Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
File:                     K9LDcoTYRCbwXjJbawR61c8_5PI.cer (raw, json)
Hash identifier:          dpI25LLloeDjYloZKpU5fclQRbdkV2vSA5sGJ+5CVS0=
Subject key identifier:   2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194222004169993EB47D163D6641391932D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.23.180.0/22
                          IP: 2a05:a300::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:04:16:99:93:eb:47:d1:63:d6:64:13:91:93:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:93:62:f2:d3:ed:d3:a1:6c:db:1a:da:7c:
                    27:01:25:9a:7a:33:a0:b6:a6:9b:20:13:dd:0b:be:
                    56:1b:2b:5f:34:c0:40:11:c0:eb:3a:b9:86:ed:f5:
                    70:82:a3:3a:aa:ea:95:c9:7b:f5:96:77:93:7a:ed:
                    2e:ef:65:b4:07:37:77:02:f6:76:72:43:b6:16:24:
                    0e:a2:f7:c1:2f:03:a6:5b:8a:51:a0:84:37:08:4b:
                    e5:9b:ee:b1:39:86:04:45:62:bd:70:08:e4:c9:38:
                    eb:b0:97:08:5a:5a:ce:df:d1:f0:d9:33:11:3e:e8:
                    7f:5c:5f:01:74:8c:cc:b5:88:10:a7:aa:83:67:f4:
                    a1:9e:27:d6:b7:5e:14:df:b6:b6:b6:3c:73:46:95:
                    87:18:c7:8b:0e:19:51:cd:77:52:85:3d:69:74:ee:
                    6e:cd:43:c8:f8:01:32:e2:e7:92:a6:b4:c2:25:fc:
                    36:2a:78:22:d9:69:56:a0:7b:45:cd:df:03:db:22:
                    7c:ea:1b:29:32:4d:1b:5c:a6:1f:2a:55:9e:3f:ac:
                    77:42:9e:22:d2:2e:c5:b4:60:a3:9e:61:cc:9d:0c:
                    a4:6b:3b:0d:37:ac:0f:a0:8b:2f:ea:76:82:75:11:
                    f2:01:5f:13:7e:26:42:31:0d:e4:cf:2c:65:65:3c:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.180.0/22
                IPv6:
                  2a05:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:49:18:da:92:90:cb:8f:d7:6f:3a:24:78:c3:76:4d:40:a6:
         43:61:c1:02:4a:17:96:f9:9a:17:7f:93:2b:57:97:2d:6f:29:
         de:e3:80:57:5b:95:e4:08:66:99:4d:d6:8b:79:b2:6d:42:7f:
         30:47:5c:b8:b7:fe:e6:51:24:8b:78:a3:2d:2f:b7:7f:4a:77:
         45:76:43:3a:6a:0a:29:61:e5:e9:fe:c0:9e:a8:12:0a:b5:62:
         f1:dc:ad:64:46:c7:94:ab:3d:b3:64:8b:c0:9c:e3:3d:ff:8e:
         59:98:8e:79:f6:65:39:aa:6a:4a:b0:8a:36:f6:bb:f1:f2:5e:
         3d:64:87:f5:c2:3c:8a:43:d6:f6:91:3f:00:ff:2c:04:e5:56:
         af:4b:60:8a:ca:be:78:e7:5a:6a:04:27:a7:6e:e1:0b:00:c6:
         7a:f5:b5:ff:58:05:e6:30:78:55:8f:64:70:b0:34:fb:49:93:
         8b:47:ce:17:f3:07:fd:a5:e3:41:6f:a8:7d:4e:bc:af:d5:0f:
         e5:6a:d3:d6:d7:76:d8:4a:0c:c4:34:a5:5a:38:64:7c:e9:f7:
         70:c9:4e:95:12:e2:54:b0:87:cf:9f:a2:90:58:7d:15:f3:57:
         36:51:42:29:9d:34:ae:a7:90:bb:0c:4a:b0:c5:ec:13:38:c2:
         6f:d2:22:c7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQiIAQWmZPrR9Fj1mQTkZMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQyYzM3Mjg0ZDg0NDI2ZjA1ZTMyNWI2YjA0N2FkNWNmM2ZlNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LmTYvLT7dOhbNsa2nwnASWaejOg
tqabIBPdC75WGytfNMBAEcDrOrmG7fVwgqM6quqVyXv1lneTeu0u72W0Bzd3AvZ2
ckO2FiQOovfBLwOmW4pRoIQ3CEvlm+6xOYYERWK9cAjkyTjrsJcIWlrO39Hw2TMR
Puh/XF8BdIzMtYgQp6qDZ/ShnifWt14U37a2tjxzRpWHGMeLDhlRzXdShT1pdO5u
zUPI+AEy4ueSprTCJfw2Kngi2WlWoHtFzd8D2yJ86hspMk0bXKYfKlWeP6x3Qp4i
0i7FtGCjnmHMnQykazsNN6wPoIsv6naCdRHyAV8TfiZCMQ3kzyxlZTzrDQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCvSw3KE2EQm8F4yW2sEetXPP+TyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2M0NjRk
Ni0wY2JkLTRlZmQtOThhYy01M2Q5ZDNhNDRmY2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvYzQ2NGQ2
LTBjYmQtNGVmZC05OGFjLTUzZDlkM2E0NGZjZi8xL0s5TERjb1RZUkNid1hqSmJh
d1I2MWM4XzVQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRe0MA0EAgACMAcDBQMqBaMAMA0GCSqGSIb3
DQEBCwUAA4IBAQBmSRjakpDLj9dvOiR4w3ZNQKZDYcECSheW+ZoXf5MrV5ctbyne
44BXW5XkCGaZTdaLebJtQn8wR1y4t/7mUSSLeKMtL7d/SndFdkM6agopYeXp/sCe
qBIKtWLx3K1kRseUqz2zZIvAnOM9/45ZmI559mU5qmpKsIo29rvx8l49ZIf1wjyK
Q9b2kT8A/ywE5VavS2CKyr5451pqBCenbuELAMZ69bX/WAXmMHhVj2RwsDT7SZOL
R84X8wf9peNBb6h9Tryv1Q/latPW13bYSgzENKVaOGR86fdwyU6VEuJUsIfPn6KQ
WH0V81c2UUIpnTSup5C7DEqwxewTOMJv0iLH
-----END CERTIFICATE-----