Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
File:                     txC5vh4ts3SC4fjyWzX9pTgNMsY.cer (raw, json)
Hash identifier:          2kqdzo7/EUDdi46ET1+tBXEY334LIxE/hc7o6SOk1Ss=
Subject key identifier:   B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143C9873E941A9AE7BF6FEF42A99C38
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206516
                          AS: 209407
                          IP: 185.184.96.0/22
                          IP: 2a0b:3080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:c9:87:3e:94:1a:9a:e7:bf:6f:ef:42:a9:9c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5c:ec:09:8e:a0:37:ed:e0:1b:90:54:c2:64:
                    0f:16:1e:2b:90:f4:2e:4c:eb:d7:82:19:c4:1d:f2:
                    90:ba:20:b1:e8:73:b4:6b:49:3a:44:00:0b:28:c3:
                    df:d8:b2:7a:25:6f:ce:8f:b7:52:6b:34:d4:fb:18:
                    0b:e4:dd:2e:e1:b4:a7:52:f4:ff:9e:4e:ab:25:87:
                    b6:33:4c:a9:4f:3c:d9:d1:7b:66:ff:0a:7e:b5:80:
                    fb:77:0b:e7:c6:d0:5f:53:93:06:d8:c8:d5:ea:fb:
                    c7:ac:b7:42:f1:f1:b3:74:1c:92:b0:f2:9c:1a:46:
                    1a:94:74:eb:78:ed:f7:97:4b:07:04:1c:ad:6c:65:
                    13:77:29:e9:36:93:ca:ea:16:2c:80:58:23:d3:de:
                    6b:a5:e0:46:6e:e3:aa:55:bd:84:f3:4a:29:9a:2a:
                    a0:9c:9d:7d:ee:f7:bb:3f:8b:62:f8:9f:1d:c1:42:
                    27:ee:58:0b:bb:50:40:f3:9c:a5:d6:77:69:15:41:
                    2a:6c:a7:40:ee:84:07:31:e0:03:70:88:bf:6a:7d:
                    55:d9:26:0d:d8:5f:19:d8:c5:62:a2:7a:27:50:39:
                    01:35:7a:60:a1:32:82:68:9a:74:84:1d:1c:20:65:
                    e3:8d:11:3c:56:fa:d9:54:13:c5:0c:ce:d4:be:1a:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.96.0/22
                IPv6:
                  2a0b:3080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206516
                  209407

    Signature Algorithm: sha256WithRSAEncryption
         73:87:d5:91:46:9d:22:7e:7d:d5:9e:b4:a1:98:0b:00:2f:a7:
         79:86:52:d9:11:00:6e:04:03:0c:0c:84:c1:36:50:2b:4e:ae:
         4a:68:60:9f:0e:24:a4:88:15:e5:00:f2:98:f6:bb:ae:5c:bc:
         c6:27:0f:d5:0b:07:a8:a1:2a:ec:32:44:86:14:e1:2c:6b:4e:
         65:2c:25:33:a0:37:34:50:d0:7b:cf:a7:1b:d6:7e:3c:cd:04:
         73:f3:8b:27:b3:6f:09:68:9d:a0:a0:89:be:46:82:0b:42:dd:
         af:6e:35:b8:62:79:b7:ca:8a:b6:a7:86:d9:d2:a7:93:fd:13:
         cf:69:e7:c6:11:7f:69:a0:61:d7:2a:27:48:a2:89:28:16:eb:
         65:6a:16:0d:ca:40:d4:0e:b0:86:b3:7d:a7:11:06:02:11:4e:
         b0:bb:68:9c:23:fd:36:af:0f:41:76:92:d4:20:ca:c5:8d:e3:
         2c:0f:00:ac:3c:f2:c8:d5:55:79:da:0f:8e:5f:0e:76:5c:db:
         98:ac:90:e2:bc:58:bb:47:9d:70:5b:82:ee:0c:5a:a4:50:e1:
         91:b3:46:31:f5:f6:0c:ef:48:b4:13:77:04:65:ae:f5:9a:3d:
         a9:d5:e8:25:2d:47:a7:6e:c7:1f:ad:1c:74:f8:83:3e:c2:cc:
         7b:d9:a3:54
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQhQ8mHPpQamue/b+9CqZw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzEwYjliZTFlMmRiMzc0ODJlMWY4ZjI1YjM1ZmRhNTM4MGQzMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lzsCY6gN+3gG5BUwmQPFh4rkPQu
TOvXghnEHfKQuiCx6HO0a0k6RAALKMPf2LJ6JW/Oj7dSazTU+xgL5N0u4bSnUvT/
nk6rJYe2M0ypTzzZ0Xtm/wp+tYD7dwvnxtBfU5MG2MjV6vvHrLdC8fGzdBySsPKc
GkYalHTreO33l0sHBBytbGUTdynpNpPK6hYsgFgj095rpeBGbuOqVb2E80opmiqg
nJ197ve7P4ti+J8dwUIn7lgLu1BA85yl1ndpFUEqbKdA7oQHMeADcIi/an1V2SYN
2F8Z2MViononUDkBNXpgoTKCaJp0hB0cIGXjjRE8VvrZVBPFDM7UvhoavwIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFLcQub4eLbN0guH48ls1/aU4DTLGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzU3ODc4
OC0yNTBmLTQ3ZjItYmQzZS0yNzJjY2MxN2RmZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNTc4Nzg4
LTI1MGYtNDdmMi1iZDNlLTI3MmNjYzE3ZGZlYS8xL3R4QzV2aDR0czNTQzRmanlX
elg5cFRnTk1zWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubhgMA0EAgACMAcDBQAqCzCAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMmtAIDAzH/MA0GCSqGSIb3DQEBCwUAA4IBAQBzh9WR
Rp0ifn3VnrShmAsAL6d5hlLZEQBuBAMMDITBNlArTq5KaGCfDiSkiBXlAPKY9ruu
XLzGJw/VCweooSrsMkSGFOEsa05lLCUzoDc0UNB7z6cb1n48zQRz84sns28JaJ2g
oIm+RoILQt2vbjW4Ynm3yoq2p4bZ0qeT/RPPaefGEX9poGHXKidIookoFutlahYN
ykDUDrCGs32nEQYCEU6wu2icI/02rw9BdpLUIMrFjeMsDwCsPPLI1VV52g+OXw52
XNuYrJDivFi7R51wW4LuDFqkUOGRs0Yx9fYM70i0E3cEZa71mj2p1eglLUenbscf
rRx0+IM+wsx72aNU
-----END CERTIFICATE-----