Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.cer (raw, json)
Hash identifier:          /BrcO+3vPv5WL5LnID90kGifff7X1RgOH59ISepcgwg=
Subject key identifier:   B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5C8AFF059714965A681F2FFF25869
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.136.4.0/22
                          IP: 2a0a:ac40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c8:af:f0:59:71:49:65:a6:81:f2:ff:f2:58:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:ab:9a:fe:94:a5:a2:2c:ba:0d:33:67:68:
                    7c:c3:b7:86:8f:1f:63:d7:cd:01:dd:d9:ea:53:4b:
                    68:87:ec:04:68:18:44:89:0a:4a:9c:96:27:06:70:
                    b4:22:54:57:0c:58:68:76:db:77:5f:d3:f6:94:b6:
                    f1:a1:08:49:53:a2:89:b9:90:35:ce:f3:e3:59:24:
                    43:ea:95:bf:08:e0:e3:f6:a5:c7:16:73:c9:73:e4:
                    51:0a:9f:03:b1:c2:0a:11:36:6a:33:4d:a4:a6:1c:
                    a5:10:dc:96:83:ff:4c:38:f5:9c:d9:5c:f1:83:3d:
                    6e:cd:c9:79:b4:4f:28:3c:cd:c8:a1:50:ea:59:21:
                    19:a5:65:94:46:a7:1b:a1:14:be:21:e3:cf:ac:22:
                    e3:2a:21:7f:97:bc:c5:85:43:77:3e:60:71:1d:97:
                    52:ef:2d:8c:e1:12:e2:e5:66:25:97:24:82:df:8d:
                    56:f3:85:6d:b4:d7:18:58:81:6d:37:69:fa:46:3f:
                    c5:93:b6:5d:1b:91:d5:93:26:06:cb:b2:24:f1:9e:
                    2a:7a:9a:af:ee:a8:80:69:f8:37:79:ab:73:49:39:
                    a0:f2:96:2a:72:bb:53:88:98:ac:7d:67:1d:11:31:
                    04:5b:a6:c4:b3:3d:30:76:55:61:24:7f:88:c7:83:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.4.0/22
                IPv6:
                  2a0a:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:93:76:9b:34:df:08:cd:dc:d9:c6:8c:06:b5:64:47:d1:
         8f:cf:c9:08:b2:e2:7c:95:92:19:bb:3f:82:fe:c6:62:06:8d:
         35:f2:20:70:16:1f:c3:e6:7d:39:69:bc:34:68:75:e7:e4:a1:
         3f:1e:21:d7:ae:45:ea:f5:97:de:53:19:ca:8d:75:72:05:63:
         df:a0:c2:46:9a:63:16:a0:c9:34:6d:93:ed:82:3c:c7:ac:c5:
         43:13:16:89:c2:2a:ce:a9:48:7e:f7:f7:cb:c5:38:4f:b5:4c:
         da:9b:21:ba:fe:e6:f8:2f:6d:6e:06:15:a6:5c:1e:50:65:b9:
         cb:4d:3b:6c:9a:44:8a:54:ca:a1:98:6f:08:ee:64:45:6e:a6:
         e0:9a:9f:4f:48:e9:39:b0:6e:85:00:66:19:9d:c6:d3:f2:16:
         90:46:39:2a:d6:9d:11:02:07:04:b6:26:31:1d:a9:aa:5c:1a:
         e0:2a:ff:d1:cb:7d:f4:37:3a:f7:a7:4a:af:e3:9c:52:88:86:
         e0:d5:98:d3:3d:bb:f4:b0:fb:34:33:4e:4f:8c:69:01:98:1e:
         96:0d:1e:75:15:fd:e6:9d:23:9b:4b:31:8f:4a:6e:bc:a8:e1:
         2a:80:91:04:aa:ef:84:e0:60:d8:b4:32:11:7c:75:10:97:c1:
         6c:c9:d4:d0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQg1civ8FlxSWWmgfL/8lhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2ZlZGI1MDA5NTI2ZjBjNmJhZDQyM2YwMGNkYTA4YTA5MzNiNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU6rmv6UpaIsug0zZ2h8w7eGjx9j
180B3dnqU0toh+wEaBhEiQpKnJYnBnC0IlRXDFhodtt3X9P2lLbxoQhJU6KJuZA1
zvPjWSRD6pW/CODj9qXHFnPJc+RRCp8DscIKETZqM02kphylENyWg/9MOPWc2Vzx
gz1uzcl5tE8oPM3IoVDqWSEZpWWURqcboRS+IePPrCLjKiF/l7zFhUN3PmBxHZdS
7y2M4RLi5WYllySC341W84VttNcYWIFtN2n6Rj/Fk7ZdG5HVkyYGy7Ik8Z4qepqv
7qiAafg3eatzSTmg8pYqcrtTiJisfWcdETEEW6bEsz0wdlVhJH+Ix4O07wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLP+21AJUm8Ma61CPwDNoIoJM7eLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2E1Y2Vk
Yy1iZjYxLTRjYmMtYWIzNi1hZDA5NTNmN2ZkNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvYTVjZWRj
LWJmNjEtNGNiYy1hYjM2LWFkMDk1M2Y3ZmQ0OS8xL3NfN2JVQWxTYnd4cnJVSV9B
TTJnaWdrenQ0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYgEMA0EAgACMAcDBQAqCqxAMA0GCSqGSIb3
DQEBCwUAA4IBAQCYWpN2mzTfCM3c2caMBrVkR9GPz8kIsuJ8lZIZuz+C/sZiBo01
8iBwFh/D5n05abw0aHXn5KE/HiHXrkXq9ZfeUxnKjXVyBWPfoMJGmmMWoMk0bZPt
gjzHrMVDExaJwirOqUh+9/fLxThPtUzamyG6/ub4L21uBhWmXB5QZbnLTTtsmkSK
VMqhmG8I7mRFbqbgmp9PSOk5sG6FAGYZncbT8haQRjkq1p0RAgcEtiYxHamqXBrg
Kv/Ry330Nzr3p0qv45xSiIbg1ZjTPbv0sPs0M05PjGkBmB6WDR51Ff3mnSObSzGP
Sm68qOEqgJEEqu+E4GDYtDIRfHUQl8FsydTQ
-----END CERTIFICATE-----