Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
File:                     cRc4aXP7-IqGfIKohnsFD8pgsBE.cer (raw, json)
Hash identifier:          bO9RodZwblt89vVB1AaPIl5Uf8aWVHmM2YcP+Ik7eeU=
Subject key identifier:   71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C3402D48661BA206FF06F77F0C173
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 64478
                          AS: 205812
                          IP: 185.162.244.0/22
                          IP: 2a0a:800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:34:02:d4:86:61:ba:20:6f:f0:6f:77:f0:c1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7117386973fbf88a867c82a8867b050fca60b011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:0c:0e:b9:6c:f0:07:ef:cd:d1:0a:9d:f8:
                    3e:eb:d8:ae:fd:0f:2f:b5:45:7a:cd:15:e4:29:e8:
                    6e:d4:33:a9:dd:12:48:68:d7:aa:c9:cf:6e:93:e9:
                    97:7a:f4:90:a7:54:61:bc:5c:fc:81:3b:db:15:0b:
                    8c:2f:0d:53:14:13:7e:52:da:8d:de:4e:34:e1:7e:
                    d2:fe:51:8e:32:72:ce:cd:a0:1b:0b:f1:92:ea:c1:
                    4c:9b:bd:67:d6:01:4d:e3:0b:d8:79:a6:94:e0:e5:
                    54:52:d0:ed:41:85:ab:73:61:14:f2:50:5e:8c:6a:
                    27:11:0a:d0:90:95:8f:2b:05:db:91:c2:7a:00:00:
                    a6:57:fc:2e:f5:36:45:39:7a:7e:5b:22:f4:17:3f:
                    62:79:bd:f1:4e:31:01:c4:42:e9:5e:ef:58:43:77:
                    b0:fe:7f:3c:e2:46:0f:eb:57:46:17:ea:45:8e:aa:
                    a6:2f:36:f9:10:e5:fe:09:37:8e:4e:fd:96:d1:f2:
                    66:10:56:95:c1:cb:f9:53:6d:2c:67:0c:90:04:88:
                    56:51:66:19:30:bd:33:40:bc:59:ab:01:7c:e6:71:
                    43:a2:5f:9b:16:f6:8b:b4:59:fd:ad:ed:97:35:ea:
                    e0:1f:21:70:a0:c0:55:dd:b0:f9:cf:a9:20:6f:a9:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.244.0/22
                IPv6:
                  2a0a:800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64478
                  205812

    Signature Algorithm: sha256WithRSAEncryption
         64:67:f3:2a:8a:36:fd:e2:25:4f:5d:2b:81:08:1e:e8:45:dd:
         91:b1:91:c4:f9:6e:7e:09:1a:ac:30:4b:9c:2a:87:ca:71:12:
         95:b9:5b:ba:50:cf:e6:88:a7:02:36:8e:e7:65:21:30:2d:c1:
         38:9a:f4:34:23:5c:9a:ff:ea:46:9c:12:fc:3b:4e:0a:83:02:
         e7:1d:e7:82:09:dd:18:ae:e2:7e:a7:0a:d7:b2:1a:fd:c3:a0:
         59:c6:02:f9:36:f0:6e:f3:88:20:5b:35:5d:d3:6a:60:81:6b:
         03:26:27:26:eb:37:0b:75:5b:4a:e0:b4:20:a8:fc:23:b8:e4:
         bc:d3:c7:03:c7:69:81:05:3b:db:02:e5:53:34:ff:ae:26:d2:
         5e:f3:fc:44:55:47:35:c3:2d:bb:c3:85:8b:26:58:d4:b9:11:
         4a:ec:25:04:22:82:2b:21:24:67:be:b9:6a:b0:51:74:88:c0:
         87:f9:4c:23:e7:9d:c1:3c:4a:c7:c6:7c:5e:2a:45:c1:d9:09:
         b3:24:20:9c:e0:98:21:29:03:90:2a:24:e7:d6:31:79:03:c9:
         84:79:94:ed:a1:93:1f:65:e0:31:e8:6c:74:46:e7:0c:46:02:
         3f:2a:51:28:d6:1f:c7:92:9c:28:ec:bb:66:27:ff:66:62:d1:
         f0:69:f0:b8
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQfjDQC1IZhuiBv8G938MFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTE3Mzg2OTczZmJmODhhODY3YzgyYTg4NjdiMDUwZmNhNjBiMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgAMDrls8AfvzdEKnfg+69iu/Q8v
tUV6zRXkKehu1DOp3RJIaNeqyc9uk+mXevSQp1RhvFz8gTvbFQuMLw1TFBN+UtqN
3k404X7S/lGOMnLOzaAbC/GS6sFMm71n1gFN4wvYeaaU4OVUUtDtQYWrc2EU8lBe
jGonEQrQkJWPKwXbkcJ6AACmV/wu9TZFOXp+WyL0Fz9ieb3xTjEBxELpXu9YQ3ew
/n884kYP61dGF+pFjqqmLzb5EOX+CTeOTv2W0fJmEFaVwcv5U20sZwyQBIhWUWYZ
ML0zQLxZqwF85nFDol+bFvaLtFn9re2XNergHyFwoMBV3bD5z6kgb6mpAQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzc5Mzgw
NS1lNGU5LTQyZTItODM4Ni05ZjMwM2VhNjdlNjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNzkzODA1
LWU0ZTktNDJlMi04Mzg2LTlmMzAzZWE2N2U2NS8xL2NSYzRhWFA3LUlxR2ZJS29o
bnNGRDhwZ3NCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuaL0MA0EAgACMAcDBQMqCggAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwD73gIDAyP0MA0GCSqGSIb3DQEBCwUAA4IBAQBkZ/Mq
ijb94iVPXSuBCB7oRd2RsZHE+W5+CRqsMEucKofKcRKVuVu6UM/miKcCNo7nZSEw
LcE4mvQ0I1ya/+pGnBL8O04KgwLnHeeCCd0YruJ+pwrXshr9w6BZxgL5NvBu84gg
WzVd02pggWsDJicm6zcLdVtK4LQgqPwjuOS808cDx2mBBTvbAuVTNP+uJtJe8/xE
VUc1wy27w4WLJljUuRFK7CUEIoIrISRnvrlqsFF0iMCH+Uwj553BPErHxnxeKkXB
2QmzJCCc4JghKQOQKiTn1jF5A8mEeZTtoZMfZeAx6Gx0RucMRgI/KlEo1h/Hkpwo
7LtmJ/9mYtHwafC4
-----END CERTIFICATE-----