Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
File:                     rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer (raw, json)
Hash identifier:          z4180AnL8XkG6b2XGGQb5PQTwZ0PFcU0DHPnbBp9O9o=
Subject key identifier:   AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FAF9C16D277D8A24CBF3518E1097EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41848
                          IP: 83.137.8.0/21
                          IP: 2a02:ea8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fa:f9:c1:6d:27:7d:8a:24:cb:f3:51:8e:10:97:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:18:93:b2:2b:54:ef:29:16:c5:63:83:66:
                    86:93:b0:be:3a:dc:de:54:a2:bc:f5:5b:36:26:f5:
                    4a:3d:a7:46:05:12:3a:0e:0a:aa:68:12:be:67:9a:
                    98:91:e3:30:7d:5b:c6:bc:b4:ff:94:7a:56:5c:0b:
                    6e:87:1f:2a:15:47:37:88:31:a6:4c:6a:b8:d6:cc:
                    c9:14:f5:5a:1f:f2:5a:c2:2e:d1:f9:51:77:0e:7e:
                    28:f0:ec:10:ea:bb:55:01:ed:3c:d0:16:94:e8:2a:
                    2f:0c:2a:d5:84:d4:7d:79:04:10:6f:5e:53:44:62:
                    57:70:a5:28:dc:5b:8b:0e:1e:eb:f5:00:6e:cd:4c:
                    11:42:81:79:a2:5b:dc:08:36:52:1d:33:52:60:94:
                    e2:b1:75:b3:91:28:6e:1e:9d:97:02:22:3a:9f:e4:
                    0b:8f:0e:cb:b9:73:e5:20:89:4e:99:d7:e2:6f:8e:
                    c6:f0:ce:28:63:46:00:ae:c9:4c:12:ac:04:67:c5:
                    9e:19:6c:2f:99:a1:9f:28:bc:d9:64:15:77:7c:d9:
                    28:2c:5d:fa:f6:6e:f4:20:34:c8:cf:60:b7:f1:20:
                    e1:38:a3:16:46:78:ee:31:c1:c6:de:bb:6a:2c:9f:
                    84:4f:39:3b:8a:cf:5a:0c:71:fa:d7:66:38:00:78:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.8.0/21
                IPv6:
                  2a02:ea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41848

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:07:91:7d:a1:56:e5:b5:47:0a:94:10:cb:be:71:18:51:
         42:70:8a:80:b0:0c:a2:ff:48:67:8e:cc:81:72:4e:36:78:e3:
         2e:d6:65:fb:eb:42:42:e0:3f:c7:98:97:79:8c:b3:fa:db:57:
         04:b2:d0:3a:e5:49:0c:7a:3f:45:59:83:f0:96:de:77:9a:79:
         29:75:1e:40:61:3a:30:1e:39:e4:bc:03:83:14:48:93:15:ce:
         8e:4b:2a:9d:63:d9:4a:42:a5:1b:68:db:fc:a5:6d:e8:ec:d6:
         0d:77:25:f2:c6:0b:f0:9a:38:5d:1f:f2:08:fb:b7:05:89:15:
         e4:5d:61:e4:16:74:6d:74:43:59:70:71:f7:46:75:02:14:3b:
         d1:71:aa:6d:89:9e:e2:77:71:77:2c:a5:ae:df:bb:61:38:ce:
         63:ef:a5:0d:7b:3a:7c:d8:3b:4c:4d:93:54:36:5f:8d:cb:94:
         e7:6f:60:a0:f1:f4:9f:4d:77:dc:42:64:25:b1:a3:37:c5:ae:
         ee:91:30:03:cf:7d:b9:8d:72:39:50:08:55:af:1a:24:93:02:
         50:1a:09:21:36:56:9e:3d:b6:55:0e:d4:3e:56:13:04:b9:fb:
         c6:9b:d8:ff:70:dd:a4:c1:3a:4d:81:a2:49:14:73:59:dc:2e:
         af:34:30:6f
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi+vnBbSd9iiTL81GOEJfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzRmMzE1NzU5OWI2NmYyOGNiYzVhMmVlZDM2ZmJhMjNmMDNkMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaQYk7IrVO8pFsVjg2aGk7C+Otze
VKK89Vs2JvVKPadGBRI6DgqqaBK+Z5qYkeMwfVvGvLT/lHpWXAtuhx8qFUc3iDGm
TGq41szJFPVaH/Jawi7R+VF3Dn4o8OwQ6rtVAe080BaU6CovDCrVhNR9eQQQb15T
RGJXcKUo3FuLDh7r9QBuzUwRQoF5olvcCDZSHTNSYJTisXWzkShuHp2XAiI6n+QL
jw7LuXPlIIlOmdfib47G8M4oY0YArslMEqwEZ8WeGWwvmaGfKLzZZBV3fNkoLF36
9m70IDTIz2C38SDhOKMWRnjuMcHG3rtqLJ+ETzk7is9aDHH612Y4AHgcWwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKxPMVdZm2byjLxaLu02+6I/A9LOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzExNDg4
ZC1jNjZhLTQwMDYtOGY2Mi0yNTA5ODBlNzViZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMTE0ODhk
LWM2NmEtNDAwNi04ZjYyLTI1MDk4MGU3NWJkZi8xL3JFOHhWMW1iWnZLTXZGb3U3
VGI3b2o4RDBzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDU4kIMA0EAgACMAcDBQAqAg6oMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCjeDANBgkqhkiG9w0BAQsFAAOCAQEAfnMHkX2hVuW1
RwqUEMu+cRhRQnCKgLAMov9IZ47MgXJONnjjLtZl++tCQuA/x5iXeYyz+ttXBLLQ
OuVJDHo/RVmD8Jbed5p5KXUeQGE6MB455LwDgxRIkxXOjksqnWPZSkKlG2jb/KVt
6OzWDXcl8sYL8Jo4XR/yCPu3BYkV5F1h5BZ0bXRDWXBx90Z1AhQ70XGqbYme4ndx
dyylrt+7YTjOY++lDXs6fNg7TE2TVDZfjcuU529goPH0n0133EJkJbGjN8Wu7pEw
A899uY1yOVAIVa8aJJMCUBoJITZWnj22VQ7UPlYTBLn7xpvY/3DdpME6TYGiSRRz
WdwurzQwbw==
-----END CERTIFICATE-----