yi1iMThjLTQwOWQtOTcwNy1mMmM2YWM5NjhjODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZGM5ZGRi
LWIxOGMtNDA5ZC05NzA3LWYyYzZhYzk2OGM4MC8xL1hhZXdVRlU4anVuZ1dyVERm
OWw5S0NFaGEwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuS5QMA0EAgACMAcDBQAqAYTgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDyuzANBgkqhkiG9w0BAQsFAAOCAQEAizBprPvfuY39
DrMlG2biwqkTqdEf/UlCi+Wcv7LrqtJtciNOVDH/Q3Z4xjNyvQ2g6m/VZi8RvD2O
O7huS7y6xZsMedmWyU4kqdHPaZ1Y4Jn6rq9IMquxHc6s+/63hTSpRPl/wXRheC6i
n6tTYya+uhjY20mHBwRI15ckY2hx+IkBvSOwVW0S+/IwpLEsDqoULyCwmTtY/wFW
k3bFZXl5uEjURYjXDkcAdDWKUuyukTwrYjsHDq0MYq1KFZybMuHCYXDu4GWVm1v+
5lW3Gu4fuQFn6Ivbe+180xg8wiJ1mbhLp8KhOd3/fo75U4G5Ntj5oAVD7l+fzVfR
LQfbUneVgg==
-----END CERTIFICATE-----