Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
File:                     uQMr2xKMhuALIcd5WagBHEDQZQw.cer (raw, json)
Hash identifier:          JZpk0gO7xw7SMTcrocrE7bL8VtLEVAMvBc67zRqknlo=
Subject key identifier:   B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C6F794CD6532CC22833A3F9B2E1D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211878
                          IP: 45.152.88.0/22
                          IP: 2a0f:5100::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:6f:79:4c:d6:53:2c:c2:28:33:a3:f9:b2:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:75:57:5b:e1:04:40:e9:58:fb:81:84:e2:
                    ad:59:c4:87:60:89:f0:1a:b9:89:a8:1c:46:0d:df:
                    c2:04:12:50:3d:49:c0:2f:84:d1:57:21:21:e9:5f:
                    45:bb:6b:5f:45:46:a7:a3:e4:2e:ad:ec:94:08:9f:
                    07:d9:7c:92:e9:f7:53:c2:61:7b:ed:d5:86:3d:07:
                    27:f3:c6:e0:b4:76:c3:d3:0c:a0:cf:43:64:18:d3:
                    01:60:b5:ec:bc:94:be:42:49:47:5c:53:3a:01:37:
                    fd:f2:fa:da:1c:f7:7d:a9:b0:75:37:a8:f2:a8:65:
                    cc:d4:76:c1:3e:80:5b:ec:f5:c0:55:bb:ee:7b:a0:
                    f3:6f:ff:db:28:3f:8e:09:8c:b0:be:75:66:35:31:
                    0f:27:93:83:84:84:26:dd:cf:e6:80:e1:e7:88:c5:
                    97:b6:bb:af:0b:75:ef:7c:6d:5c:eb:cd:b3:51:ac:
                    1b:96:92:ce:82:80:fd:b2:cf:0a:2a:82:4e:d9:9d:
                    9b:59:d1:39:2b:3c:30:88:2d:af:18:35:0b:af:b1:
                    55:c3:ee:dc:e1:17:f7:94:3b:be:b5:a1:aa:47:26:
                    07:d6:76:d1:8f:07:fa:e7:f5:3e:34:13:56:c6:84:
                    62:d5:c0:1b:b7:d4:c8:24:30:9a:cc:73:6d:a3:f0:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.88.0/22
                IPv6:
                  2a0f:5100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211878

    Signature Algorithm: sha256WithRSAEncryption
         91:58:a1:81:68:05:d7:68:f8:ff:83:57:84:5c:c2:4a:90:22:
         2b:7a:48:31:8b:c5:32:dd:7a:5b:d9:4a:ab:64:b1:c8:a9:13:
         0b:7c:6c:d6:7c:be:04:bf:06:3c:e9:60:f1:29:2e:1c:f8:b6:
         a9:23:b0:46:3e:4c:6f:a5:f7:22:e3:83:69:e4:70:f9:e8:14:
         a6:c3:33:eb:ce:09:9a:3f:9c:39:79:b7:cc:91:54:a2:b7:b9:
         94:53:94:03:da:a3:a3:bc:8b:4f:02:ed:a1:d3:4d:d1:1f:b1:
         02:94:fa:3b:cf:40:3a:40:7f:87:76:8e:2d:e3:12:21:3c:70:
         a9:16:b2:db:17:5f:ba:88:1f:5f:d5:cf:38:6a:82:a5:8f:53:
         5c:75:82:90:f5:48:10:aa:34:74:c1:be:c3:e9:fd:cc:e4:1d:
         d2:e2:1d:c0:19:f7:82:0e:bc:7c:bd:22:bc:ec:3a:b5:80:9a:
         66:3d:bd:1b:e0:b1:94:06:59:8d:f5:c7:c1:bf:c1:87:1f:04:
         fa:93:9e:a0:55:3f:13:78:02:59:a1:11:6c:fd:32:05:70:86:
         12:2d:dd:d1:a1:f3:4a:53:fc:ba:5f:ce:32:30:ef:72:28:df:
         fb:61:44:21:b4:b5:7c:e7:47:cb:94:31:34:67:4d:b1:e2:bf:
         db:11:b9:64
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjG95TNZTLMIoM6P5suHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTAzMmJkYjEyOGM4NmUwMGIyMWM3Nzk1OWE4MDExYzQwZDA2NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W51V1vhBEDpWPuBhOKtWcSHYInw
GrmJqBxGDd/CBBJQPUnAL4TRVyEh6V9Fu2tfRUano+QureyUCJ8H2XyS6fdTwmF7
7dWGPQcn88bgtHbD0wygz0NkGNMBYLXsvJS+QklHXFM6ATf98vraHPd9qbB1N6jy
qGXM1HbBPoBb7PXAVbvue6Dzb//bKD+OCYywvnVmNTEPJ5ODhIQm3c/mgOHniMWX
truvC3XvfG1c682zUawblpLOgoD9ss8KKoJO2Z2bWdE5KzwwiC2vGDULr7FVw+7c
4Rf3lDu+taGqRyYH1nbRjwf65/U+NBNWxoRi1cAbt9TIJDCazHNto/D4DQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLkDK9sSjIbgCyHHeVmoARxA0GUMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2JjYjAz
ZC0xYzExLTQ1MTYtYTg4Zi1mZTg0NmY3NWQxNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvYmNiMDNk
LTFjMTEtNDUxNi1hODhmLWZlODQ2Zjc1ZDE3MC8xL3VRTXIyeEtNaHVBTEljZDVX
YWdCSEVEUVpRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZhYMA0EAgACMAcDBQMqD1EAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7pjANBgkqhkiG9w0BAQsFAAOCAQEAkVihgWgF12j4
/4NXhFzCSpAiK3pIMYvFMt16W9lKq2SxyKkTC3xs1ny+BL8GPOlg8SkuHPi2qSOw
Rj5Mb6X3IuODaeRw+egUpsMz684Jmj+cOXm3zJFUore5lFOUA9qjo7yLTwLtodNN
0R+xApT6O89AOkB/h3aOLeMSITxwqRay2xdfuogfX9XPOGqCpY9TXHWCkPVIEKo0
dMG+w+n9zOQd0uIdwBn3gg68fL0ivOw6tYCaZj29G+CxlAZZjfXHwb/Bhx8E+pOe
oFU/E3gCWaERbP0yBXCGEi3d0aHzSlP8ul/OMjDvcijf+2FEIbS1fOdHy5QxNGdN
seK/2xG5ZA==
-----END CERTIFICATE-----