Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
File:                     vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer (raw, json)
Hash identifier:          PkH5fiIS5ssFw9AnpcqXeFFTojcJgtFxDffNrlu2B5M=
Subject key identifier:   BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EE9312BFC308F6EDDEB570117091B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.22.84.0/22
                          IP: 2a00:57a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:e9:31:2b:fc:30:8f:6e:dd:eb:57:01:17:09:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:70:e6:04:9e:27:5a:32:0f:68:b2:b7:bc:
                    54:2a:83:df:80:26:2e:01:d2:56:cf:5f:5a:73:00:
                    24:b0:2d:d1:ba:ed:48:78:1c:02:30:67:5a:9d:86:
                    b1:c9:c1:94:6e:88:25:6a:95:78:95:48:59:9a:87:
                    9f:ac:32:bb:3d:af:51:43:2e:f6:3d:d9:95:b9:37:
                    d8:d8:3f:8f:3b:94:6e:d5:ae:36:ac:bb:ad:39:a6:
                    3c:5d:9d:11:0a:ea:0c:d7:b5:36:f6:34:bf:86:ab:
                    cc:72:c9:da:81:fb:c4:9f:c8:d4:61:8b:b1:92:b7:
                    4a:8d:50:ac:bb:7a:c2:5d:73:a8:6c:29:7a:e2:35:
                    e8:cb:ed:73:a7:68:2e:7a:9c:19:5d:a3:41:cb:da:
                    79:4c:38:20:c6:40:d3:36:2b:80:f9:48:5a:ae:8a:
                    87:38:61:7d:7c:02:af:48:77:2b:d2:da:2f:c5:58:
                    38:2d:08:3f:45:87:03:dd:9a:52:f5:43:49:e9:72:
                    dc:48:39:e8:a4:07:7c:ce:82:85:bc:e9:9d:16:6c:
                    b2:c5:66:88:08:68:b9:e1:55:da:8d:d1:f0:1d:fc:
                    02:09:59:06:0a:36:80:61:a3:e1:7b:98:46:e8:5d:
                    92:15:49:48:ce:24:38:3f:5d:c8:da:c3:41:16:db:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.22.84.0/22
                IPv6:
                  2a00:57a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:45:0e:bc:84:a2:9b:00:5d:f2:d5:27:1e:ea:0c:3c:86:
         65:86:d4:5e:58:ee:3d:55:21:46:83:38:7a:a1:f6:ec:8c:70:
         c1:86:c4:cf:30:b1:55:4d:3d:61:c7:00:ef:f4:94:2d:2b:74:
         62:0e:6a:6c:8c:93:d1:9b:9e:b9:b3:42:6c:ed:dd:77:09:e1:
         9e:af:ae:65:9d:37:c1:60:f2:f9:4d:33:f3:87:68:ef:13:3c:
         17:56:51:83:cf:d8:8a:63:85:5c:29:07:23:8a:a3:63:93:e7:
         ad:42:c5:25:e6:45:52:eb:8f:02:2f:88:2d:12:65:5e:38:5b:
         bc:1b:d5:86:5c:50:0f:51:bb:dc:45:03:5c:75:be:3c:f5:42:
         99:1f:e4:32:5c:6d:d8:f3:1e:92:3c:bf:02:72:aa:7a:ac:b1:
         03:06:36:c9:09:48:bd:8f:5c:be:47:18:96:55:b0:fc:09:ba:
         98:13:03:a2:da:1b:ac:98:7d:56:7f:64:a2:55:91:39:e9:1d:
         97:5d:32:4f:5c:79:c0:48:39:3b:ed:b9:3f:37:a6:9e:ee:92:
         ca:03:dc:21:95:e3:32:9d:8c:06:96:9f:97:36:af:27:e3:82:
         69:a7:db:52:51:f1:14:57:14:8a:a6:ed:a8:e4:dd:80:73:77:
         2b:da:04:63
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQljukxK/wwj27d61cBFwkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzc3Y2I4OTY0YzRlZDYwMTQ0OGE0MzY4Njg1YmYwOGRjYjVlMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKpw5gSeJ1oyD2iyt7xUKoPfgCYu
AdJWz19acwAksC3Ruu1IeBwCMGdanYaxycGUboglapV4lUhZmoefrDK7Pa9RQy72
PdmVuTfY2D+PO5Ru1a42rLutOaY8XZ0RCuoM17U29jS/hqvMcsnagfvEn8jUYYux
krdKjVCsu3rCXXOobCl64jXoy+1zp2guepwZXaNBy9p5TDggxkDTNiuA+UharoqH
OGF9fAKvSHcr0tovxVg4LQg/RYcD3ZpS9UNJ6XLcSDnopAd8zoKFvOmdFmyyxWaI
CGi54VXajdHwHfwCCVkGCjaAYaPhe5hG6F2SFUlIziQ4P13I2sNBFtsjqwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLx3y4lkxO1gFEikNoaFvwjcteH0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2M3NWUx
Ni02NjQ3LTQwN2EtYTIwMS1kMDMyN2RmMDI2MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzc1ZTE2
LTY2NDctNDA3YS1hMjAxLWQwMzI3ZGYwMjYyOC8xL3ZIZkxpV1RFN1dBVVNLUTJo
b1dfQ055MTRmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRZUMA0EAgACMAcDBQAqAFegMA0GCSqGSIb3
DQEBCwUAA4IBAQCIL0UOvISimwBd8tUnHuoMPIZlhtReWO49VSFGgzh6ofbsjHDB
hsTPMLFVTT1hxwDv9JQtK3RiDmpsjJPRm565s0Js7d13CeGer65lnTfBYPL5TTPz
h2jvEzwXVlGDz9iKY4VcKQcjiqNjk+etQsUl5kVS648CL4gtEmVeOFu8G9WGXFAP
UbvcRQNcdb489UKZH+QyXG3Y8x6SPL8Ccqp6rLEDBjbJCUi9j1y+RxiWVbD8CbqY
EwOi2husmH1Wf2SiVZE56R2XXTJPXHnASDk77bk/N6ae7pLKA9whleMynYwGlp+X
Nq8n44Jpp9tSUfEUVxSKpu2o5N2Ac3cr2gRj
-----END CERTIFICATE-----