Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
File:                     a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer (raw, json)
Hash identifier:          5Mc8tugopXP8N1LxFu9h8xnePUMRy3HUx+kuhbob9xY=
Subject key identifier:   6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B21D9A095D6B9490972A2E67A48E62
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211733
                          IP: 185.204.199.0/24
                          IP: 2a10:9b40::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:1d:9a:09:5d:6b:94:90:97:2a:2e:67:a4:8e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:88:92:88:fc:af:5d:3a:09:47:a2:8c:4b:
                    1e:6d:45:d3:77:3c:78:a1:3f:e9:d4:60:12:c4:6f:
                    d5:02:c7:07:27:5b:b1:ab:75:18:f7:75:8a:13:15:
                    54:18:10:14:0c:85:a6:9a:a8:94:06:e6:19:8a:c2:
                    46:64:d2:97:14:18:f5:d8:25:61:50:43:b5:07:0d:
                    fe:11:9e:03:03:04:22:08:c0:a3:09:3a:91:89:0a:
                    04:91:43:3a:88:68:08:7b:98:43:bf:f7:84:d7:5a:
                    ce:7a:db:a8:2e:6f:ca:86:c4:03:ec:6e:eb:0b:d2:
                    48:59:b0:bd:7b:92:e6:53:9b:26:71:10:95:f7:1f:
                    98:1f:3b:4d:5d:0b:6a:ab:56:8e:96:28:c5:2a:f8:
                    43:2b:ac:6d:78:ad:34:99:60:23:7a:4d:e3:b0:3b:
                    74:92:ec:36:96:0f:5b:f3:98:b6:13:b4:b1:b9:ae:
                    fd:40:1f:54:e0:9f:d3:f8:53:91:fc:d9:3d:1e:0a:
                    05:1c:d2:14:a1:b9:fc:04:51:08:eb:1b:3e:14:a7:
                    fd:9a:3c:21:fa:85:87:f7:01:b4:74:67:40:52:6f:
                    88:93:f8:a9:08:0d:b6:2b:98:3b:ee:22:87:96:4d:
                    ad:32:40:fc:05:61:4f:90:0f:33:bf:d4:52:60:e6:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.199.0/24
                IPv6:
                  2a10:9b40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211733

    Signature Algorithm: sha256WithRSAEncryption
         26:e3:a3:c4:11:95:6c:df:2d:7b:fa:e6:eb:9a:5e:57:dc:0f:
         9c:58:e1:b0:f5:26:4e:5d:33:a3:0e:57:a7:71:1e:9a:25:a5:
         5e:97:ac:5d:82:db:e2:31:83:8e:da:91:65:07:54:2a:d3:a0:
         4e:da:8b:fe:d4:6b:72:6e:6a:45:cf:6f:0f:b4:a3:54:f4:30:
         5a:84:eb:b9:a0:53:5f:6d:ba:eb:f8:f9:7e:ad:ae:fb:31:41:
         2d:48:aa:b9:7a:df:a6:0c:57:b8:66:f1:71:07:c3:51:bc:f9:
         77:33:64:ad:4b:b6:29:8f:a3:2d:af:81:17:73:a3:06:bd:68:
         a8:8d:77:ae:00:05:4f:0a:58:d4:b0:20:f7:50:a8:44:2f:14:
         3b:23:a6:cd:80:80:c8:40:44:37:5b:ef:ed:ea:e5:2b:59:93:
         bd:33:60:67:47:a3:52:83:00:9f:65:90:12:e4:c9:eb:20:cc:
         2a:76:e5:a6:1a:50:8a:b6:60:6f:4a:f8:75:be:6f:ea:4b:9e:
         91:be:c6:47:c6:c1:21:bc:3e:61:91:61:e7:dd:2a:92:1c:55:
         68:2a:8e:cd:9f:ac:98:b4:60:78:8e:91:d0:7f:c9:f3:ee:a6:
         3b:2b:f9:20:6e:29:5e:34:80:26:9b:dc:0e:55:12:4d:eb:98:
         77:42:28:7d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhsh2aCV1rlJCXKi5npI5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmVjNGUyOWM2ODQ5YzVmODA4NDI4ZTY2ODU4ZjRmMGVjZjRhNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHmIkoj8r106CUeijEsebUXTdzx4
oT/p1GASxG/VAscHJ1uxq3UY93WKExVUGBAUDIWmmqiUBuYZisJGZNKXFBj12CVh
UEO1Bw3+EZ4DAwQiCMCjCTqRiQoEkUM6iGgIe5hDv/eE11rOetuoLm/KhsQD7G7r
C9JIWbC9e5LmU5smcRCV9x+YHztNXQtqq1aOlijFKvhDK6xteK00mWAjek3jsDt0
kuw2lg9b85i2E7Sxua79QB9U4J/T+FOR/Nk9HgoFHNIUobn8BFEI6xs+FKf9mjwh
+oWH9wG0dGdAUm+Ik/ipCA22K5g77iKHlk2tMkD8BWFPkA8zv9RSYOYWOwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGvsTinGhJxfgIQo5mhY9PDs9KZUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2Y4YWM5
OS0wZWFhLTRmNTEtOGQ1OC1kYmZhZWNkYzdlYTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZjhhYzk5
LTBlYWEtNGY1MS04ZDU4LWRiZmFlY2RjN2VhMy8xL2EteE9LY2FFbkYtQWhDam1h
RmowOE96MHBsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuczHMA0EAgACMAcDBQMqEJtAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7FTANBgkqhkiG9w0BAQsFAAOCAQEAJuOjxBGVbN8t
e/rm65peV9wPnFjhsPUmTl0zow5Xp3EemiWlXpesXYLb4jGDjtqRZQdUKtOgTtqL
/tRrcm5qRc9vD7SjVPQwWoTruaBTX2266/j5fq2u+zFBLUiquXrfpgxXuGbxcQfD
Ubz5dzNkrUu2KY+jLa+BF3OjBr1oqI13rgAFTwpY1LAg91CoRC8UOyOmzYCAyEBE
N1vv7erlK1mTvTNgZ0ejUoMAn2WQEuTJ6yDMKnblphpQirZgb0r4db5v6kuekb7G
R8bBIbw+YZFh590qkhxVaCqOzZ+smLRgeI6R0H/J8+6mOyv5IG4pXjSAJpvcDlUS
TeuYd0IofQ==
-----END CERTIFICATE-----