Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
File:                     xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer (raw, json)
Hash identifier:          kOx1YiXBZQuIkdUWfOWCxE48b3Ox4LvZUI14BZ/WaHU=
Subject key identifier:   C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B3B1A056900634C070563B6F77503
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 31.24.216.0/21
                          IP: 91.209.144.0/24
                          IP: 185.4.240.0/22
                          IP: 2a02:7140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:3b:1a:05:69:00:63:4c:07:05:63:b6:f7:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:f6:7f:ec:68:85:c1:5f:e1:d6:8d:58:4a:
                    42:0c:32:b2:62:50:79:7e:74:18:b7:8f:76:f2:0d:
                    dd:ca:4e:18:23:fb:42:a5:21:76:ba:1b:00:cf:a4:
                    6f:60:10:1d:96:d1:6c:35:a5:58:7a:58:1f:dd:a7:
                    37:65:62:cc:f5:31:4d:16:3a:bb:7e:bd:c0:cb:33:
                    85:f6:49:bf:a0:b1:a0:82:82:06:ea:27:f1:c3:99:
                    ff:4e:7d:e6:64:03:65:2f:cd:7a:db:2c:e4:d6:68:
                    18:27:86:a2:8e:e0:b8:95:e6:f6:4d:c0:32:15:54:
                    5b:ec:c2:86:f2:98:bd:33:c0:95:9b:43:ec:5b:da:
                    c0:a5:2b:a0:8a:90:a3:99:5d:5a:82:00:c3:89:89:
                    06:7f:ec:13:4b:cb:59:60:3c:86:80:79:5c:5d:9e:
                    89:a2:7e:fa:3f:34:c7:68:9d:9f:bf:9a:82:38:65:
                    07:ee:ca:10:be:61:f2:fa:e2:aa:a3:93:b0:80:f2:
                    53:57:92:35:01:7b:af:64:79:b3:ca:88:5c:e2:2d:
                    5e:7e:c9:d0:0d:a3:12:a4:65:ff:74:f4:00:6d:48:
                    18:1e:fa:a9:ef:55:53:25:3f:e8:e4:76:50:ba:f9:
                    ce:46:c1:9d:03:83:02:6e:dd:4d:a3:68:b2:6c:74:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.216.0/21
                  91.209.144.0/24
                  185.4.240.0/22
                IPv6:
                  2a02:7140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:ee:80:1c:92:a8:93:61:6a:5e:28:21:af:12:a8:2b:ab:
         11:20:26:e1:23:9a:ed:c3:95:9e:47:2f:50:65:6e:a5:4d:61:
         d9:f9:7a:86:5a:34:a7:ce:0f:64:9e:19:ac:ab:79:fc:fd:34:
         61:bc:3d:63:b2:e4:d5:cd:cc:c0:a0:71:e1:0e:bb:65:dc:48:
         2e:25:83:65:cb:f0:15:c5:8d:e1:a8:6a:99:ce:cb:1c:fb:65:
         84:50:f7:56:23:6e:16:30:e2:d2:78:e5:b9:b4:30:9c:a1:2b:
         e2:0c:fd:b0:72:eb:ce:91:d2:61:2e:37:ff:86:64:f5:0b:09:
         0c:08:18:09:7a:23:f8:ad:6c:41:45:80:0f:d5:e7:aa:c8:0f:
         50:89:cd:12:4d:85:2b:a7:40:8b:dd:13:78:7f:76:b4:2b:bd:
         d7:50:80:e9:64:aa:d7:a1:b2:15:36:9f:02:56:94:bf:28:48:
         44:2c:a2:fa:9e:15:fb:33:85:93:53:5b:1b:8d:89:9f:d8:95:
         80:84:92:93:cc:66:fe:c9:b3:25:1a:ca:d7:e5:3d:d8:30:33:
         ba:e1:d7:c4:46:a1:8b:45:ca:08:fc:d8:93:13:d3:d6:a0:3f:
         ed:30:50:d3:49:64:10:0c:e0:5d:d5:28:7e:91:6d:ef:19:85:
         6c:9a:27:fa
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQmazsaBWkAY0wHBWO293UDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjEzNWU0YWNmOTYxMzljZTVmZjJjZmRkOTVmNTVhODE3NmQ3MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV32f+xohcFf4daNWEpCDDKyYlB5
fnQYt4928g3dyk4YI/tCpSF2uhsAz6RvYBAdltFsNaVYelgf3ac3ZWLM9TFNFjq7
fr3AyzOF9km/oLGggoIG6ifxw5n/Tn3mZANlL8162yzk1mgYJ4aijuC4leb2TcAy
FVRb7MKG8pi9M8CVm0PsW9rApSugipCjmV1aggDDiYkGf+wTS8tZYDyGgHlcXZ6J
on76PzTHaJ2fv5qCOGUH7soQvmHy+uKqo5OwgPJTV5I1AXuvZHmzyohc4i1efsnQ
DaMSpGX/dPQAbUgYHvqp71VTJT/o5HZQuvnORsGdA4MCbt1No2iybHQmiwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFMYTXkrPlhOc5f8s/dlfVagXbXMkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzZmNmYw
ZC1lNmRmLTRmMmItODBkZi00NjZiMGNkOGI3NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNmY2ZjBk
LWU2ZGYtNGYyYi04MGRmLTQ2NmIwY2Q4Yjc1YS8xL3hoTmVTcy1XRTV6bF95ejky
VjlWcUJkdGN5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDHxjYAwQAW9GQAwQCuQTwMA0EAgACMAcDBQAq
AnFAMA0GCSqGSIb3DQEBCwUAA4IBAQBtZe6AHJKok2FqXighrxKoK6sRICbhI5rt
w5WeRy9QZW6lTWHZ+XqGWjSnzg9knhmsq3n8/TRhvD1jsuTVzczAoHHhDrtl3Egu
JYNly/AVxY3hqGqZzssc+2WEUPdWI24WMOLSeOW5tDCcoSviDP2wcuvOkdJhLjf/
hmT1CwkMCBgJeiP4rWxBRYAP1eeqyA9Qic0STYUrp0CL3RN4f3a0K73XUIDpZKrX
obIVNp8CVpS/KEhELKL6nhX7M4WTU1sbjYmf2JWAhJKTzGb+ybMlGsrX5T3YMDO6
4dfERqGLRcoI/NiTE9PWoD/tMFDTSWQQDOBd1Sh+kW3vGYVsmif6
-----END CERTIFICATE-----