Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
File:                     jWLdvflYu0uYPali7PA76u441Ek.cer (raw, json)
Hash identifier:          ETa9aMw6m7SZdNOLvBqExO8Opd8/8AOcg6MFb/Xap+c=
Subject key identifier:   8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B23C2EB463AA40E1EFBFD4E594C71E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206114
                          IP: 87.255.160.0/19
                          IP: 2a04:2800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:3c:2e:b4:63:aa:40:e1:ef:bf:d4:e5:94:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ca:53:8d:77:e9:cd:e4:54:91:40:ed:8c:45:
                    b5:19:a3:e2:bd:a2:9d:73:86:23:56:d5:31:e0:7c:
                    29:96:1b:3d:3a:f6:74:64:80:f9:ce:57:74:5f:7f:
                    fb:03:be:d1:a3:30:d5:79:2d:01:a0:3d:6e:f9:82:
                    8c:76:9e:3b:8a:cc:2c:97:24:4e:4b:01:e2:16:20:
                    a5:98:7e:5a:ab:2d:2c:e1:5c:10:ce:d6:9e:13:56:
                    d0:3c:22:5c:3a:6c:6b:de:b8:4b:a7:66:37:00:40:
                    3b:f5:a6:a9:22:1c:8c:99:ac:2e:c6:2e:3c:49:37:
                    65:10:3f:4d:19:c7:d4:38:94:b0:52:77:db:05:fd:
                    e5:c2:86:41:92:9f:84:7d:79:5b:1f:96:8c:f0:2e:
                    ae:f2:d1:0b:d9:6f:ed:7c:c4:d6:46:91:2f:57:b7:
                    f1:7f:72:4c:5a:dc:3d:c9:f2:c8:2f:73:77:e8:37:
                    ac:5b:d1:66:b8:90:32:67:f2:6f:1f:47:4a:84:15:
                    94:87:5b:99:dd:32:49:1b:ce:49:10:50:50:3b:a8:
                    e3:5d:da:ab:33:ac:9b:2a:a3:23:7d:92:04:85:b2:
                    d3:a9:f4:13:d7:e3:9a:f3:a2:79:24:4b:6f:a0:b5:
                    07:df:1e:75:cd:2b:36:93:3f:15:ce:a5:a6:b8:61:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.255.160.0/19
                IPv6:
                  2a04:2800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206114

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:f8:32:02:c9:81:76:d8:2d:89:cf:91:ab:a0:37:9e:02:
         43:c9:b5:a1:e1:ec:a7:15:53:90:96:e8:be:c7:a7:32:db:71:
         f2:8f:fa:9b:61:0f:fe:9b:e2:d0:ae:fd:5a:14:27:d8:6f:d3:
         72:47:e4:66:73:31:84:cd:06:20:f0:0b:67:18:9e:0d:fe:f0:
         82:e4:ad:fd:a9:86:3d:de:e0:76:b8:80:8e:81:07:9c:09:a4:
         70:23:4f:a9:aa:fc:c5:cb:2a:d8:6b:36:ee:58:e3:e5:39:83:
         57:74:ba:be:48:3f:16:5a:10:38:71:9c:48:2a:9b:6c:f9:78:
         36:07:d4:f7:e7:c0:2f:c5:37:d6:f9:fc:dc:2b:29:64:f7:03:
         f3:1d:55:5c:00:d9:c5:64:0b:e8:e9:d2:7e:01:26:64:d7:ff:
         39:01:ac:83:59:75:ee:10:55:46:1e:47:7a:0f:65:0f:3c:ee:
         66:99:f5:0b:42:23:6a:63:da:15:da:c5:d2:57:ca:e8:9b:2b:
         b2:ec:c3:09:6b:68:b1:64:3f:06:af:3e:30:54:65:f0:06:de:
         6f:27:18:bb:47:be:88:4c:08:dc:4d:26:00:a4:2b:7d:43:ec:
         b1:d8:cc:86:8c:ba:21:13:65:ce:b8:1a:cb:33:d8:3d:7f:3b:
         73:14:3a:3c
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhsjwutGOqQOHvv9TllMceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDYyZGRiZGY5NThiYjRiOTgzZGE5NjJlY2YwM2JlYWVlMzhkNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68pTjXfpzeRUkUDtjEW1GaPivaKd
c4YjVtUx4Hwplhs9OvZ0ZID5zld0X3/7A77RozDVeS0BoD1u+YKMdp47iswslyRO
SwHiFiClmH5aqy0s4VwQztaeE1bQPCJcOmxr3rhLp2Y3AEA79aapIhyMmawuxi48
STdlED9NGcfUOJSwUnfbBf3lwoZBkp+EfXlbH5aM8C6u8tEL2W/tfMTWRpEvV7fx
f3JMWtw9yfLIL3N36DesW9FmuJAyZ/JvH0dKhBWUh1uZ3TJJG85JEFBQO6jjXdqr
M6ybKqMjfZIEhbLTqfQT1+Oa86J5JEtvoLUH3x51zSs2kz8VzqWmuGFeSwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI1i3b35WLtLmD2pYuzwO+ruONRJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2IyMGJl
Yy0zODQ2LTRiZDEtODEyZi0wNmUwMGEzZWEwNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvYjIwYmVj
LTM4NDYtNGJkMS04MTJmLTA2ZTAwYTNlYTA2Mi8xL2pXTGR2ZmxZdTB1WVBhbGk3
UEE3NnU0NDFFay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQFV/+gMA0EAgACMAcDBQMqBCgAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMlIjANBgkqhkiG9w0BAQsFAAOCAQEAHlz4MgLJgXbY
LYnPkaugN54CQ8m1oeHspxVTkJbovsenMttx8o/6m2EP/pvi0K79WhQn2G/Tckfk
ZnMxhM0GIPALZxieDf7wguSt/amGPd7gdriAjoEHnAmkcCNPqar8xcsq2Gs27ljj
5TmDV3S6vkg/FloQOHGcSCqbbPl4NgfU9+fAL8U31vn83CspZPcD8x1VXADZxWQL
6OnSfgEmZNf/OQGsg1l17hBVRh5Heg9lDzzuZpn1C0IjamPaFdrF0lfK6JsrsuzD
CWtosWQ/Bq8+MFRl8AbebycYu0e+iEwI3E0mAKQrfUPssdjMhoy6IRNlzrgayzPY
PX87cxQ6PA==
-----END CERTIFICATE-----