Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer (raw, json)
Hash identifier:          ssJrqLG120wYc/Vfe4vA94QFBnD52YXQj1TwV64rSj0=
Subject key identifier:   C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B19143A92BCACB4B504797C76CAEF4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 95.131.120.0/23
                          IP: 95.131.124.0/22
                          IP: 185.154.28.0/22
                          IP: 2a02:c49:: -- 2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:91:43:a9:2b:ca:cb:4b:50:47:97:c7:6c:ae:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:6a:12:0f:d6:c5:0b:ee:2b:51:ea:00:b1:
                    7e:bb:54:b3:34:af:17:30:05:8e:03:bc:20:59:75:
                    50:e7:e4:70:a0:2b:af:20:0f:17:93:53:27:da:d4:
                    5e:41:b6:7c:5b:62:0c:0d:17:c6:a4:44:c8:96:1b:
                    1a:4b:bb:88:df:fa:47:ac:cf:f0:61:f3:70:1c:79:
                    1b:30:a7:1d:3b:77:38:0c:b4:8e:42:9a:64:26:79:
                    f5:4c:56:24:5f:1a:c5:5c:63:06:d6:3e:ca:0f:7d:
                    7b:d3:4f:88:2d:f4:10:f9:71:44:b2:65:96:81:05:
                    8f:25:2c:df:71:c7:8f:91:cd:3f:26:37:bc:ec:a1:
                    bb:33:c8:5b:83:c2:6f:fd:10:c6:55:2c:28:bc:13:
                    0b:b5:0a:a0:83:ec:8a:9f:dc:4b:68:2c:f3:26:7c:
                    04:c3:b4:cf:0d:cc:69:73:85:bf:b4:26:f8:6d:fc:
                    46:82:c9:98:0b:87:57:91:f0:34:b4:00:af:89:ba:
                    36:95:b6:4f:9a:b3:93:c1:50:7e:26:63:2a:b6:cb:
                    c0:9e:3b:65:60:0d:e5:a5:4c:dd:f0:93:6e:b4:82:
                    0c:ae:a4:f6:c0:84:ae:86:b6:c7:eb:9f:d5:48:7d:
                    04:b2:56:5c:1b:80:55:70:9d:bf:fa:3e:4d:a9:04:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.131.120.0/23
                  95.131.124.0/22
                  185.154.28.0/22
                IPv6:
                  2a02:c49::-2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         40:93:2d:63:54:da:c9:8f:70:43:4a:4c:5f:e6:12:e5:70:6a:
         00:7e:70:eb:fc:ba:6e:c6:ea:e9:3c:6b:b0:8e:19:2d:c7:e1:
         6f:f9:c8:ea:60:90:d7:6e:fe:a7:49:ff:80:c8:6f:6f:5e:b3:
         a4:19:35:ce:f4:a0:7d:72:81:d7:5c:4f:f1:e1:c3:7b:94:5e:
         ee:f3:db:0d:1f:ba:3e:98:3c:ac:99:6d:5c:03:62:d9:fc:6a:
         fa:af:31:bf:f9:2e:2f:73:93:ea:49:8c:3a:13:23:90:77:75:
         da:9d:5b:7a:56:aa:a4:ba:8f:6c:02:99:b0:79:de:b1:5a:2c:
         65:84:89:13:5a:e7:53:d7:15:2d:4d:a9:61:1b:ff:1e:22:21:
         9b:48:d0:84:9f:83:64:4b:86:18:e6:dd:82:e1:33:5c:c7:00:
         61:d6:f2:ee:21:d1:8f:b3:1d:4d:b3:8c:56:30:1b:1c:20:dd:
         46:e4:f3:b7:a6:9a:91:ab:b2:5a:12:d9:50:33:5d:63:a9:ff:
         2d:15:00:07:e5:bb:e5:ee:23:c3:51:99:1d:da:c1:9d:ac:3c:
         8b:c3:27:5a:78:59:70:c1:5f:a2:4b:b8:15:38:42:36:db:4c:
         07:9f:76:9e:e7:85:97:50:0b:f2:b1:2a:ad:69:ac:5d:d4:f0:
         51:76:f1:3b
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZQhsZFDqSvKy0tQR5fHbK70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDJmNTllY2E2NDI5M2QyYzkxNmU3YWJiMDllMDUyZTJjYjFjYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRqEg/WxQvuK1HqALF+u1SzNK8X
MAWOA7wgWXVQ5+RwoCuvIA8Xk1Mn2tReQbZ8W2IMDRfGpETIlhsaS7uI3/pHrM/w
YfNwHHkbMKcdO3c4DLSOQppkJnn1TFYkXxrFXGMG1j7KD31700+ILfQQ+XFEsmWW
gQWPJSzfccePkc0/Jje87KG7M8hbg8Jv/RDGVSwovBMLtQqgg+yKn9xLaCzzJnwE
w7TPDcxpc4W/tCb4bfxGgsmYC4dXkfA0tACvibo2lbZPmrOTwVB+JmMqtsvAnjtl
YA3lpUzd8JNutIIMrqT2wISuhrbH65/VSH0EslZcG4BVcJ2/+j5NqQSo5QIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFMAvWeymQpPSyRbnq7CeBS4ssctjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzU4YjIw
YS00NTJiLTRmMmItYWFiNS03ZDEzYzA3MmQ5NmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNThiMjBh
LTQ1MmItNGYyYi1hYWI1LTdkMTNjMDcyZDk2Yi8xL3dDOVo3S1pDazlMSkZ1ZXJz
SjRGTGl5eHkyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAYBAIAATASAwQBX4N4AwQCX4N8AwQCuZocMBYEAgACMBAwDgMF
ACoCDEkDBQQqAgxAMA0GCSqGSIb3DQEBCwUAA4IBAQBAky1jVNrJj3BDSkxf5hLl
cGoAfnDr/LpuxurpPGuwjhktx+Fv+cjqYJDXbv6nSf+AyG9vXrOkGTXO9KB9coHX
XE/x4cN7lF7u89sNH7o+mDysmW1cA2LZ/Gr6rzG/+S4vc5PqSYw6EyOQd3XanVt6
Vqqkuo9sApmwed6xWixlhIkTWudT1xUtTalhG/8eIiGbSNCEn4NkS4YY5t2C4TNc
xwBh1vLuIdGPsx1Ns4xWMBscIN1G5PO3ppqRq7JaEtlQM11jqf8tFQAH5bvl7iPD
UZkd2sGdrDyLwydaeFlwwV+iS7gVOEI220wHn3ae54WXUAvysSqtaaxd1PBRdvE7
-----END CERTIFICATE-----