Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.cer (raw, json)
Hash identifier:          BdPTztDwSbqfFoye5T67nZifjiDh1aC1dLwtxaPjovw=
Subject key identifier:   79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252175B104FDE5B76F46C322DE11D4A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201837
                          IP: 185.62.104.0/22
                          IP: 193.242.220.0/24
                          IP: 2a03:2a0::/29
                          IP: 2a13:7440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:75:b1:04:fd:e5:b7:6f:46:c3:22:de:11:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:fe:f4:4b:50:e3:7d:2c:aa:59:91:33:e0:
                    59:62:a4:69:3f:a3:85:93:3f:d0:79:08:67:d6:a1:
                    37:05:87:71:ee:3f:07:88:fd:73:a4:7a:8e:fd:54:
                    67:7a:40:a2:7c:12:14:33:2f:a2:79:69:88:f5:93:
                    d1:9f:a6:bd:4d:02:f9:78:db:34:cd:ef:f9:53:48:
                    e2:45:c4:83:64:29:90:95:e3:03:b4:59:9b:6d:43:
                    4c:60:75:2d:e1:24:ad:be:04:64:03:34:d5:aa:3d:
                    95:22:c5:b7:17:58:b5:c3:c9:7b:93:4c:f1:9e:ee:
                    65:37:6b:55:43:be:f4:51:56:db:fb:23:f4:56:c8:
                    c7:06:c0:b3:cc:e7:5e:68:a0:85:1e:9f:d2:ba:18:
                    b2:41:a2:35:45:e5:b3:e5:05:68:9e:44:df:8f:90:
                    d7:d2:e8:13:ca:37:a6:2c:33:96:01:cf:10:5a:bc:
                    e4:5b:75:06:13:74:58:95:98:95:26:ac:5c:9a:76:
                    a3:70:28:05:1c:bb:05:c5:dd:c2:e6:95:b0:fe:52:
                    46:b8:2c:1a:8c:54:91:54:e1:c1:3e:73:10:a6:0d:
                    d0:df:d7:02:6f:73:7b:e0:3b:d2:c3:74:70:c4:b2:
                    7a:e2:96:1c:9b:62:4e:11:48:02:b6:65:8c:4b:60:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.104.0/22
                  193.242.220.0/24
                IPv6:
                  2a03:2a0::/29
                  2a13:7440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201837

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:ac:a8:2e:30:25:a0:8e:ab:ef:4d:72:c2:10:87:60:b4:
         97:16:86:06:73:36:ce:0c:c8:85:d6:46:1b:16:28:1b:fa:b7:
         52:19:6d:a0:ea:de:b3:03:4a:1d:94:71:a6:f1:aa:a8:34:5b:
         e9:1d:91:b4:f2:2f:bc:ac:ee:20:7e:0e:13:39:5c:6f:0e:00:
         93:80:d5:c2:b5:7a:76:da:cd:1b:15:08:bb:b2:46:f3:d7:4a:
         65:4d:04:94:9e:90:2c:df:36:dd:8b:1e:37:0c:23:02:9a:23:
         01:e2:e6:9b:e9:f5:a8:8d:01:25:49:d9:5c:fd:cf:08:21:ce:
         6f:6b:69:82:8e:08:0e:a4:45:1a:f7:b4:86:5d:04:a7:48:69:
         f4:7b:4a:18:cc:5c:58:57:01:0a:ec:f6:40:0d:1d:5d:0e:3d:
         a1:6a:58:df:39:4a:35:76:43:27:25:2e:68:f9:52:9b:cb:76:
         6b:6f:32:6e:8a:cd:da:9b:e6:56:50:12:28:43:9e:f7:f7:f8:
         42:a2:b1:02:fa:9a:7e:d7:6c:32:88:d1:ea:90:78:d0:a5:dc:
         ab:a3:f0:9a:d0:21:ee:20:b9:60:ee:54:9b:24:6b:c5:ff:5f:
         81:3c:65:04:7d:6f:d9:61:b4:cb:34:4c:ec:1e:05:61:6d:eb:
         2d:42:a7:f5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQlIXWxBP3lt29GwyLeEdSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVlMTFkOGM0Mjk3YmVjNTRiZDMwNTQzMGNhNDc3MmRmYWM4NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s3+9EtQ430sqlmRM+BZYqRpP6OF
kz/QeQhn1qE3BYdx7j8HiP1zpHqO/VRnekCifBIUMy+ieWmI9ZPRn6a9TQL5eNs0
ze/5U0jiRcSDZCmQleMDtFmbbUNMYHUt4SStvgRkAzTVqj2VIsW3F1i1w8l7k0zx
nu5lN2tVQ770UVbb+yP0VsjHBsCzzOdeaKCFHp/SuhiyQaI1ReWz5QVonkTfj5DX
0ugTyjemLDOWAc8QWrzkW3UGE3RYlZiVJqxcmnajcCgFHLsFxd3C5pWw/lJGuCwa
jFSRVOHBPnMQpg3Q39cCb3N74DvSw3RwxLJ64pYcm2JOEUgCtmWMS2CZfQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFHnuEdjEKXvsVL0wVDDKR3LfrIR6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2Y4NWIz
ZC02MjRlLTRiMWEtYWQzMy0xMGEyMDZkYTdiNmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvZjg1YjNk
LTYyNGUtNGIxYS1hZDMzLTEwYTIwNmRhN2I2Yi8xL2VlNFIyTVFwZS14VXZUQlVN
TXBIY3Qtc2hIby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuT5oAwQAwfLcMBQEAgACMA4DBQMqAwKgAwUD
KhN0QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDFG0wDQYJKoZIhvcNAQELBQAD
ggEBAH8wrKguMCWgjqvvTXLCEIdgtJcWhgZzNs4MyIXWRhsWKBv6t1IZbaDq3rMD
Sh2Ucabxqqg0W+kdkbTyL7ys7iB+DhM5XG8OAJOA1cK1enbazRsVCLuyRvPXSmVN
BJSekCzfNt2LHjcMIwKaIwHi5pvp9aiNASVJ2Vz9zwghzm9raYKOCA6kRRr3tIZd
BKdIafR7ShjMXFhXAQrs9kANHV0OPaFqWN85SjV2QyclLmj5UpvLdmtvMm6Kzdqb
5lZQEihDnvf3+EKisQL6mn7XbDKI0eqQeNCl3Kuj8JrQIe4guWDuVJska8X/X4E8
ZQR9b9lhtMs0TOweBWFt6y1Cp/U=
-----END CERTIFICATE-----