Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer (raw, json)
Hash identifier:          xd8or0Ej+tmnZLCEKLb38lUz7kzfEOoHCEarrtg5x+s=
Subject key identifier:   C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC2F8F152CCA36E7F0DB3C851AF560
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.179.246.0/24
                          IP: 2a10:4d40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:2f:8f:15:2c:ca:36:e7:f0:db:3c:85:1a:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:ec:a8:67:87:35:99:a0:8d:8e:00:99:d2:
                    79:e7:7d:39:8c:65:e7:fa:1e:2d:73:6d:a0:8d:d8:
                    02:38:e4:84:46:81:8b:bf:f2:bd:57:77:55:a4:b5:
                    9d:53:ec:9b:50:89:88:8c:19:0a:00:bb:de:0e:c9:
                    67:c0:c3:69:4a:51:52:9b:43:fc:a4:66:87:0d:3b:
                    d3:b7:c6:88:3f:bf:99:d5:e4:0f:c2:fb:d4:8b:bc:
                    eb:f7:60:0c:b6:bf:04:95:be:a1:72:f4:fc:37:40:
                    94:60:38:d3:42:a6:1a:e0:2e:43:bc:db:e0:c6:1f:
                    32:04:6e:73:ee:f8:82:34:3d:97:a4:07:43:32:10:
                    43:bf:d0:85:46:6a:33:74:23:ac:12:cf:70:e3:79:
                    d2:e2:9b:ad:73:36:36:db:a4:f1:85:7c:02:a9:ac:
                    e4:90:be:f7:84:46:07:ed:98:ab:18:a0:be:67:13:
                    f5:7b:55:20:e1:de:85:df:c9:3d:30:c6:1d:19:4f:
                    8a:cf:87:55:87:df:6f:dd:d1:0a:d9:7e:17:15:6d:
                    60:3d:61:06:0f:55:fb:8c:ce:4b:9d:fa:1d:56:0b:
                    56:05:8f:a2:f4:2d:23:ce:8f:9f:44:1f:13:a7:b6:
                    87:cc:5d:3b:2b:e2:ce:c7:86:aa:fd:5d:4e:f4:e3:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.246.0/24
                IPv6:
                  2a10:4d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:56:ed:02:f4:0b:5f:ab:da:38:df:97:80:53:46:ed:86:
         56:bb:62:f4:2c:af:96:7f:e2:50:11:78:0a:c0:76:25:3e:22:
         a2:cc:09:6c:10:b6:be:2a:e2:a7:0c:08:b7:ba:a5:71:15:d6:
         33:a5:de:b8:af:82:d7:c4:4b:0a:1e:9a:a5:d2:33:79:c6:9d:
         b7:63:69:1f:17:3f:03:a8:9a:b4:cf:5b:af:04:98:9a:c9:47:
         5d:41:49:e9:1e:b1:fa:14:7f:0b:84:64:89:12:9a:ed:47:ad:
         93:92:55:d6:66:30:ff:9c:4d:14:86:7f:ab:af:79:09:76:37:
         cc:ae:8d:d9:e6:71:99:52:1d:0d:03:aa:76:00:89:9c:32:62:
         a1:f3:c5:f2:bb:9b:c6:22:60:fd:92:c9:d7:d5:cf:39:08:c9:
         1c:bc:94:34:51:ed:e1:0a:95:03:6a:1e:c3:3d:b7:eb:2b:b0:
         f4:a3:81:ba:78:23:e2:15:3c:c9:93:bc:03:94:3a:3d:0f:a8:
         c3:7c:b6:d5:0f:b6:27:51:40:f1:2e:77:aa:8b:d5:4d:b1:75:
         0a:b9:e4:19:f5:cc:f7:ce:74:2e:86:30:d1:88:a4:b3:fa:af:
         f1:8f:23:a3:45:49:2c:8d:95:56:dd:74:89:da:2e:76:c2:dc:
         7a:60:4b:3f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQi/C+PFSzKNufw2zyFGvVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE2NzRmZWU1NTU2NzI4MTc1ZWZiNTZlYWE4Yjk5ZjM4MTVhZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwbsqGeHNZmgjY4AmdJ55305jGXn
+h4tc22gjdgCOOSERoGLv/K9V3dVpLWdU+ybUImIjBkKALveDslnwMNpSlFSm0P8
pGaHDTvTt8aIP7+Z1eQPwvvUi7zr92AMtr8Elb6hcvT8N0CUYDjTQqYa4C5DvNvg
xh8yBG5z7viCND2XpAdDMhBDv9CFRmozdCOsEs9w43nS4putczY226TxhXwCqazk
kL73hEYH7ZirGKC+ZxP1e1Ug4d6F38k9MMYdGU+Kz4dVh99v3dEK2X4XFW1gPWEG
D1X7jM5LnfodVgtWBY+i9C0jzo+fRB8Tp7aHzF07K+LOx4aq/V1O9OMtNQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMUWdP7lVWcoF177VuqouZ84Fa+nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzVmYjA4
OS0yNTg5LTRjNzEtYjAyNi0zY2JlMWFmM2I4MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNWZiMDg5
LTI1ODktNGM3MS1iMDI2LTNjYmUxYWYzYjgyYy8xL3hSWjBfdVZWWnlnWFh2dFc2
cWk1bnpnVnI2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAubP2MA0EAgACMAcDBQMqEE1AMA0GCSqGSIb3
DQEBCwUAA4IBAQCcS1btAvQLX6vaON+XgFNG7YZWu2L0LK+Wf+JQEXgKwHYlPiKi
zAlsELa+KuKnDAi3uqVxFdYzpd64r4LXxEsKHpql0jN5xp23Y2kfFz8DqJq0z1uv
BJiayUddQUnpHrH6FH8LhGSJEprtR62TklXWZjD/nE0Uhn+rr3kJdjfMro3Z5nGZ
Uh0NA6p2AImcMmKh88Xyu5vGImD9ksnX1c85CMkcvJQ0Ue3hCpUDah7DPbfrK7D0
o4G6eCPiFTzJk7wDlDo9D6jDfLbVD7YnUUDxLneqi9VNsXUKueQZ9cz3znQuhjDR
iKSz+q/xjyOjRUksjZVW3XSJ2i52wtx6YEs/
-----END CERTIFICATE-----