Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
File:                     XeFelYoRQmpVYoXiiuNA8KJdKgM.cer (raw, json)
Hash identifier:          hrFOni4UhNm4Fu64PjDMW2Lm1rAwfx/XopEc9Ig3rCw=
Subject key identifier:   5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D090C991EDE3E1C6CE400DA590286C60
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 10:45:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 31.22.8.0/24
                          IP: 2a14:9300::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d0:90:c9:91:ed:e3:e1:c6:ce:40:0d:a5:90:28:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  4 10:45:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5de15e958a11426a556285e28ae340f0a25d2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:63:64:70:24:69:25:dc:fb:3b:66:0c:db:
                    e3:e2:12:f7:5d:69:68:46:2a:56:cd:48:cc:5d:5f:
                    f0:d3:c1:20:95:1e:6e:2a:79:72:f2:7b:02:69:6b:
                    ce:be:ea:09:c5:1b:60:29:b1:00:7a:1f:c9:e4:1e:
                    d0:71:1e:94:4f:29:57:d5:60:31:41:18:52:0c:84:
                    4d:b0:38:ff:c2:d8:02:0b:d0:e6:f6:33:02:2e:5e:
                    5d:2e:74:bc:39:a0:c7:fe:46:07:ca:42:da:25:64:
                    d0:3e:b4:91:00:a1:b9:a3:59:f9:41:ca:24:b2:4f:
                    4e:b6:ff:0f:75:b3:8c:e1:cb:0c:08:b9:32:ac:54:
                    a7:8c:66:01:11:73:db:11:3e:bb:e5:4b:95:cb:48:
                    f8:d0:f9:38:f0:d6:22:67:5a:8c:3e:1b:ac:4f:60:
                    47:bb:37:07:03:f8:5d:95:2d:81:29:b0:80:72:d4:
                    4f:ae:56:9e:4a:91:bc:f4:ad:14:04:62:ba:0f:04:
                    d5:4b:10:f9:12:fa:27:cf:35:73:2f:66:2e:01:ea:
                    08:f4:9a:72:c1:7e:e3:17:25:41:ed:63:ab:52:57:
                    8b:5b:72:93:c0:76:d4:16:f1:1f:7c:13:86:bf:b7:
                    1d:e3:52:96:05:2c:22:03:af:c1:a9:28:b2:9d:08:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.22.8.0/24
                IPv6:
                  2a14:9300::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:0c:f4:b6:50:85:60:bd:e6:91:6b:42:42:42:8d:c7:36:91:
         7c:63:64:d9:ca:19:c7:56:61:9d:13:f5:3f:1f:14:44:c0:67:
         e2:a1:8e:b7:c4:26:d7:4a:76:a7:87:c9:75:ab:88:d2:67:ca:
         a0:71:93:4c:fd:74:23:a9:fa:84:39:8e:05:7a:2f:7e:89:63:
         28:9c:13:66:3d:1f:54:1a:34:a4:a8:3a:6d:85:39:f6:eb:1a:
         32:c6:cd:2a:a1:71:9b:cc:14:83:ab:e6:f4:fb:03:f7:6a:c5:
         8e:1a:08:12:31:e5:97:32:3c:6f:95:21:fc:ca:d5:69:72:c9:
         da:15:77:6f:26:00:3c:3a:69:cf:f5:47:38:3b:8c:1e:db:3a:
         25:3e:d2:e7:c6:30:3b:97:cb:e7:6a:fa:07:d1:c8:f7:6f:bf:
         2c:d8:5d:4f:cb:4f:f8:26:c7:14:50:85:91:b7:ae:b3:91:c4:
         2d:a9:1d:e4:78:21:01:a2:a4:bc:b3:6f:a1:fe:3f:32:ed:23:
         d8:da:fb:3d:0c:bf:71:bb:1e:7e:80:dc:77:d0:41:64:41:6d:
         8c:8e:7b:f5:cb:c3:69:0f:17:e0:45:de:81:bf:c9:38:2d:3d:
         f3:d6:78:7f:9d:12:ca:0e:4b:b1:88:72:c5:67:a2:5b:4e:b8:
         29:60:a6:37
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZTQkMmR7ePhxs5ADaWQKGxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA0MTA0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGUxNWU5NThhMTE0MjZhNTU2Mjg1ZTI4YWUzNDBmMGEyNWQyYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdZjZHAkaSXc+ztmDNvj4hL3XWlo
RipWzUjMXV/w08EglR5uKnly8nsCaWvOvuoJxRtgKbEAeh/J5B7QcR6UTylX1WAx
QRhSDIRNsDj/wtgCC9Dm9jMCLl5dLnS8OaDH/kYHykLaJWTQPrSRAKG5o1n5Qcok
sk9Otv8PdbOM4csMCLkyrFSnjGYBEXPbET675UuVy0j40Pk48NYiZ1qMPhusT2BH
uzcHA/hdlS2BKbCActRPrlaeSpG89K0UBGK6DwTVSxD5EvonzzVzL2YuAeoI9Jpy
wX7jFyVB7WOrUleLW3KTwHbUFvEffBOGv7cd41KWBSwiA6/BqSiynQiZJwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFF3hXpWKEUJqVWKF4orjQPCiXSoDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzllNDk1
OC05ZjI4LTQ4YjQtODUxYS04MmVlYmRjNDU4ZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvOWU0OTU4
LTlmMjgtNDhiNC04NTFhLTgyZWViZGM0NThmZS8xL1hlRmVsWW9SUW1wVllvWGlp
dU5BOEtKZEtnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAHxYIMA0EAgACMAcDBQMqFJMAMA0GCSqGSIb3
DQEBCwUAA4IBAQClDPS2UIVgveaRa0JCQo3HNpF8Y2TZyhnHVmGdE/U/HxREwGfi
oY63xCbXSnanh8l1q4jSZ8qgcZNM/XQjqfqEOY4Fei9+iWMonBNmPR9UGjSkqDpt
hTn26xoyxs0qoXGbzBSDq+b0+wP3asWOGggSMeWXMjxvlSH8ytVpcsnaFXdvJgA8
OmnP9Uc4O4we2zolPtLnxjA7l8vnavoH0cj3b78s2F1Py0/4JscUUIWRt66zkcQt
qR3keCEBoqS8s2+h/j8y7SPY2vs9DL9xux5+gNx30EFkQW2Mjnv1y8NpDxfgRd6B
v8k4LT3z1nh/nRLKDkuxiHLFZ6JbTrgpYKY3
-----END CERTIFICATE-----