Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
File:                     j8Yziy6SHZEmxTYwPweMnruah1I.cer (raw, json)
Hash identifier:          nrVXVCprU3+Gw3WttjZ29K1TnOe1rcrLEMRKkwLBdmY=
Subject key identifier:   8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D61E1BC5F724506D33143BAC2238FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60145
                          IP: 185.55.184.0/22
                          IP: 2a02:4d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:1e:1b:c5:f7:24:50:6d:33:14:3b:ac:22:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:4b:87:7f:98:df:72:6b:d7:bb:be:14:4f:
                    50:b4:74:68:61:a2:e8:4f:1b:a1:14:c3:5a:e7:23:
                    6a:58:43:2b:99:4e:b7:02:71:24:44:4f:25:af:3f:
                    c4:c6:a0:f8:b2:a7:ae:f3:f7:b8:5f:7c:38:b5:55:
                    ff:63:ea:d9:68:ee:6c:d7:fe:16:58:ed:ae:00:a1:
                    dc:84:17:6e:36:4e:31:3e:1a:a9:82:e7:9f:ac:d0:
                    e0:0d:7f:35:d7:8f:84:14:26:82:8d:c1:a8:00:12:
                    0d:fa:5e:0b:fa:29:1d:1c:bc:cf:f3:0f:18:fd:85:
                    c1:ad:22:d6:41:16:ee:df:62:3e:21:4a:33:cb:a7:
                    a2:b8:87:2d:a4:de:92:a3:45:08:f6:80:be:ef:94:
                    96:33:0d:2c:05:9a:09:2b:16:b2:ed:5a:0d:c8:a0:
                    89:83:94:14:96:58:79:60:0b:61:48:5c:a0:ba:7c:
                    33:f5:2e:7b:c5:9d:1f:2a:85:25:50:38:ca:e2:ca:
                    57:7f:69:74:f8:e6:4c:9f:f6:bb:f6:51:46:c8:66:
                    c2:f9:c4:f3:c6:9b:99:2b:e0:f8:79:69:28:5c:6b:
                    b7:ba:19:04:ba:4a:74:0a:98:55:dd:fd:70:32:58:
                    17:58:4c:a1:ea:9f:02:21:33:fe:e6:aa:84:d7:20:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.184.0/22
                IPv6:
                  2a02:4d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60145

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:40:75:87:ba:b3:8d:d2:12:d1:f6:60:03:44:35:60:cd:
         7a:24:9c:e3:b3:92:6d:de:82:66:97:1b:8c:8e:f7:80:ec:0d:
         2d:13:9d:03:41:28:2f:17:13:6e:7e:ce:a4:0c:5c:d9:cf:eb:
         8d:60:be:3a:bd:10:8e:dd:f4:ba:70:13:de:0f:f8:8a:c1:10:
         30:46:a7:df:8b:c7:a8:4b:61:89:d0:a3:0a:05:97:31:0f:d3:
         5c:99:33:ad:65:27:18:79:7c:b6:78:1c:39:30:01:1a:06:53:
         8a:21:a2:d5:49:15:8b:33:f5:78:4c:ca:9f:16:d7:13:a5:e9:
         64:02:87:89:43:51:8b:e9:19:4f:db:22:5d:9c:43:01:e8:ba:
         c6:1f:8f:1d:ae:3f:51:c8:c5:23:8f:ba:26:d7:86:2b:69:07:
         7c:22:9e:d5:d7:fb:e1:0e:c0:da:88:df:f1:19:93:cf:60:82:
         24:89:e4:fb:23:cd:74:f1:ed:5d:7f:2f:07:11:1a:65:2f:c8:
         cc:75:26:35:d7:ee:e7:c9:e2:b7:c8:af:13:16:c4:20:fe:d7:
         08:a4:54:02:e6:37:d1:d5:46:7d:85:20:72:36:4a:42:af:86:
         d4:9f:54:e3:11:1b:54:f5:d8:58:16:c4:13:6f:f3:70:d5:db:
         31:ea:e2:7b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1h4bxfckUG0zFDusIjj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmM2MzM4YjJlOTIxZDkxMjZjNTM2MzAzZjA3OGM5ZWJiOWE4NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMdLh3+Y33Jr17u+FE9QtHRoYaLo
TxuhFMNa5yNqWEMrmU63AnEkRE8lrz/ExqD4sqeu8/e4X3w4tVX/Y+rZaO5s1/4W
WO2uAKHchBduNk4xPhqpguefrNDgDX8114+EFCaCjcGoABIN+l4L+ikdHLzP8w8Y
/YXBrSLWQRbu32I+IUozy6eiuIctpN6So0UI9oC+75SWMw0sBZoJKxay7VoNyKCJ
g5QUllh5YAthSFygunwz9S57xZ0fKoUlUDjK4spXf2l0+OZMn/a79lFGyGbC+cTz
xpuZK+D4eWkoXGu3uhkEukp0CphV3f1wMlgXWEyh6p8CITP+5qqE1yAbSwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI/GM4sukh2RJsU2MD8HjJ67modSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2NmY2I5
My1kOGY0LTQ2OWEtOTBmOS04ZjM0ZGYzMDQ5MjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvY2ZjYjkz
LWQ4ZjQtNDY5YS05MGY5LThmMzRkZjMwNDkyNy8xL2o4WXppeTZTSFpFbXhUWXdQ
d2VNbnJ1YWgxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTe4MA0EAgACMAcDBQAqAk1gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDq8TANBgkqhkiG9w0BAQsFAAOCAQEAKwdAdYe6s43S
EtH2YANENWDNeiSc47OSbd6CZpcbjI73gOwNLROdA0EoLxcTbn7OpAxc2c/rjWC+
Or0Qjt30unAT3g/4isEQMEan34vHqEthidCjCgWXMQ/TXJkzrWUnGHl8tngcOTAB
GgZTiiGi1UkVizP1eEzKnxbXE6XpZAKHiUNRi+kZT9siXZxDAei6xh+PHa4/UcjF
I4+6JteGK2kHfCKe1df74Q7A2ojf8RmTz2CCJInk+yPNdPHtXX8vBxEaZS/IzHUm
Ndfu58nit8ivExbEIP7XCKRUAuY30dVGfYUgcjZKQq+G1J9U4xEbVPXYWBbEE2/z
cNXbMeriew==
-----END CERTIFICATE-----