Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
File:                     jDath5xkWu6YrEqJ_IALmpdOlB8.cer (raw, json)
Hash identifier:          Jg67gyfm1xUbdlvONtSH/VZDcwNkDT4VNZlwQJpKwOo=
Subject key identifier:   8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6CAE0EEA29C43A0CD8964CADB1891
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209792
                          IP: 194.93.20.0/22
                          IP: 2a09:2280::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:ca:e0:ee:a2:9c:43:a0:cd:89:64:ca:db:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:78:b7:0c:cb:fc:43:27:08:6a:61:26:16:
                    65:ed:e5:76:7b:ff:b3:be:bb:c0:99:53:76:31:92:
                    97:72:42:7e:40:94:1f:81:37:17:db:be:83:73:2b:
                    f2:2e:6a:83:e5:80:11:b4:19:2e:a6:8f:94:0f:4d:
                    37:4e:5d:a8:d3:64:7b:1b:be:5c:c3:db:a1:66:8d:
                    b2:0e:25:73:61:77:ca:fa:c5:a0:5d:74:d4:12:42:
                    bb:f3:17:b8:1f:f8:a5:76:22:82:23:87:2d:6a:25:
                    93:6d:eb:98:9f:eb:37:37:42:68:69:f9:84:1f:f4:
                    91:8d:2c:31:8c:52:61:15:10:72:3c:e1:f6:9d:c9:
                    47:80:b8:10:de:12:59:4a:d2:61:33:23:c1:7b:4c:
                    0e:24:61:64:7e:13:b8:56:b1:07:21:28:1a:4d:84:
                    ce:03:79:e6:a4:68:68:d6:25:d3:7f:c3:4e:f1:67:
                    7c:ea:3b:ae:55:37:58:10:68:3a:cf:ae:b7:15:d1:
                    23:d1:f6:36:56:8d:17:db:2b:0e:0c:5f:26:a8:11:
                    8b:7a:41:36:a4:61:1e:51:33:d7:85:be:0c:65:ca:
                    6c:45:d0:c5:54:b4:d9:f4:93:7c:fc:83:ca:4e:2b:
                    2c:4a:8f:f1:dc:55:ad:02:90:13:56:15:d7:7a:83:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.20.0/22
                IPv6:
                  2a09:2280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209792

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:8d:3b:13:61:c9:b9:8a:7c:ca:41:e9:df:27:31:61:69:
         bf:88:68:0b:32:a4:ed:e3:e6:36:ef:f3:54:28:07:69:92:2e:
         63:34:3b:3b:4e:53:d3:d2:ae:d5:32:0b:05:9d:10:6e:3d:41:
         c6:74:4a:fa:0c:ea:90:12:1f:8d:3c:94:71:7e:f7:79:c6:bc:
         16:e3:3a:71:09:a6:80:5f:27:90:a3:1d:72:3f:e6:30:5f:c3:
         62:a9:e0:94:f8:57:61:0d:fc:c6:b3:06:3d:d8:8d:1a:22:e4:
         c6:87:14:14:73:6c:d2:76:14:e1:41:b3:f7:66:77:48:97:f1:
         42:dc:dd:55:b2:bf:ad:86:f6:32:2a:0b:73:1c:9f:ed:e8:5d:
         69:e9:72:c5:b5:bd:2b:48:db:73:08:86:38:5c:b3:31:19:a5:
         d7:eb:fd:42:db:5b:5d:b0:34:27:cf:5f:05:f4:ef:ec:93:57:
         81:b9:51:4c:5a:39:77:14:de:8d:9e:21:3b:67:09:9c:e9:a2:
         67:6a:3b:14:88:53:ee:2b:76:55:17:b9:69:2a:0e:0f:c1:d1:
         e4:22:1d:69:a9:80:b9:ba:f7:c2:d1:61:36:06:70:74:a8:07:
         0b:e8:70:39:1c:d0:c5:9f:03:bb:18:cc:3c:45:58:48:4c:47:
         11:55:ca:05
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1srg7qKcQ6DNiWTK2xiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzM2YWQ4NzljNjQ1YWVlOThhYzRhODlmYzgwMGI5YTk3NGU5NDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRJ4twzL/EMnCGphJhZl7eV2e/+z
vrvAmVN2MZKXckJ+QJQfgTcX276DcyvyLmqD5YARtBkupo+UD003Tl2o02R7G75c
w9uhZo2yDiVzYXfK+sWgXXTUEkK78xe4H/ildiKCI4ctaiWTbeuYn+s3N0JoafmE
H/SRjSwxjFJhFRByPOH2nclHgLgQ3hJZStJhMyPBe0wOJGFkfhO4VrEHISgaTYTO
A3nmpGho1iXTf8NO8Wd86juuVTdYEGg6z663FdEj0fY2Vo0X2ysODF8mqBGLekE2
pGEeUTPXhb4MZcpsRdDFVLTZ9JN8/IPKTissSo/x3FWtApATVhXXeoMRPQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIw2rYecZFrumKxKifyAC5qXTpQfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2Y2NjNh
My02ODRlLTQ3NzktODhiOS0xNGU2ZWMwMjBiZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZjY2M2Ez
LTY4NGUtNDc3OS04OGI5LTE0ZTZlYzAyMGJmYS8xL2pEYXRoNXhrV3U2WXJFcUpf
SUFMbXBkT2xCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwl0UMA0EAgACMAcDBQMqCSKAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMzgDANBgkqhkiG9w0BAQsFAAOCAQEATxKNOxNhybmK
fMpB6d8nMWFpv4hoCzKk7ePmNu/zVCgHaZIuYzQ7O05T09Ku1TILBZ0Qbj1BxnRK
+gzqkBIfjTyUcX73eca8FuM6cQmmgF8nkKMdcj/mMF/DYqnglPhXYQ38xrMGPdiN
GiLkxocUFHNs0nYU4UGz92Z3SJfxQtzdVbK/rYb2MioLcxyf7ehdaelyxbW9K0jb
cwiGOFyzMRml1+v9QttbXbA0J89fBfTv7JNXgblRTFo5dxTejZ4hO2cJnOmiZ2o7
FIhT7it2VRe5aSoOD8HR5CIdaamAubr3wtFhNgZwdKgHC+hwORzQxZ8DuxjMPEVY
SExHEVXKBQ==
-----END CERTIFICATE-----