Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
File:                     rQYYvADZEaXV7r-cWJakG_KJjss.cer (raw, json)
Hash identifier:          JHzqqKxEk3cI8glnaT53NTaDeQ27TdpO8k/k1m6UG70=
Subject key identifier:   AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019518FB3D9B8DF448B04E654D623609B36D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:14:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199361
                          IP: 185.20.76.0/23
                          IP: 185.77.232.0/22
                          IP: 2a00:49e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:18:fb:3d:9b:8d:f4:48:b0:4e:65:4d:62:36:09:b3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 12:14:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:80:d9:d8:fc:56:2f:be:fc:7d:b3:91:8a:
                    b7:8a:27:39:10:11:8d:a6:06:15:7c:63:15:a3:e0:
                    f9:19:46:62:ea:9e:29:70:e1:c8:30:12:1e:29:66:
                    1f:c1:bd:d1:68:b2:42:13:6b:36:92:48:fb:d0:d0:
                    02:b4:4c:5a:59:55:1b:1e:72:a0:82:84:b4:e3:7c:
                    c1:22:45:66:a5:18:fa:4d:ac:cb:f5:14:fd:11:54:
                    85:a3:b3:2e:f7:cd:a3:72:e6:56:03:43:74:42:fb:
                    c8:fb:ce:8b:1f:ae:f6:2a:a0:a1:7e:c2:4b:b8:43:
                    56:14:8b:e0:73:b3:ae:f7:56:1e:64:42:b4:e9:62:
                    89:0c:c9:76:a4:0a:29:71:9a:05:77:15:9c:35:42:
                    1f:11:9a:7b:02:f6:a7:dc:87:f6:03:f3:6a:bb:56:
                    e7:39:fc:40:58:b9:65:9d:ab:b9:17:50:91:6f:0d:
                    00:26:77:7c:fe:17:1d:3a:db:50:0c:35:be:53:d4:
                    56:92:96:e4:17:f9:cf:c3:95:5b:08:40:46:a8:89:
                    26:f9:d7:8b:20:c0:46:9f:94:a0:2e:9b:75:e4:d5:
                    44:59:a9:3d:55:a8:33:6c:92:2d:e7:d3:81:9e:8b:
                    1f:9d:db:ac:a1:80:2f:c3:e1:8b:f5:33:12:fa:d8:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.20.76.0/23
                  185.77.232.0/22
                IPv6:
                  2a00:49e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199361

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:a5:b4:6a:cd:ac:50:d9:ec:af:3a:d8:79:a7:9c:4c:de:
         0b:5a:d1:d2:bf:28:97:d6:87:cc:5d:b6:2a:27:6b:2e:59:7f:
         64:7f:61:b7:18:6b:88:88:60:35:b7:7a:f7:44:dd:75:ee:70:
         71:d2:c0:d3:fe:c3:50:95:f3:1c:28:4c:7e:e0:cb:10:ae:87:
         8d:f0:a5:a4:45:74:9f:f9:cf:06:5a:0d:38:d2:9f:a5:46:40:
         4a:16:9e:e3:21:b0:01:78:41:9d:54:1f:e8:a9:6d:57:ad:87:
         5b:ea:17:bf:e3:20:ec:ae:bf:5c:b1:8d:80:e0:86:1b:8f:ad:
         cc:02:8e:5f:28:f2:ba:4f:51:96:2f:43:e2:99:98:ec:c4:30:
         72:1b:07:63:07:fb:d3:20:75:7e:40:02:49:77:a2:74:54:a8:
         be:0f:6d:6a:9d:4f:29:b9:82:c8:41:c5:a2:d8:c9:80:82:4a:
         2a:22:19:8d:9d:99:ce:9f:7b:48:16:83:cb:b1:d7:3a:d1:5c:
         1a:65:4f:67:0c:50:e8:80:c9:37:5d:c8:ab:37:69:e7:25:60:
         30:64:10:b2:c2:70:2b:a5:ed:0c:20:04:f7:06:ca:56:03:8f:
         09:0f:94:4a:41:eb:11:e2:cc:4d:0d:9b:af:13:37:0c:7e:96:
         4d:27:b9:20
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZUY+z2bjfRIsE5lTWI2CbNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE4MTIxNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDA2MThiYzAwZDkxMWE1ZDVlZWJmOWM1ODk2YTQxYmYyODk4ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+2A2dj8Vi++/H2zkYq3iic5EBGN
pgYVfGMVo+D5GUZi6p4pcOHIMBIeKWYfwb3RaLJCE2s2kkj70NACtExaWVUbHnKg
goS043zBIkVmpRj6TazL9RT9EVSFo7Mu982jcuZWA0N0QvvI+86LH672KqChfsJL
uENWFIvgc7Ou91YeZEK06WKJDMl2pAopcZoFdxWcNUIfEZp7Avan3If2A/Nqu1bn
OfxAWLllnau5F1CRbw0AJnd8/hcdOttQDDW+U9RWkpbkF/nPw5VbCEBGqIkm+deL
IMBGn5SgLpt15NVEWak9VagzbJIt59OBnosfndusoYAvw+GL9TMS+tjNPwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFK0GGLwA2RGl1e6/nFiWpBvyiY7LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzlmMzVl
OS1hMTdhLTQ4Y2QtOTQwMi0zMWQyNDVmM2IzYjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvOWYzNWU5
LWExN2EtNDhjZC05NDAyLTMxZDI0NWYzYjNiOC8xL3JRWVl2QURaRWFYVjdyLWNX
SmFrR19LSmpzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBuRRMAwQCuU3oMA0EAgACMAcDBQAqAEngMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMKwTANBgkqhkiG9w0BAQsFAAOCAQEAoyGl
tGrNrFDZ7K862HmnnEzeC1rR0r8ol9aHzF22KidrLll/ZH9htxhriIhgNbd690Td
de5wcdLA0/7DUJXzHChMfuDLEK6HjfClpEV0n/nPBloNONKfpUZAShae4yGwAXhB
nVQf6KltV62HW+oXv+Mg7K6/XLGNgOCGG4+tzAKOXyjyuk9Rli9D4pmY7MQwchsH
Ywf70yB1fkACSXeidFSovg9tap1PKbmCyEHFotjJgIJKKiIZjZ2Zzp97SBaDy7HX
OtFcGmVPZwxQ6IDJN13Iqzdp5yVgMGQQssJwK6XtDCAE9wbKVgOPCQ+USkHrEeLM
TQ2brxM3DH6WTSe5IA==
-----END CERTIFICATE-----