Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
File:                     iWqh8O1Flucz-LYtOeN7jeUIXtc.cer (raw, json)
Hash identifier:          tOJGyUEmnIZAiZQUCjtlzhWvqBWasD1J/g3ndfOj6l8=
Subject key identifier:   89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3B8BAB9EDC910F070A188F134C2C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203400
                          IP: 185.72.88.0/22
                          IP: 2a03:3e60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:b8:ba:b9:ed:c9:10:f0:70:a1:88:f1:34:c2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:ec:e1:99:ec:1d:fe:d5:93:3d:a8:ab:ba:
                    d2:6c:14:d0:de:c4:ed:e0:57:6b:f3:29:dd:5d:cf:
                    40:23:e0:6c:28:47:25:05:13:8b:e9:22:62:6d:38:
                    64:61:5f:ef:e8:07:ea:94:88:b4:b1:e4:b5:ea:55:
                    31:4e:af:ac:1e:7f:e1:ac:92:e6:95:9a:2d:5d:ac:
                    3f:e1:a7:cd:fd:24:0b:90:e9:06:fe:0b:66:8a:50:
                    0b:cc:0d:6f:0e:f9:8f:89:5d:8c:e0:55:49:2e:97:
                    1b:19:02:57:04:4d:30:dd:53:ee:c8:00:72:1e:92:
                    b2:37:c9:21:01:60:ac:f3:ed:12:aa:67:9d:cb:80:
                    c3:98:58:7e:ca:7a:a1:c5:82:77:40:b3:5f:a3:66:
                    a5:e7:41:44:fb:46:96:b6:43:0d:fa:8c:eb:04:c0:
                    45:21:10:3e:85:93:01:11:5a:48:8e:a3:11:0d:07:
                    65:9a:d4:32:c3:06:9d:e7:b7:c6:9c:10:3d:28:61:
                    cf:54:c7:ba:e6:6b:5b:1e:59:90:34:8c:e2:ea:86:
                    a3:e2:fa:6a:d1:15:ed:d1:e7:1c:4d:52:28:02:0f:
                    6e:f5:eb:a2:53:85:4f:6b:55:61:00:cf:6b:ac:93:
                    74:07:cc:85:f0:0d:0b:23:a5:91:4c:a0:94:92:a5:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.88.0/22
                IPv6:
                  2a03:3e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203400

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:46:d9:98:70:e1:7a:ec:ae:26:c0:dd:8c:50:58:dd:0a:
         b7:79:fd:f6:6b:4c:5c:a0:7c:95:30:13:31:ac:8b:e1:36:80:
         0d:50:59:5a:9a:fd:b1:c7:6a:77:b0:6c:29:0e:81:7c:ff:b6:
         b7:da:e0:c5:c1:f6:44:5b:d3:e0:e1:92:d6:63:4c:84:b9:cc:
         05:14:af:6e:26:d2:d1:2b:44:30:d6:5e:56:92:10:d6:83:5b:
         aa:58:da:4e:9e:09:ad:a8:af:95:62:77:37:12:2d:98:c4:18:
         b1:f0:36:05:88:b9:02:ce:6e:d2:eb:40:1f:4f:7c:22:83:c5:
         0e:1b:62:1a:0e:6b:7c:a7:0e:02:e4:01:de:23:07:51:24:b5:
         4f:5b:47:b4:de:cf:09:6e:d5:96:fe:0e:12:25:7a:87:e6:ee:
         ee:b3:a2:48:53:7a:6b:c5:58:b4:50:99:8b:a6:bd:10:14:d6:
         6f:9c:45:99:86:63:09:71:e5:28:f4:62:e5:9d:99:1e:ca:09:
         de:38:ff:f2:c5:c2:40:8d:e5:11:f1:88:22:e5:60:ca:37:92:
         7c:c1:79:6b:a6:7e:d8:8d:0a:5d:c7:1d:44:aa:57:a0:ed:46:
         0b:dc:16:ba:6d:18:aa:b6:0f:f3:00:13:90:3c:bd:c5:9d:1e:
         69:3b:ca:75
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQks7i6ue3JEPBwoYjxNMLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTZhYTFmMGVkNDU5NmU3MzNmOGI2MmQzOWUzN2I4ZGU1MDg1ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TPs4ZnsHf7Vkz2oq7rSbBTQ3sTt
4Fdr8yndXc9AI+BsKEclBROL6SJibThkYV/v6AfqlIi0seS16lUxTq+sHn/hrJLm
lZotXaw/4afN/SQLkOkG/gtmilALzA1vDvmPiV2M4FVJLpcbGQJXBE0w3VPuyABy
HpKyN8khAWCs8+0Sqmedy4DDmFh+ynqhxYJ3QLNfo2al50FE+0aWtkMN+ozrBMBF
IRA+hZMBEVpIjqMRDQdlmtQywwad57fGnBA9KGHPVMe65mtbHlmQNIzi6oaj4vpq
0RXt0eccTVIoAg9u9euiU4VPa1VhAM9rrJN0B8yF8A0LI6WRTKCUkqX3jwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIlqofDtRZbnM/i2LTnje43lCF7XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzIwZTE2
Mi0yY2JjLTRiZTMtYTUwYy1hMjg2ZDAyNTMyZDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMjBlMTYy
LTJjYmMtNGJlMy1hNTBjLWEyODZkMDI1MzJkMy8xL2lXcWg4TzFGbHVjei1MWXRP
ZU43amVVSVh0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUhYMA0EAgACMAcDBQAqAz5gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaiDANBgkqhkiG9w0BAQsFAAOCAQEAM/pG2Zhw4Xrs
ribA3YxQWN0Kt3n99mtMXKB8lTATMayL4TaADVBZWpr9scdqd7BsKQ6BfP+2t9rg
xcH2RFvT4OGS1mNMhLnMBRSvbibS0StEMNZeVpIQ1oNbqljaTp4JraivlWJ3NxIt
mMQYsfA2BYi5As5u0utAH098IoPFDhtiGg5rfKcOAuQB3iMHUSS1T1tHtN7PCW7V
lv4OEiV6h+bu7rOiSFN6a8VYtFCZi6a9EBTWb5xFmYZjCXHlKPRi5Z2ZHsoJ3jj/
8sXCQI3lEfGIIuVgyjeSfMF5a6Z+2I0KXccdRKpXoO1GC9wWum0YqrYP8wATkDy9
xZ0eaTvKdQ==
-----END CERTIFICATE-----