Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
File:                     _U0cuqkAydq9Kh92gZih5VvPtQ8.cer (raw, json)
Hash identifier:          VsmDroaA1KGL2hVr/CsXlUsn1uMgcVdQtyCH8d3syJA=
Subject key identifier:   FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D97D0C56D51C68F980880316E447FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48084
                          IP: 185.214.244.0/22
                          IP: 2a11:cb80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:7d:0c:56:d5:1c:68:f9:80:88:03:16:e4:47:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:17:21:f2:5d:25:73:92:72:f8:20:dd:c0:
                    ef:a4:f1:8c:ea:18:ee:b0:30:b9:ad:8a:a2:67:c1:
                    5a:93:c1:74:4a:3e:d8:f6:95:11:27:f1:b5:02:a5:
                    3e:05:aa:85:bd:d4:d0:6c:6d:d4:fe:f1:f9:0e:89:
                    e2:ac:7b:17:98:f4:17:81:a4:f0:ab:d1:92:f9:9a:
                    19:9d:19:d1:b0:c8:f3:92:7c:db:37:b8:b5:2a:e7:
                    4e:6e:dc:a5:91:5a:e3:da:1e:90:bf:6b:35:9a:20:
                    48:66:a9:d6:91:f1:46:0c:7b:72:de:80:a7:b3:ee:
                    1f:7c:8f:32:d3:01:46:20:3e:62:85:6d:c4:26:b5:
                    1a:d9:30:b5:f6:a6:f3:b1:d9:ef:81:39:32:f2:9b:
                    da:45:6f:17:b1:63:80:ba:32:54:50:f9:3b:02:8a:
                    8a:54:cf:8d:a8:41:c8:3f:ea:a2:c4:ff:22:cc:d5:
                    a5:d9:c9:b4:7e:2d:95:b2:cf:b4:50:fd:d9:77:62:
                    ed:67:19:ce:b5:98:81:b3:41:44:96:ac:cb:65:86:
                    39:a5:9a:c6:1d:72:55:0d:1f:4a:a9:86:d3:77:0b:
                    bd:4f:93:4c:bb:2b:3a:85:34:0d:a9:2a:73:ce:7c:
                    f5:6d:ae:56:d9:6e:b9:41:96:5d:23:f6:94:e8:ff:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.244.0/22
                IPv6:
                  2a11:cb80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48084

    Signature Algorithm: sha256WithRSAEncryption
         72:d5:e9:54:3d:ff:d6:be:89:93:1b:e6:e3:3a:ce:fc:7a:f6:
         6f:51:ff:b2:75:86:b7:e2:ad:e5:41:85:60:32:1a:49:b6:e6:
         5a:25:f4:a5:9b:67:15:a2:cc:91:b9:62:a1:43:3c:6a:b2:aa:
         11:bf:b0:5e:c2:7f:89:70:2a:87:32:3f:52:18:3c:8e:ba:78:
         4d:8d:b2:72:cd:75:94:11:e3:f1:ef:b6:2d:58:55:a1:63:2d:
         4d:ed:3f:e8:31:59:90:ce:a9:0e:21:48:7a:90:45:95:87:f3:
         06:e6:87:49:2f:b9:18:be:bf:6c:36:c1:e8:e2:07:1d:4b:17:
         d6:3e:34:01:3e:17:58:15:c8:6a:e2:5e:ec:66:e0:97:c9:ad:
         e9:42:41:71:fa:67:06:93:55:e8:64:7b:42:a9:ac:75:66:38:
         db:3c:70:76:ad:19:ac:cc:7b:85:70:3e:e7:06:7c:8b:47:f4:
         65:dc:09:8b:e5:01:0e:ec:f1:f4:96:ba:0f:96:51:93:48:dc:
         9c:ad:07:13:6a:c6:01:88:ee:b2:15:13:5c:b9:81:97:ad:dd:
         69:a2:a6:06:55:ea:20:5f:d9:00:ab:cf:b9:76:7c:3c:1e:93:
         71:4e:07:5b:0c:4e:c5:58:26:53:e9:76:52:ee:1f:92:0b:aa:
         35:e6:01:91
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2X0MVtUcaPmAiAMW5Ef6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDRkMWNiYWE5MDBjOWRhYmQyYTFmNzY4MTk4YTFlNTViY2ZiNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulcXIfJdJXOScvgg3cDvpPGM6hju
sDC5rYqiZ8Fak8F0Sj7Y9pURJ/G1AqU+BaqFvdTQbG3U/vH5DonirHsXmPQXgaTw
q9GS+ZoZnRnRsMjzknzbN7i1KudObtylkVrj2h6Qv2s1miBIZqnWkfFGDHty3oCn
s+4ffI8y0wFGID5ihW3EJrUa2TC19qbzsdnvgTky8pvaRW8XsWOAujJUUPk7AoqK
VM+NqEHIP+qixP8izNWl2cm0fi2Vss+0UP3Zd2LtZxnOtZiBs0FElqzLZYY5pZrG
HXJVDR9KqYbTdwu9T5NMuys6hTQNqSpzznz1ba5W2W65QZZdI/aU6P8HVQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFP1NHLqpAMnavSofdoGYoeVbz7UPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzg5MDNj
YS1mYjY3LTRlZTctYTIzYS1kYjc2OTBlNDU3NjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvODkwM2Nh
LWZiNjctNGVlNy1hMjNhLWRiNzY5MGU0NTc2NS8xL19VMGN1cWtBeWRxOUtoOTJn
WmloNVZ2UHRROC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudb0MA0EAgACMAcDBQMqEcuAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC71DANBgkqhkiG9w0BAQsFAAOCAQEActXpVD3/1r6J
kxvm4zrO/Hr2b1H/snWGt+Kt5UGFYDIaSbbmWiX0pZtnFaLMkblioUM8arKqEb+w
XsJ/iXAqhzI/Uhg8jrp4TY2ycs11lBHj8e+2LVhVoWMtTe0/6DFZkM6pDiFIepBF
lYfzBuaHSS+5GL6/bDbB6OIHHUsX1j40AT4XWBXIauJe7Gbgl8mt6UJBcfpnBpNV
6GR7QqmsdWY42zxwdq0ZrMx7hXA+5wZ8i0f0ZdwJi+UBDuzx9Ja6D5ZRk0jcnK0H
E2rGAYjushUTXLmBl63daaKmBlXqIF/ZAKvPuXZ8PB6TcU4HWwxOxVgmU+l2Uu4f
kguqNeYBkQ==
-----END CERTIFICATE-----