Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
File:                     zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer (raw, json)
Hash identifier:          ci9y2xHli6KSdRe2LzIIwAWhIxPOSFH+usAFeGgtAB4=
Subject key identifier:   CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA10372450D4E224499D9F8295616D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35754
                          AS: 211753
                          IP: 87.254.32.0/19
                          IP: 185.247.120.0/22
                          IP: 2a03:d500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:10:37:24:50:d4:e2:24:49:9d:9f:82:95:61:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5b:40:a6:f7:fb:20:bd:65:41:11:a1:4b:50:
                    c8:1a:e7:66:8f:11:9f:2b:ee:cc:e8:bb:4a:e6:54:
                    26:3b:94:5a:1e:3f:72:38:af:19:7c:b1:6d:88:03:
                    75:91:bd:58:49:33:58:3c:07:14:c3:d7:12:56:97:
                    83:18:d1:23:78:ba:5e:93:14:dd:0a:2c:ba:64:16:
                    86:58:11:df:fe:f2:3b:74:f0:10:fb:d7:82:4a:a4:
                    a9:bb:06:14:57:ef:18:39:13:4b:73:fd:b0:ff:c9:
                    15:8a:4e:70:37:fc:62:77:66:87:26:0e:df:a7:2f:
                    aa:76:4d:25:9b:ca:0d:10:46:49:ab:2f:0b:4a:9e:
                    cd:82:41:fd:5b:67:1a:c0:fa:dd:75:3b:55:2a:f8:
                    e0:8a:6a:c4:08:e7:4c:19:e4:71:41:de:54:b9:2a:
                    71:c1:48:92:6c:5a:84:eb:f1:1c:9b:52:2c:ec:25:
                    b1:ea:b8:a0:b1:5b:ff:53:80:8e:1b:45:57:85:70:
                    a4:d4:bd:d4:62:3b:1f:77:91:d6:0c:55:40:56:22:
                    4c:55:d2:46:a3:8a:81:22:bb:21:48:a8:e2:ed:c5:
                    10:87:fa:22:8f:de:44:cd:c0:ef:d5:50:72:7a:45:
                    4d:e6:5f:9b:a8:92:2f:43:c7:2c:b1:87:39:bc:02:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.32.0/19
                  185.247.120.0/22
                IPv6:
                  2a03:d500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35754
                  211753

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:19:14:55:e5:4a:e4:8c:89:4e:c0:5a:0b:5e:b0:f8:2a:
         14:7d:10:c2:6a:c5:2f:5f:e7:38:43:c5:10:f2:a5:e1:be:61:
         83:72:f5:a6:95:c6:79:6e:bd:68:78:07:23:ea:01:89:1b:2d:
         7d:a9:3e:f5:26:f1:33:59:1c:03:76:e1:9c:3a:99:00:5c:da:
         39:e2:e0:97:78:0d:d0:cb:be:02:49:6c:3f:fc:d6:a0:e9:9e:
         a6:9d:37:15:f5:bf:76:35:50:dd:27:ff:bd:61:d3:13:fc:2a:
         e5:c0:82:fe:3d:30:7e:3f:d1:41:33:81:e3:66:fe:a8:3d:ac:
         ce:54:00:a2:c4:8c:4b:32:8b:27:2b:5d:77:51:34:73:fe:29:
         8f:5a:07:c4:9b:c9:4d:b2:47:e5:77:39:90:e1:67:0f:0c:63:
         81:aa:60:da:fe:41:de:c4:af:df:be:7c:47:c3:77:4b:f6:9a:
         5b:97:31:57:fa:54:44:41:87:43:75:42:d2:11:66:ce:da:b2:
         f0:20:79:d2:e7:54:5b:b2:5e:32:fb:42:a1:ff:0e:88:4b:9e:
         0b:14:48:90:56:29:55:3a:b7:a5:0b:ee:4c:00:6b:8e:a4:8f:
         da:c4:fe:58:50:41:c0:07:89:87:85:29:7b:7d:17:0f:70:d9:
         f6:e0:cc:40
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQf+hA3JFDU4iRJnZ+ClWFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2IwY2EyMjkxMjc2ZDdkMmEyZjhhNzA1MGY0YmE4MjdmZTkxMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61tApvf7IL1lQRGhS1DIGudmjxGf
K+7M6LtK5lQmO5RaHj9yOK8ZfLFtiAN1kb1YSTNYPAcUw9cSVpeDGNEjeLpekxTd
Ciy6ZBaGWBHf/vI7dPAQ+9eCSqSpuwYUV+8YORNLc/2w/8kVik5wN/xid2aHJg7f
py+qdk0lm8oNEEZJqy8LSp7NgkH9W2cawPrddTtVKvjgimrECOdMGeRxQd5UuSpx
wUiSbFqE6/Ecm1Is7CWx6rigsVv/U4COG0VXhXCk1L3UYjsfd5HWDFVAViJMVdJG
o4qBIrshSKji7cUQh/oij95EzcDv1VByekVN5l+bqJIvQ8cssYc5vALBPQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFMywyiKRJ219Ki+KcFD0uoJ/6RChMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2QzODM2
MC00ZDFmLTQyMmUtOTBhZS0wOGI5ZTExMDFhYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZDM4MzYw
LTRkMWYtNDIyZS05MGFlLTA4YjllMTEwMWFhNy8xL3pMREtJcEVuYlgwcUw0cHdV
UFM2Z25fcEVLRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQFV/4gAwQCufd4MA0EAgACMAcDBQAqA9UAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCLqgIDAzspMA0GCSqGSIb3DQEBCwUAA4IB
AQAmrBkUVeVK5IyJTsBaC16w+CoUfRDCasUvX+c4Q8UQ8qXhvmGDcvWmlcZ5br1o
eAcj6gGJGy19qT71JvEzWRwDduGcOpkAXNo54uCXeA3Qy74CSWw//Nag6Z6mnTcV
9b92NVDdJ/+9YdMT/CrlwIL+PTB+P9FBM4HjZv6oPazOVACixIxLMosnK113UTRz
/imPWgfEm8lNskfldzmQ4WcPDGOBqmDa/kHexK/fvnxHw3dL9ppblzFX+lREQYdD
dULSEWbO2rLwIHnS51Rbsl4y+0Kh/w6IS54LFEiQVilVOrelC+5MAGuOpI/axP5Y
UEHAB4mHhSl7fRcPcNn24MxA
-----END CERTIFICATE-----