Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
File:                     eHl3C__BTZzftXTshmyq8TVy9Fw.cer (raw, json)
Hash identifier:          MKh4pVFFWIE5p9AVooYzC6i0RXKHi7AwCwNxbhVCy44=
Subject key identifier:   78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EE5DE008D46A719D9A2101138F32E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198227
                          IP: 91.232.158.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:e5:de:00:8d:46:a7:19:d9:a2:10:11:38:f3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:eb:f1:a2:70:c9:9c:c7:c8:d9:f4:c7:fc:
                    18:50:ab:3e:96:71:5c:46:09:73:ef:a1:bc:5b:64:
                    90:7e:8c:a1:af:20:1c:cd:e0:ef:cd:43:48:53:e9:
                    37:2f:03:cb:43:29:69:ac:d8:85:86:50:41:61:b9:
                    f2:72:d7:69:8c:7e:98:45:5c:be:0b:9a:9a:e6:ab:
                    66:93:71:2c:85:30:2a:3f:0d:9c:ee:af:1b:cf:da:
                    25:88:61:71:fa:83:b3:32:b6:5d:04:f5:0e:e8:df:
                    3f:37:3d:bd:d7:c5:f4:3b:b0:7b:a1:9f:f3:4a:34:
                    d2:b6:fe:7d:f5:cf:60:1c:05:d1:4d:c3:36:da:80:
                    00:16:54:83:33:0c:9e:9d:a3:5b:00:86:d6:01:b8:
                    8c:cf:40:d9:7b:ef:7f:45:35:4c:0c:4b:63:68:49:
                    8b:c1:b6:5b:59:8f:1a:ac:36:af:2c:09:f9:f5:f7:
                    84:f5:6b:66:0f:9b:9e:9f:1c:cb:0c:5a:46:45:af:
                    23:74:3b:9f:0e:89:d1:36:53:c5:7c:4d:3d:62:43:
                    79:32:1d:12:ec:1e:98:b5:31:45:bd:8b:16:da:b0:
                    38:64:4d:c7:35:00:4f:56:1f:a4:a2:85:36:d9:c8:
                    1d:36:e7:e1:91:4b:3c:93:1a:5d:6b:a5:3b:3c:f2:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.158.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198227

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:6f:87:a5:97:04:ba:30:f5:08:03:d8:b4:3b:8d:11:43:
         32:53:ae:87:05:f5:4f:22:ba:4a:ac:bb:d7:97:3f:10:f0:49:
         30:f0:6d:8c:52:52:66:09:03:c4:3d:72:fb:f5:07:3c:29:35:
         f9:57:3d:fc:88:6c:c9:7d:9e:f4:6b:f5:84:f8:12:ec:bc:d9:
         99:e3:4b:e9:67:bb:9b:62:94:93:fa:8b:45:db:c2:bf:36:07:
         21:14:72:35:3c:94:6c:d3:3a:f6:85:57:63:52:d1:a9:95:e4:
         1d:19:30:65:86:61:45:ad:1f:c9:a0:39:f1:6a:99:9e:f3:3e:
         fe:8d:b4:c9:0d:2c:aa:4f:f6:81:56:91:f6:3d:ee:96:22:c2:
         a1:c5:ed:ac:ca:6e:5e:f6:b7:84:4f:d8:ea:eb:fe:ab:1d:ae:
         f6:05:3a:aa:03:f5:3c:b2:b3:b6:df:58:43:9e:ac:25:de:94:
         77:a3:e4:45:18:ab:cd:ea:9e:bc:71:29:5b:62:de:b9:9e:4c:
         18:63:e5:a8:42:55:3a:dc:3e:28:e5:d7:3e:f8:d8:5f:67:f6:
         69:d4:5a:17:c2:f1:66:29:0b:c6:3e:14:21:b4:bf:1e:f3:a3:
         1e:8e:dd:eb:f1:e4:f2:7e:f8:09:0e:e4:11:a8:b0:09:b3:1b:
         0e:77:2c:8b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQljuXeAI1GpxnZohAROPMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODc5NzcwYmZmYzE0ZDljZGZiNTc0ZWM4NjZjYWFmMTM1NzJmNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA237r8aJwyZzHyNn0x/wYUKs+lnFc
Rglz76G8W2SQfoyhryAczeDvzUNIU+k3LwPLQylprNiFhlBBYbnyctdpjH6YRVy+
C5qa5qtmk3EshTAqPw2c7q8bz9oliGFx+oOzMrZdBPUO6N8/Nz2918X0O7B7oZ/z
SjTStv599c9gHAXRTcM22oAAFlSDMwyenaNbAIbWAbiMz0DZe+9/RTVMDEtjaEmL
wbZbWY8arDavLAn59feE9WtmD5uenxzLDFpGRa8jdDufDonRNlPFfE09YkN5Mh0S
7B6YtTFFvYsW2rA4ZE3HNQBPVh+kooU22cgdNufhkUs8kxpda6U7PPI6gQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFHh5dwv/wU2c37V07IZsqvE1cvRcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzM3ZTI2
Zi01N2I4LTQwODAtYjgzMi1lZTczMTM3MTY0OTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMzdlMjZm
LTU3YjgtNDA4MC1iODMyLWVlNzMxMzcxNjQ5OC8xL2VIbDNDX19CVFp6ZnRYVHNo
bXlxOFRWeTlGdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW+ieMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMGUzANBgkqhkiG9w0BAQsFAAOCAQEAH2lvh6WXBLow9QgD2LQ7jRFDMlOuhwX1
TyK6Sqy715c/EPBJMPBtjFJSZgkDxD1y+/UHPCk1+Vc9/IhsyX2e9Gv1hPgS7LzZ
meNL6We7m2KUk/qLRdvCvzYHIRRyNTyUbNM69oVXY1LRqZXkHRkwZYZhRa0fyaA5
8WqZnvM+/o20yQ0sqk/2gVaR9j3uliLCocXtrMpuXva3hE/Y6uv+qx2u9gU6qgP1
PLKztt9YQ56sJd6Ud6PkRRirzeqevHEpW2LeuZ5MGGPlqEJVOtw+KOXXPvjYX2f2
adRaF8LxZikLxj4UIbS/HvOjHo7d6/Hk8n74CQ7kEaiwCbMbDncsiw==
-----END CERTIFICATE-----