Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
File:                     PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer (raw, json)
Hash identifier:          I31gf8j1HQu7ZyoZ/zyiz12Z4Yr4/Kqp3U46zsRmUo0=
Subject key identifier:   3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C799117B43981A6C8968F8A51605D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199326
                          IP: 2a13:7700::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:79:91:17:b4:39:81:a6:c8:96:8f:8a:51:60:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:47:5b:29:39:3e:9e:6d:4f:32:27:f6:66:
                    cd:4f:2b:aa:30:86:a0:5a:4a:ed:2a:3b:bb:b5:9f:
                    42:63:d4:ee:7c:b4:b8:40:78:5b:e8:07:e3:4f:5f:
                    9b:5a:a8:4b:4b:50:ac:14:13:03:02:06:5c:e7:9f:
                    cf:37:c6:e5:57:e9:4b:a5:4d:ac:25:e4:9f:7b:b5:
                    6f:9d:d4:b9:22:36:f6:34:ad:1f:43:3b:52:8e:61:
                    a6:c5:df:09:2a:af:b5:0b:36:20:11:19:c0:2e:c8:
                    13:9c:0c:2f:e7:d4:49:7b:e4:b7:25:3d:3e:99:fe:
                    49:38:b2:4b:0f:9b:3f:5f:b6:26:9c:aa:d1:03:dc:
                    9c:da:44:cb:c1:5a:c3:63:5c:b0:ce:dc:2f:9b:93:
                    68:da:24:55:7a:62:5b:b0:77:83:43:ea:aa:3b:3f:
                    c9:79:ff:05:fb:da:b0:f8:f2:2b:06:1a:20:45:07:
                    ff:cb:27:b0:91:b5:e7:55:85:65:ec:37:47:13:56:
                    96:57:6e:09:a4:ae:e9:04:34:36:7b:51:08:52:ef:
                    9b:7d:fa:b4:af:29:ca:f7:1b:5a:ba:94:ce:5d:29:
                    bc:99:bd:2a:a6:c6:63:5b:d4:0b:33:7e:bf:25:4b:
                    ff:bc:1d:19:d9:c8:51:e4:3c:54:1c:b3:ca:c2:33:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199326

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:05:60:57:0c:75:ce:38:d4:7f:f8:1c:19:e1:fb:f9:65:
         51:ea:b9:db:b7:00:25:8a:96:67:b1:18:2c:9c:d8:09:1e:56:
         2e:bf:21:d9:2f:6d:95:82:c0:82:c2:3b:47:bc:2e:a4:65:af:
         1a:38:28:1d:51:90:3f:3e:a9:a7:88:0b:22:c3:68:6b:fa:ac:
         d9:b9:6d:0e:e2:d8:3c:bf:fc:af:66:af:4c:ef:4e:d6:fc:6a:
         a7:10:5f:d4:02:88:9d:fa:aa:03:aa:33:84:63:12:9e:1e:27:
         4b:03:84:97:54:07:f1:f3:b7:31:cd:5e:ba:28:b7:5e:9c:8b:
         0f:ec:01:47:a8:e1:e8:b2:3b:fc:3a:15:4c:ca:b5:78:13:72:
         41:5f:c6:d2:f5:6d:55:ea:0f:a3:a3:60:50:ee:11:56:bc:53:
         15:9d:42:62:48:0e:32:b2:0d:a3:fe:bb:fa:69:44:8a:d7:c0:
         d4:cb:33:f0:26:0c:c7:28:b2:11:be:06:be:7a:36:7d:c7:1a:
         0b:34:52:4d:10:df:31:77:e9:25:a7:88:0e:39:cf:f9:bf:88:
         88:84:f4:81:d6:ca:f2:38:00:73:a5:13:fa:8b:fc:c9:0e:65:
         80:a4:bd:75:d4:2e:fa:d4:df:a6:bc:a3:95:ba:9e:01:f2:ee:
         1a:74:27:b2
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQfjHmRF7Q5gabIlo+KUWBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDZjMjk1ODE0NWY0NWZhZDVkYWVlYjM4Yjc1YjUyYzA5NjYxMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkNHWyk5Pp5tTzIn9mbNTyuqMIag
WkrtKju7tZ9CY9TufLS4QHhb6AfjT1+bWqhLS1CsFBMDAgZc55/PN8blV+lLpU2s
JeSfe7VvndS5Ijb2NK0fQztSjmGmxd8JKq+1CzYgERnALsgTnAwv59RJe+S3JT0+
mf5JOLJLD5s/X7YmnKrRA9yc2kTLwVrDY1ywztwvm5No2iRVemJbsHeDQ+qqOz/J
ef8F+9qw+PIrBhogRQf/yyewkbXnVYVl7DdHE1aWV24JpK7pBDQ2e1EIUu+bffq0
rynK9xtaupTOXSm8mb0qpsZjW9QLM36/JUv/vB0Z2chR5DxUHLPKwjNkIwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFD1sKVgUX0X61drus4t1tSwJZhBGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzJhNTU3
NC03YjEyLTRkYTItYTA2NC01ZTFiMDc4ODkyM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMmE1NTc0
LTdiMTItNGRhMi1hMDY0LTVlMWIwNzg4OTIzYi8xL1BXd3BXQlJmUmZyVjJ1Nnpp
M1cxTEFsbUVFWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhN3ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDCp4wDQYJKoZIhvcNAQELBQADggEBAHrmBWBXDHXOONR/+BwZ4fv5ZVHqudu3
ACWKlmexGCyc2AkeVi6/IdkvbZWCwILCO0e8LqRlrxo4KB1RkD8+qaeICyLDaGv6
rNm5bQ7i2Dy//K9mr0zvTtb8aqcQX9QCiJ36qgOqM4RjEp4eJ0sDhJdUB/HztzHN
Xroot16ciw/sAUeo4eiyO/w6FUzKtXgTckFfxtL1bVXqD6OjYFDuEVa8UxWdQmJI
DjKyDaP+u/ppRIrXwNTLM/AmDMcoshG+Br56Nn3HGgs0Uk0Q3zF36SWniA45z/m/
iIiE9IHWyvI4AHOlE/qL/MkOZYCkvXXULvrU36a8o5W6ngHy7hp0J7I=
-----END CERTIFICATE-----