Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
File:                     lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer (raw, json)
Hash identifier:          VFSzigb9MMl5ZUEls2AVHy8MdSbobYsfEggijzzwE2Y=
Subject key identifier:   94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EEE5DF5D95F79412CD5EB7518A644
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.153.136.0/22
                          IP: 2a07:8640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:ee:5d:f5:d9:5f:79:41:2c:d5:eb:75:18:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:0a:28:c2:b9:16:0e:44:2c:04:c5:e2:f7:
                    94:a2:45:77:6b:c9:b5:db:e2:46:50:d7:87:d4:ba:
                    8d:e3:43:2f:f4:bc:39:f3:60:02:16:1d:8a:3c:ca:
                    47:05:c6:9b:75:03:3a:9e:9a:a0:2a:52:9a:9a:71:
                    ec:05:4e:9a:47:57:07:8d:73:57:e3:16:a1:25:cd:
                    25:c8:2b:8b:55:68:3a:55:70:5c:d4:94:9c:36:56:
                    83:d5:97:15:3d:38:2f:5e:77:45:43:f6:22:97:b3:
                    42:97:06:5d:72:ea:07:54:b5:c3:2a:05:65:07:38:
                    0d:9b:87:85:21:17:55:7b:21:0c:2b:2a:f8:ec:b3:
                    65:a0:d8:20:7b:2d:e3:2f:6e:3f:3b:52:0a:ac:ac:
                    82:e1:4a:db:7f:b3:9e:59:cd:11:ee:a6:17:32:06:
                    47:13:e1:20:1f:2a:84:6e:91:3f:32:5d:17:fb:71:
                    00:c3:c4:f0:86:77:ed:c0:5c:ac:93:56:08:01:c5:
                    ad:b2:88:5c:65:75:cc:80:a6:7e:12:fe:09:b9:e2:
                    f1:68:f5:8f:d7:cd:d3:4c:22:7e:f2:74:24:07:3d:
                    12:f8:10:16:ce:bb:2b:a9:d3:56:65:94:cc:67:17:
                    db:b2:78:76:9e:3b:5c:41:cf:28:b5:c0:80:df:69:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.136.0/22
                IPv6:
                  2a07:8640::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:06:a7:d4:b9:df:ea:4d:c9:f7:c5:d8:df:7a:2c:cf:08:38:
         a0:05:fb:5a:43:22:44:32:30:30:b3:b6:05:36:75:fc:d3:6d:
         35:93:69:df:3a:71:63:c7:99:9f:15:93:b6:43:2e:64:9e:17:
         66:40:c6:97:26:5c:87:08:d0:e2:2c:f0:52:04:48:d2:c2:da:
         53:ab:7e:30:be:eb:fd:60:15:e8:14:77:2f:e2:f6:76:06:5c:
         ad:f5:c5:65:4e:54:55:65:a1:ad:f3:e3:33:d9:a5:b4:bd:99:
         e0:e8:c2:40:4e:2d:3e:a4:05:71:0c:28:27:72:96:1e:92:c5:
         da:2d:89:4d:21:e6:de:92:18:51:6b:7e:59:d2:da:b2:ae:2c:
         a6:51:bd:ed:e9:40:9f:00:c0:28:d3:ea:58:3e:1b:21:2d:6c:
         de:d1:96:64:fe:bf:c3:e9:a3:7c:d7:4c:d4:3c:a4:dd:b1:a1:
         85:0f:41:39:7c:95:c6:84:53:62:9b:42:74:ff:20:29:16:0e:
         80:04:5d:a7:16:6a:e1:2b:d0:38:41:00:68:d6:0f:1c:71:e4:
         da:1b:a7:65:48:ad:f8:2f:d6:8a:50:07:74:0c:90:05:9d:b1:
         ff:da:91:f8:ea:14:3a:b8:3a:82:31:1e:41:ed:46:38:ae:fc:
         2a:2a:3d:e7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlju5d9dlfeUEs1et1GKZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDNlODI3ZjY2ZDViMzk1NWZlNmQ3M2JhMGYxNWZiYWFjOGI1MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApugKKMK5Fg5ELATF4veUokV3a8m1
2+JGUNeH1LqN40Mv9Lw582ACFh2KPMpHBcabdQM6npqgKlKamnHsBU6aR1cHjXNX
4xahJc0lyCuLVWg6VXBc1JScNlaD1ZcVPTgvXndFQ/Yil7NClwZdcuoHVLXDKgVl
BzgNm4eFIRdVeyEMKyr47LNloNggey3jL24/O1IKrKyC4Urbf7OeWc0R7qYXMgZH
E+EgHyqEbpE/Ml0X+3EAw8TwhnftwFysk1YIAcWtsohcZXXMgKZ+Ev4JueLxaPWP
183TTCJ+8nQkBz0S+BAWzrsrqdNWZZTMZxfbsnh2njtcQc8otcCA32l0NQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJQ+gn9m1bOVX+bXO6DxX7qsi1FQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzA4YjU5
Yi00ZmQzLTQ1NjktOWI1Ni0xZTBjYzVlMTU4ZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMDhiNTli
LTRmZDMtNDU2OS05YjU2LTFlMGNjNWUxNThmYS8xL2xENkNmMmJWczVWZjV0Yzdv
UEZmdXF5TFVWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZmIMA0EAgACMAcDBQMqB4ZAMA0GCSqGSIb3
DQEBCwUAA4IBAQAHBqfUud/qTcn3xdjfeizPCDigBftaQyJEMjAws7YFNnX80201
k2nfOnFjx5mfFZO2Qy5knhdmQMaXJlyHCNDiLPBSBEjSwtpTq34wvuv9YBXoFHcv
4vZ2Blyt9cVlTlRVZaGt8+Mz2aW0vZng6MJATi0+pAVxDCgncpYeksXaLYlNIebe
khhRa35Z0tqyriymUb3t6UCfAMAo0+pYPhshLWze0ZZk/r/D6aN810zUPKTdsaGF
D0E5fJXGhFNim0J0/yApFg6ABF2nFmrhK9A4QQBo1g8cceTaG6dlSK34L9aKUAd0
DJAFnbH/2pH46hQ6uDqCMR5B7UY4rvwqKj3n
-----END CERTIFICATE-----