Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
File:                     yNWqcDQlCrGoeJrIbMDu87_J218.cer (raw, json)
Hash identifier:          X/GMrWf0nwwaIQ2HmJK9RhHzU2M+/2SSLP1qRZskeYY=
Subject key identifier:   C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B4A2CC634C79D9D8BCD5363FB0B0D5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:48:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 85.119.8.0/21
                          IP: 185.223.16.0/22
                          IP: 2a0c:6800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:a2:cc:63:4c:79:d9:d8:bc:d5:36:3f:b0:b0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:74:3e:5f:b4:37:e1:f6:bc:f3:b0:ac:8c:
                    4b:d9:8c:45:9e:90:f6:4a:b1:68:5c:07:ca:73:f3:
                    36:4b:ed:ae:77:b9:a9:fe:64:cc:21:05:fb:20:0e:
                    a2:19:2c:24:53:89:a9:c9:e6:c7:4c:46:72:2a:21:
                    13:fb:81:26:df:bc:b3:61:6a:65:ed:e3:51:27:98:
                    de:18:41:6a:8f:53:c9:39:24:36:4b:41:23:a5:28:
                    3f:b5:3c:71:bf:42:ab:f7:48:31:fd:13:de:40:36:
                    fc:1a:34:50:03:9a:e4:e8:85:97:8c:38:a0:5b:dc:
                    f0:f7:23:3b:0f:53:bd:3c:48:ff:4f:01:5b:ca:80:
                    79:0d:7f:97:bf:95:fc:b7:57:53:63:99:50:91:93:
                    81:22:ec:7c:17:bc:83:1d:fe:78:ef:9d:67:08:6f:
                    ac:5e:64:58:00:65:ef:97:24:93:f4:ae:cc:c9:4f:
                    8b:12:4f:f4:a5:d0:f5:a4:73:52:6b:cd:45:1a:6d:
                    7e:c2:87:68:c6:a8:6f:14:b3:b4:75:3a:d7:c6:38:
                    da:1c:f0:5f:14:c5:85:1c:6a:3b:5e:73:4d:50:ba:
                    bd:c9:43:7e:57:2c:2c:09:29:9c:0e:c5:63:5c:df:
                    be:8f:05:b2:da:5d:e0:b9:80:47:a6:6f:9b:6d:02:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.119.8.0/21
                  185.223.16.0/22
                IPv6:
                  2a0c:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:c7:e8:6c:b7:88:7c:36:15:51:81:76:22:7f:1e:d2:96:
         50:af:d7:5c:02:73:8a:a7:de:f0:ea:23:39:48:b1:db:24:6a:
         9b:6b:0c:51:d3:f8:c1:6f:6b:ac:3f:6e:3b:21:11:f2:7b:3b:
         6c:67:aa:fa:c0:98:47:7f:98:be:27:6c:f0:06:03:74:1c:8c:
         31:76:6d:9c:7a:2c:b3:1e:7b:c2:88:45:43:91:fe:45:36:bc:
         b4:3a:1c:34:fb:21:a4:e3:b5:52:d7:36:c0:f3:a4:81:e3:b2:
         2f:d4:52:00:00:8e:df:fd:26:76:7f:01:98:d2:fb:0b:88:45:
         72:3e:ed:5f:9d:e5:dc:4d:00:e4:e3:24:7c:bf:d0:94:cf:7f:
         41:9a:98:b8:a5:30:9a:04:44:5e:33:c5:5f:e1:c2:ef:e6:73:
         88:6d:09:33:42:96:91:8d:c7:23:fd:46:2d:a7:6e:f8:d0:58:
         7b:66:83:41:68:c4:d2:81:bd:6a:bb:40:fa:10:99:ba:58:5d:
         16:e2:b5:4e:b6:78:f4:5a:ad:77:d6:b1:49:49:88:55:bf:8f:
         fb:b2:48:1f:f3:52:09:34:f6:75:2e:18:cf:f5:ed:3a:14:21:
         a6:f6:f4:ce:18:94:16:55:24:f1:96:4b:bf:e5:a7:2e:e6:96:
         b6:c6:e8:d2
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQntKLMY0x52di81TY/sLDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGQ1YWE3MDM0MjUwYWIxYTg3ODlhYzg2Y2MwZWVmM2JmYzlkYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PR0Pl+0N+H2vPOwrIxL2YxFnpD2
SrFoXAfKc/M2S+2ud7mp/mTMIQX7IA6iGSwkU4mpyebHTEZyKiET+4Em37yzYWpl
7eNRJ5jeGEFqj1PJOSQ2S0EjpSg/tTxxv0Kr90gx/RPeQDb8GjRQA5rk6IWXjDig
W9zw9yM7D1O9PEj/TwFbyoB5DX+Xv5X8t1dTY5lQkZOBIux8F7yDHf54751nCG+s
XmRYAGXvlyST9K7MyU+LEk/0pdD1pHNSa81FGm1+wodoxqhvFLO0dTrXxjjaHPBf
FMWFHGo7XnNNULq9yUN+VywsCSmcDsVjXN++jwWy2l3guYBHpm+bbQLB2wIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFMjVqnA0JQqxqHiayGzA7vO/ydtfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzJkNDkw
Yy02ZmY4LTQ3MWQtOTdkMi0yZDcyZjIzMTkzZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMmQ0OTBj
LTZmZjgtNDcxZC05N2QyLTJkNzJmMjMxOTNkYi8xL3lOV3FjRFFsQ3JHb2VKckli
TUR1ODdfSjIxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDVXcIAwQCud8QMA0EAgACMAcDBQAqDGgAMA0G
CSqGSIb3DQEBCwUAA4IBAQA/fMfobLeIfDYVUYF2In8e0pZQr9dcAnOKp97w6iM5
SLHbJGqbawxR0/jBb2usP247IRHyeztsZ6r6wJhHf5i+J2zwBgN0HIwxdm2ceiyz
HnvCiEVDkf5FNry0Ohw0+yGk47VS1zbA86SB47Iv1FIAAI7f/SZ2fwGY0vsLiEVy
Pu1fneXcTQDk4yR8v9CUz39Bmpi4pTCaBEReM8Vf4cLv5nOIbQkzQpaRjccj/UYt
p2740Fh7ZoNBaMTSgb1qu0D6EJm6WF0W4rVOtnj0Wq131rFJSYhVv4/7skgf81IJ
NPZ1LhjP9e06FCGm9vTOGJQWVSTxlku/5acu5pa2xujS
-----END CERTIFICATE-----