Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.cer (raw, json)
Hash identifier:          KbZ7+qdO02L51BmNgPjkYcyaoVR4eALYy0eefpFqcB8=
Subject key identifier:   60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B2550A421571F4E3C05FFB693BFC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 81.30.98.0/24
                          IP: 2a13:9a00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:25:50:a4:21:57:1f:4e:3c:05:ff:b6:93:bf:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3e:02:e1:2d:f0:f6:38:8a:71:fc:e6:ff:58:
                    2a:c9:13:2e:a9:74:89:05:51:c9:f2:c4:3e:21:5a:
                    84:b9:04:da:bf:31:01:e3:fc:84:c5:21:bd:6a:34:
                    8a:d8:26:fe:24:05:8a:55:5a:0c:41:ca:55:91:dd:
                    87:61:92:df:2a:5c:49:91:bf:0f:f0:47:2e:70:4c:
                    7f:77:76:3c:0f:12:3f:45:0e:61:62:56:c0:ec:f4:
                    cd:79:2d:22:8e:cf:05:49:35:6c:2b:30:56:84:84:
                    98:85:10:c0:f1:64:f5:22:b3:8c:52:ba:88:d2:e9:
                    7c:1f:35:9c:85:91:83:63:8e:e1:6a:1c:9b:33:14:
                    aa:72:65:c3:eb:bb:26:4e:ac:36:06:b6:7c:7e:8d:
                    d9:d6:f5:68:d7:00:a3:5c:ee:05:9f:0c:2d:3b:3a:
                    79:f1:d0:d6:2a:c6:b9:64:9d:9c:cf:88:83:4f:59:
                    5d:65:fa:ba:35:6a:aa:25:19:d7:51:cf:25:2f:45:
                    99:6a:9f:f4:21:c5:ef:89:19:06:0b:1f:36:7e:86:
                    73:43:6c:0f:a1:ac:ff:db:b8:d0:b7:79:42:8a:78:
                    9a:a2:72:05:1d:fe:08:14:e3:3c:8b:9e:91:b3:47:
                    9f:d1:10:7b:5f:dc:22:7d:40:d7:5f:80:d6:6b:b6:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.98.0/24
                IPv6:
                  2a13:9a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:6a:8a:c7:84:d4:e3:1e:a2:01:df:01:e8:e5:d4:38:55:65:
         be:7a:46:f9:12:2f:a6:fb:21:20:92:a3:0f:2c:5a:4d:20:b6:
         02:64:0e:e6:ae:71:db:d5:3b:59:27:df:c5:dd:d3:66:9e:48:
         98:bf:05:92:e8:43:5e:bb:9a:c4:da:9b:e2:d6:38:c8:81:15:
         28:61:96:84:d6:1e:e8:01:a9:ea:cd:78:24:b8:75:45:e6:02:
         4a:c5:d9:9b:81:d4:ca:04:f0:9b:a1:47:9c:7b:22:20:7a:f8:
         37:72:28:91:5d:28:b4:70:45:fd:1f:b5:c4:d7:2a:63:61:f5:
         42:32:9b:ce:00:c5:14:17:9b:8a:f1:6c:85:6f:bc:a4:93:4b:
         d6:12:9b:ef:5e:3e:0d:f7:b7:eb:af:09:2c:5a:91:4c:74:4b:
         db:db:7c:76:34:c2:9b:62:1d:c6:0b:ae:54:64:1c:d4:75:c9:
         33:4b:34:dc:c2:76:5c:98:6f:bc:80:1e:db:80:23:d9:a1:8b:
         5d:a3:ea:32:06:96:a4:f7:00:b8:ec:a4:cb:10:b9:d2:27:90:
         bd:1c:b5:5b:37:e8:3b:33:1b:37:a4:33:2a:80:bd:f9:87:b8:
         6d:94:9b:98:c6:87:d4:b0:71:c4:df:51:34:59:44:e1:d2:88:
         55:a6:b6:29
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQmayVQpCFXH048Bf+2k7/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGU3NzNkYmZiNzU5NTdmMGNjNWM4NjNmY2NlNzZjYTU4YTM5MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D4C4S3w9jiKcfzm/1gqyRMuqXSJ
BVHJ8sQ+IVqEuQTavzEB4/yExSG9ajSK2Cb+JAWKVVoMQcpVkd2HYZLfKlxJkb8P
8EcucEx/d3Y8DxI/RQ5hYlbA7PTNeS0ijs8FSTVsKzBWhISYhRDA8WT1IrOMUrqI
0ul8HzWchZGDY47hahybMxSqcmXD67smTqw2BrZ8fo3Z1vVo1wCjXO4FnwwtOzp5
8dDWKsa5ZJ2cz4iDT1ldZfq6NWqqJRnXUc8lL0WZap/0IcXviRkGCx82foZzQ2wP
oaz/27jQt3lCiniaonIFHf4IFOM8i56Rs0ef0RB7X9wifUDXX4DWa7Z5WwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGDnc9v7dZV/DMXIY/zOdspYo5MIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2M5OWQ2
Zi04MmVlLTQ3NjgtODA1Yi00NzZkN2U2MmNlZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYzk5ZDZm
LTgyZWUtNDc2OC04MDViLTQ3NmQ3ZTYyY2VmNi8xL1lPZHoyX3QxbFg4TXhjaGpf
TTUyeWxpamt3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUR5iMA0EAgACMAcDBQMqE5oAMA0GCSqGSIb3
DQEBCwUAA4IBAQCraorHhNTjHqIB3wHo5dQ4VWW+ekb5Ei+m+yEgkqMPLFpNILYC
ZA7mrnHb1TtZJ9/F3dNmnkiYvwWS6ENeu5rE2pvi1jjIgRUoYZaE1h7oAanqzXgk
uHVF5gJKxdmbgdTKBPCboUeceyIgevg3ciiRXSi0cEX9H7XE1ypjYfVCMpvOAMUU
F5uK8WyFb7ykk0vWEpvvXj4N97frrwksWpFMdEvb23x2NMKbYh3GC65UZBzUdckz
SzTcwnZcmG+8gB7bgCPZoYtdo+oyBpak9wC47KTLELnSJ5C9HLVbN+g7Mxs3pDMq
gL35h7htlJuYxofUsHHE31E0WUTh0ohVprYp
-----END CERTIFICATE-----