Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
File:                     x2sILxfCC126JFzqbk5unGCZzvc.cer (raw, json)
Hash identifier:          MCkY2veFzaBTkZPMJ7AiZ+03XK6N03hcc4jGOhVtNcw=
Subject key identifier:   C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BE9F3FDF3626A4A41083BEB2A169C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201587
                          IP: 185.72.116.0/22
                          IP: 2a04:5980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:e9:f3:fd:f3:62:6a:4a:41:08:3b:eb:2a:16:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:c8:03:1d:65:96:14:06:7c:8d:e9:01:63:
                    5e:29:0a:71:af:fc:17:3c:a1:fa:e0:b2:91:a9:0e:
                    c6:04:af:60:2b:82:61:49:36:40:b1:b5:9d:3e:c3:
                    52:2d:db:45:46:7b:b6:92:e8:b3:8a:8f:58:32:4f:
                    d8:66:d3:39:96:7b:b8:55:0b:27:a4:fd:ca:5c:14:
                    e6:6f:ee:19:a5:df:0d:3f:f4:52:71:a7:cc:2a:ab:
                    d0:9d:70:d5:47:1b:c2:af:48:f8:f5:66:67:40:3a:
                    e6:26:83:e5:8f:24:c7:ec:94:64:0c:6b:a6:0f:66:
                    10:b7:74:40:a7:7b:69:e7:9f:a7:e6:2e:c9:14:3e:
                    22:3c:d0:2d:3d:04:50:88:aa:22:3a:ce:ef:73:5b:
                    db:45:be:4a:93:e1:09:fb:2d:c2:26:4d:c1:67:d3:
                    43:b0:2f:11:6f:47:0b:27:d1:4a:bb:23:3a:43:d1:
                    29:62:0a:b1:25:d5:13:ee:1c:9b:b0:e1:24:d7:30:
                    10:9b:9c:9f:74:25:5a:3f:0a:f4:34:9f:16:9c:0a:
                    12:9e:4e:14:17:77:6e:9d:95:99:5d:68:9d:c7:18:
                    87:08:54:87:09:93:5a:93:83:b8:5c:10:9d:87:77:
                    95:a6:7e:de:36:20:3c:b7:e3:60:d6:4d:af:25:b4:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.72.116.0/22
                IPv6:
                  2a04:5980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201587

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:79:b8:03:da:9e:b2:85:65:be:d2:c2:b3:2d:07:7a:24:
         29:6c:10:58:00:f5:3b:cd:79:2d:dc:be:5e:99:20:2c:c4:c9:
         53:4e:6a:ca:62:18:3e:fa:4f:24:3a:bb:7d:a1:9c:f9:ac:39:
         dd:9c:9a:99:49:5f:87:e6:e3:dd:36:c3:c8:22:70:11:f0:98:
         42:3e:70:ba:3c:dc:ed:9e:59:be:1b:19:f9:fc:f5:cf:40:20:
         a2:d1:cb:36:3f:68:dd:2f:0d:0f:91:b9:1b:5e:22:8d:c6:f5:
         5c:c7:72:a7:17:12:c7:85:62:2d:93:3d:bb:96:a2:5d:24:bd:
         29:07:73:b1:46:ca:1f:d4:22:42:05:f6:12:6b:02:85:0e:da:
         7d:0b:4c:a8:37:64:ef:d9:f0:05:ed:f2:e9:d5:06:6a:4d:ee:
         65:23:d3:df:00:5e:f0:57:14:0b:a5:59:e5:b3:56:5d:47:49:
         aa:b1:96:07:b0:ac:81:bf:a7:7f:82:cd:c5:f4:95:c6:bc:db:
         e2:dc:21:eb:b7:54:a5:8b:d0:9e:73:85:6e:a3:42:5a:dd:a2:
         da:00:dd:7e:b2:de:ba:70:8f:9d:22:ca:c5:79:e0:a4:90:5b:
         c5:85:a3:a5:5d:34:fc:e9:90:2c:8a:14:65:27:45:ce:02:38:
         b4:3b:41:91
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQma+nz/fNiakpBCDvrKhacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzZiMDgyZjE3YzIwYjVkYmEyNDVjZWE2ZTRlNmU5YzYwOTljZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/fIAx1llhQGfI3pAWNeKQpxr/wX
PKH64LKRqQ7GBK9gK4JhSTZAsbWdPsNSLdtFRnu2kuizio9YMk/YZtM5lnu4VQsn
pP3KXBTmb+4Zpd8NP/RScafMKqvQnXDVRxvCr0j49WZnQDrmJoPljyTH7JRkDGum
D2YQt3RAp3tp55+n5i7JFD4iPNAtPQRQiKoiOs7vc1vbRb5Kk+EJ+y3CJk3BZ9ND
sC8Rb0cLJ9FKuyM6Q9EpYgqxJdUT7hybsOEk1zAQm5yfdCVaPwr0NJ8WnAoSnk4U
F3dunZWZXWidxxiHCFSHCZNak4O4XBCdh3eVpn7eNiA8t+Ng1k2vJbTdqQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMdrCC8XwgtduiRc6m5Obpxgmc73MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2Q2YWQ5
Ni01NDc4LTQwZjctYjFhYy02YzcyMDkyYzBmMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvZDZhZDk2
LTU0NzgtNDBmNy1iMWFjLTZjNzIwOTJjMGYxOC8xL3gyc0lMeGZDQzEyNkpGenFi
azV1bkdDWnp2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUh0MA0EAgACMAcDBQMqBFmAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMTczANBgkqhkiG9w0BAQsFAAOCAQEAkyt5uAPanrKF
Zb7SwrMtB3okKWwQWAD1O815Ldy+XpkgLMTJU05qymIYPvpPJDq7faGc+aw53Zya
mUlfh+bj3TbDyCJwEfCYQj5wujzc7Z5ZvhsZ+fz1z0AgotHLNj9o3S8ND5G5G14i
jcb1XMdypxcSx4ViLZM9u5aiXSS9KQdzsUbKH9QiQgX2EmsChQ7afQtMqDdk79nw
Be3y6dUGak3uZSPT3wBe8FcUC6VZ5bNWXUdJqrGWB7Csgb+nf4LNxfSVxrzb4twh
67dUpYvQnnOFbqNCWt2i2gDdfrLeunCPnSLKxXngpJBbxYWjpV00/OmQLIoUZSdF
zgI4tDtBkQ==
-----END CERTIFICATE-----