Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
File:                     8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer (raw, json)
Hash identifier:          3vUwPEFDQ8E6f5R/DZMR0RohzcyM3YKQw72e6pFry4Q=
Subject key identifier:   F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D70A96F98A7E76CE7CC95578AA8AAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.90.68.0/22
                          IP: 2a03:8660::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:0a:96:f9:8a:7e:76:ce:7c:c9:55:78:aa:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f324d0f47297680535eb2799189db888b4066782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:90:97:c1:94:92:b4:dd:f2:30:49:d2:e9:
                    e0:c9:ed:45:a5:2a:4c:ee:2b:cd:8a:e8:a0:79:c6:
                    0e:2f:a1:dc:09:0d:ac:6d:46:f6:25:b6:fd:b2:1c:
                    58:fa:e2:a0:33:6e:9d:25:20:6f:03:a6:17:1d:e0:
                    97:03:6b:b8:2d:f6:69:f7:a3:d9:b7:2f:a0:76:e0:
                    c1:8f:b5:fd:31:0b:3c:2b:de:2a:fd:4e:52:42:da:
                    cc:93:35:43:10:e9:83:a7:d1:65:aa:80:ba:41:b4:
                    76:02:59:26:23:60:5d:a4:c9:ec:23:6d:e9:5b:3c:
                    cf:06:c7:5b:75:5b:58:44:5e:3a:95:03:3d:a4:53:
                    da:1e:47:07:64:ff:70:72:b7:5b:11:12:88:6c:d6:
                    a1:f1:cc:63:a5:20:d0:e4:93:69:1a:50:da:b6:b2:
                    5e:51:11:51:2d:68:85:bc:df:36:18:ec:7c:46:af:
                    26:1d:0c:22:fa:e0:e2:9a:77:1c:b5:f1:dc:67:f6:
                    02:59:de:b8:f5:33:ce:de:e7:c6:79:da:e0:41:17:
                    24:1d:dd:cf:ec:aa:b4:b7:bc:a0:db:87:01:58:1c:
                    f8:0f:42:c1:38:81:05:04:16:7f:75:7c:6e:16:94:
                    3d:e3:3c:6a:53:e4:d9:38:55:b6:75:be:af:e4:93:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.68.0/22
                IPv6:
                  2a03:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:16:bd:ee:66:29:53:f4:75:7d:45:05:2d:dd:5d:59:68:1c:
         d1:43:32:f3:25:51:51:fe:00:c1:05:9c:f5:2f:60:d3:20:dd:
         b6:98:1e:4e:10:8d:37:1d:be:b0:84:a0:23:c6:fa:f2:34:2a:
         80:71:04:98:8b:37:d2:02:e6:32:af:84:2a:d2:a6:d3:4b:40:
         ab:7a:6c:b2:63:5d:10:98:ad:f7:9a:15:e2:6d:ac:49:1c:5e:
         15:1d:c6:3e:48:4d:e5:99:29:d0:04:2f:07:05:75:6f:0f:2b:
         9f:2a:32:d1:2e:cb:65:46:29:fa:fe:0f:8a:ba:0e:86:69:e7:
         a6:73:55:79:cf:d7:8a:e0:5e:90:1f:0c:05:b5:84:9b:e0:59:
         c5:01:48:53:4e:8e:4b:24:97:19:5f:18:a2:34:84:82:83:38:
         db:ce:8a:5a:a7:bd:ed:30:d5:6f:6e:84:da:9f:9d:e6:bd:88:
         08:b1:c8:20:84:22:b0:ad:b0:7a:9e:86:13:da:fd:68:ef:e1:
         b4:7a:1c:fb:66:59:cb:e6:dc:70:a8:b0:b8:76:ba:af:12:e2:
         be:ca:ba:41:9f:e8:45:92:42:9f:db:33:c9:3a:5c:4e:b7:d9:
         eb:08:41:8b:66:f3:20:9c:51:6a:b2:e9:9d:85:6f:4a:af:15:
         d6:4d:dc:d9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj1wqW+Yp+ds58yVV4qoqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzI0ZDBmNDcyOTc2ODA1MzVlYjI3OTkxODlkYjg4OGI0MDY2NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCeQl8GUkrTd8jBJ0ungye1FpSpM
7ivNiuigecYOL6HcCQ2sbUb2Jbb9shxY+uKgM26dJSBvA6YXHeCXA2u4LfZp96PZ
ty+gduDBj7X9MQs8K94q/U5SQtrMkzVDEOmDp9FlqoC6QbR2AlkmI2BdpMnsI23p
WzzPBsdbdVtYRF46lQM9pFPaHkcHZP9wcrdbERKIbNah8cxjpSDQ5JNpGlDatrJe
URFRLWiFvN82GOx8Rq8mHQwi+uDimncctfHcZ/YCWd649TPO3ufGedrgQRckHd3P
7Kq0t7yg24cBWBz4D0LBOIEFBBZ/dXxuFpQ94zxqU+TZOFW2db6v5JP5HQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPMk0PRyl2gFNesnmRiduIi0BmeCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzkwZDM2
Ni0yZmFiLTQ3ZTUtOTBiOS0wMjY1ZTVjZDY5NjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOTBkMzY2
LTJmYWItNDdlNS05MGI5LTAyNjVlNWNkNjk2Ni8xLzh5VFE5SEtYYUFVMTZ5ZVpH
SjI0aUxRR1o0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVpEMA0EAgACMAcDBQAqA4ZgMA0GCSqGSIb3
DQEBCwUAA4IBAQAQFr3uZilT9HV9RQUt3V1ZaBzRQzLzJVFR/gDBBZz1L2DTIN22
mB5OEI03Hb6whKAjxvryNCqAcQSYizfSAuYyr4Qq0qbTS0CremyyY10QmK33mhXi
baxJHF4VHcY+SE3lmSnQBC8HBXVvDyufKjLRLstlRin6/g+Kug6Gaeemc1V5z9eK
4F6QHwwFtYSb4FnFAUhTTo5LJJcZXxiiNISCgzjbzopap73tMNVvboTan53mvYgI
scgghCKwrbB6noYT2v1o7+G0ehz7ZlnL5txwqLC4drqvEuK+yrpBn+hFkkKf2zPJ
OlxOt9nrCEGLZvMgnFFqsumdhW9KrxXWTdzZ
-----END CERTIFICATE-----