Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
File:                     b61qcd7-VgoOXCH_u0A4-0EJEpU.cer (raw, json)
Hash identifier:          vZrBqoq2IrawhyOwrUGB78rkxGDeAxtv6uPtVVUnKRg=
Subject key identifier:   6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FAFDC7FD3516F6A224DA6C3B1291E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200321
                          IP: 193.138.245.0 -- 193.138.247.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:af:dc:7f:d3:51:6f:6a:22:4d:a6:c3:b1:29:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:c2:2a:ac:c5:d8:02:dc:ce:10:f2:aa:c0:
                    39:07:12:0e:20:94:f4:e6:c5:09:41:bb:4d:00:d3:
                    c1:ca:ac:3d:d2:5a:d3:9b:04:54:36:1b:a3:0e:43:
                    9b:ca:7a:bd:05:21:67:ec:eb:e2:b7:2a:4a:be:50:
                    33:53:3d:56:2d:00:16:c1:73:b8:55:48:4f:03:2d:
                    99:b9:0e:4b:63:36:98:b4:8a:b0:61:eb:58:de:24:
                    fa:83:a1:e4:b4:97:3d:a5:37:d2:a3:5c:e4:90:ec:
                    57:85:56:5f:48:cf:1b:44:fc:31:3d:59:e9:c5:2a:
                    51:dc:b8:40:3c:68:e9:97:63:95:a9:99:27:aa:e5:
                    31:58:ac:bd:a2:4c:cc:da:a9:e6:d8:85:96:c8:3a:
                    60:bd:54:bd:f5:13:32:69:03:5e:e1:c0:85:d1:64:
                    3a:82:c4:97:d5:ac:d4:00:75:d4:ff:12:50:d2:49:
                    0d:27:d0:3c:fe:c0:ba:c6:ff:31:97:72:2a:3d:eb:
                    2a:8c:f2:73:cf:ad:3d:b3:eb:b7:85:d4:65:71:c6:
                    fc:6f:27:51:8c:62:d0:ce:49:c9:3a:5a:54:28:fc:
                    ba:e6:3c:69:d3:6c:07:d2:2e:35:c2:a0:74:63:c8:
                    ea:a8:b7:aa:cd:af:f6:d2:52:37:0f:d5:2d:2a:e0:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.245.0-193.138.247.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200321

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:30:e0:3f:bf:66:2e:89:48:ff:38:b1:ff:1a:c0:31:95:
         ed:12:d5:15:99:b8:50:8c:47:81:bc:70:36:1d:90:1a:3b:10:
         b3:13:b4:1e:ff:ba:b8:44:50:86:b0:a9:f1:13:bf:51:64:e8:
         ec:af:02:b3:5d:1b:ce:12:ca:87:c4:85:85:c9:df:a6:1f:9f:
         db:06:16:ce:d6:5a:c8:2b:28:5f:e3:27:ee:b9:63:c7:43:fb:
         ff:61:f5:79:6c:69:c5:2c:0a:76:12:6d:a6:e7:6e:54:4f:38:
         2b:b5:32:3a:62:7a:4a:40:ae:d4:0e:b7:e1:ab:31:85:e7:ce:
         d6:71:54:53:4c:22:38:6f:0c:76:53:2d:d7:2d:ab:82:0a:81:
         10:67:d3:45:1e:35:07:3b:b8:a0:f3:08:2d:ef:fa:ba:0e:89:
         12:4c:d1:d3:59:70:63:9e:2f:10:78:ed:19:0c:ab:41:eb:81:
         0d:c5:db:94:70:a7:90:62:f4:93:4d:83:98:0a:89:59:8b:c5:
         7c:49:14:41:ff:b1:c7:19:24:5f:3b:2a:b6:06:b2:03:3d:13:
         cf:d1:bf:63:f1:5b:d3:25:f6:08:35:85:77:e0:69:7d:0e:1d:
         de:dc:5d:83:41:aa:09:6a:83:1f:07:3c:8a:9d:8a:45:c4:5d:
         d5:74:e7:d3
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZQiH6/cf9NRb2oiTabDsSkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFkNmE3MWRlZmU1NjBhMGU1YzIxZmZiYjQwMzhmYjQxMDkxMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprCKqzF2ALczhDyqsA5BxIOIJT0
5sUJQbtNANPByqw90lrTmwRUNhujDkObynq9BSFn7OvitypKvlAzUz1WLQAWwXO4
VUhPAy2ZuQ5LYzaYtIqwYetY3iT6g6HktJc9pTfSo1zkkOxXhVZfSM8bRPwxPVnp
xSpR3LhAPGjpl2OVqZknquUxWKy9okzM2qnm2IWWyDpgvVS99RMyaQNe4cCF0WQ6
gsSX1azUAHXU/xJQ0kkNJ9A8/sC6xv8xl3IqPesqjPJzz609s+u3hdRlccb8bydR
jGLQzknJOlpUKPy65jxp02wH0i41wqB0Y8jqqLeqza/20lI3D9UtKuByeQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFG+tanHe/lYKDlwh/7tAOPtBCRKVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzI5MzY5
OC05NDlkLTQ2NjUtYmEwNy04Y2I0ZTI1M2YxNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMjkzNjk4
LTk0OWQtNDY2NS1iYTA3LThjYjRlMjUzZjE3NS8xL2I2MXFjZDctVmdvT1hDSF91
MEE0LTBFSkVwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBADBivUDBAPBivAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDAw6BMA0GCSqGSIb3DQEBCwUAA4IBAQAI1zDgP79mLolI/zix/xrA
MZXtEtUVmbhQjEeBvHA2HZAaOxCzE7Qe/7q4RFCGsKnxE79RZOjsrwKzXRvOEsqH
xIWFyd+mH5/bBhbO1lrIKyhf4yfuuWPHQ/v/YfV5bGnFLAp2Em2m525UTzgrtTI6
YnpKQK7UDrfhqzGF587WcVRTTCI4bwx2Uy3XLauCCoEQZ9NFHjUHO7ig8wgt7/q6
DokSTNHTWXBjni8QeO0ZDKtB64ENxduUcKeQYvSTTYOYColZi8V8SRRB/7HHGSRf
Oyq2BrIDPRPP0b9j8VvTJfYINYV34Gl9Dh3e3F2DQaoJaoMfBzyKnYpFxF3VdOfT
-----END CERTIFICATE-----