Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer (raw, json)
Hash identifier:          PFJRYoIRhFz7OpMDyL6R4qzalM/663R0xY7ASktR4qQ=
Subject key identifier:   63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E5CA122B43AA2D7EF3EDA1C678B74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.236.45.0/24
                          IP: 2a10:9340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:5c:a1:22:b4:3a:a2:d7:ef:3e:da:1c:67:8b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:a0:17:42:ad:b7:27:b5:c7:c0:34:f1:26:
                    89:b4:f2:90:d4:61:d3:de:ae:4d:98:05:24:f2:d4:
                    ac:cf:56:91:20:c1:41:66:f8:e5:69:99:13:92:f4:
                    fe:59:6c:a8:55:56:3b:05:c3:96:c0:78:f7:42:50:
                    4a:ee:1a:9b:de:4c:89:f0:54:6b:12:60:b5:d3:2d:
                    2a:ea:ce:94:9b:7a:99:52:6b:8a:26:4d:2c:fb:e4:
                    a4:87:2a:93:f1:ec:77:2c:df:98:fe:36:ed:80:94:
                    ae:1a:d1:25:b9:02:d7:0a:86:ba:f1:f2:fd:3a:69:
                    4b:1e:8c:29:36:ab:2b:33:91:fa:a7:8c:44:6d:89:
                    3b:ac:9a:43:0d:d8:c7:35:9e:e8:e2:08:33:7a:56:
                    bc:86:61:08:d9:61:7f:bf:9b:f2:54:06:58:1d:7f:
                    c3:4a:30:08:08:bc:dc:26:f8:ae:67:8b:9e:59:bf:
                    b9:46:7b:df:b6:be:7a:5b:73:7d:d0:2a:5d:c6:e2:
                    4a:15:93:48:cc:cd:49:99:9a:7e:e4:09:6b:d3:92:
                    f2:2f:50:61:35:36:59:a0:69:e2:4e:45:ed:df:1c:
                    89:c2:0c:85:e6:27:d9:21:5d:19:a8:f3:9f:4f:d6:
                    f2:93:44:90:51:5d:72:dc:bf:b2:9b:95:83:97:4c:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.45.0/24
                IPv6:
                  2a10:9340::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:ae:e1:7e:2c:04:d3:3d:11:8d:6c:8a:94:26:e8:45:d0:
         35:85:d3:27:f6:2e:ea:7c:1a:08:b2:9c:4e:a7:54:47:fd:d0:
         f5:25:78:94:a5:63:4e:2d:05:4c:a0:e3:ef:b6:99:ed:9f:90:
         ce:99:85:3b:5f:d5:59:27:61:c3:b0:5e:9a:e8:bb:87:50:3c:
         eb:ba:31:5b:a1:4b:ba:05:2a:06:55:59:ec:5c:7f:97:36:01:
         09:d8:f0:d7:f7:78:b6:df:84:9f:e5:3d:33:2f:27:82:6c:ff:
         2c:04:40:b0:6c:80:8b:60:b1:c1:ae:7c:ff:a8:f3:4c:5e:42:
         f1:cb:12:f1:6d:89:63:bc:49:b9:e7:a7:0a:87:7a:97:04:c8:
         58:ef:0d:f5:88:d9:05:52:63:28:5b:78:fc:b2:dc:2b:4f:ff:
         0a:fd:3d:d4:43:66:c6:5c:03:c0:d0:26:fd:0f:ee:ee:74:c4:
         17:b6:5a:f8:ed:4e:57:c7:17:f1:04:56:fe:06:c5:ad:a4:ad:
         48:cd:1a:6d:04:e4:f6:e9:9f:cc:c1:5c:fc:2c:c3:ee:e6:75:
         75:5d:96:7b:4d:73:b1:b1:13:1f:09:45:54:cf:8b:f5:56:71:
         f7:ed:35:d1:73:4a:d8:a5:1f:f1:83:77:06:80:b5:d8:0f:62:
         ac:c9:5a:ee
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQljlyhIrQ6otfvPtocZ4t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mzg1ZWJlZTQzNjNmNWFkOTMzNjZjYjI4ZjQyZmQ1YjcyNzgzZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sugF0Kttye1x8A08SaJtPKQ1GHT
3q5NmAUk8tSsz1aRIMFBZvjlaZkTkvT+WWyoVVY7BcOWwHj3QlBK7hqb3kyJ8FRr
EmC10y0q6s6Um3qZUmuKJk0s++SkhyqT8ex3LN+Y/jbtgJSuGtEluQLXCoa68fL9
OmlLHowpNqsrM5H6p4xEbYk7rJpDDdjHNZ7o4ggzela8hmEI2WF/v5vyVAZYHX/D
SjAICLzcJviuZ4ueWb+5Rnvftr56W3N90CpdxuJKFZNIzM1JmZp+5Alr05LyL1Bh
NTZZoGniTkXt3xyJwgyF5ifZIV0ZqPOfT9byk0SQUV1y3L+ym5WDl0yPiwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGOF6+5DY/WtkzZsso9C/VtyeD5vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2E2MmNk
Ny0zM2YyLTQ2YTItOGIzZS03ZDc0YmU2YWU1NTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYTYyY2Q3
LTMzZjItNDZhMi04YjNlLTdkNzRiZTZhZTU1OC8xL1k0WHI3a05qOWEyVE5teXlq
MEw5VzNKNFBtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuewtMA0EAgACMAcDBQMqEJNAMA0GCSqGSIb3
DQEBCwUAA4IBAQBJpK7hfiwE0z0RjWyKlCboRdA1hdMn9i7qfBoIspxOp1RH/dD1
JXiUpWNOLQVMoOPvtpntn5DOmYU7X9VZJ2HDsF6a6LuHUDzrujFboUu6BSoGVVns
XH+XNgEJ2PDX93i234Sf5T0zLyeCbP8sBECwbICLYLHBrnz/qPNMXkLxyxLxbYlj
vEm556cKh3qXBMhY7w31iNkFUmMoW3j8stwrT/8K/T3UQ2bGXAPA0Cb9D+7udMQX
tlr47U5XxxfxBFb+BsWtpK1IzRptBOT26Z/MwVz8LMPu5nV1XZZ7TXOxsRMfCUVU
z4v1VnH37TXRc0rYpR/xg3cGgLXYD2KsyVru
-----END CERTIFICATE-----