Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
File:                     kebTJCJXspZbYnj_jBfhb_PwiyE.cer (raw, json)
Hash identifier:          u+uQAyI886skG6ms1JpXybCp0XfgzVQ0tRiMbKJQ0mU=
Subject key identifier:   91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E3DA2C1172487FDD09B68956A31FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204732
                          IP: 185.242.68.0/22
                          IP: 2a0c:c280::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:3d:a2:c1:17:24:87:fd:d0:9b:68:95:6a:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:9a:9e:17:64:40:28:5c:0c:45:2f:38:eb:
                    f4:9a:55:59:5f:0a:ad:f5:79:88:13:b7:09:5b:ea:
                    46:f8:71:be:9b:a6:3f:ec:a9:19:b5:32:b1:20:4a:
                    9e:b9:23:41:e0:f3:6a:ec:64:c3:e3:6c:8c:5f:87:
                    64:b4:a3:d0:b3:62:77:26:17:6b:f4:ee:01:87:10:
                    d2:7a:d5:40:85:1c:b1:ca:93:c1:3c:a7:49:62:a6:
                    94:a7:a2:1a:fb:c6:ae:1d:28:fa:4f:38:a2:47:d0:
                    8f:9c:41:cc:a8:9c:77:aa:ef:dc:d5:40:42:a5:f2:
                    bf:dd:a4:41:60:3d:be:a0:e0:d2:87:69:c7:a6:fa:
                    b7:f7:b1:a1:20:8a:30:52:2f:69:39:de:2c:cf:da:
                    d4:ab:28:c9:df:63:77:9b:d5:8e:e3:29:2f:d9:f6:
                    ed:33:23:0b:b8:6a:02:88:a1:bb:01:5c:e1:8e:1b:
                    3a:34:ee:cd:f6:d6:59:c2:df:3a:69:a4:a9:bf:9b:
                    3f:c0:50:39:e0:b9:8e:47:8b:46:24:2d:d8:2d:01:
                    fb:93:e7:3e:37:f2:99:2d:be:33:b0:ed:fe:97:4c:
                    6a:7c:61:bd:e9:68:8a:aa:f5:4a:20:e1:64:ef:54:
                    e4:a7:fe:09:25:27:5b:e0:9f:74:71:51:a8:24:13:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.68.0/22
                IPv6:
                  2a0c:c280::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204732

    Signature Algorithm: sha256WithRSAEncryption
         36:90:c9:60:40:ac:44:1e:9b:cc:85:73:a2:07:e7:a8:93:cf:
         a0:9f:0b:e9:85:44:4f:5c:95:ff:19:07:96:d3:65:ed:6f:de:
         d1:37:fe:1c:3a:04:cd:c4:da:c7:be:91:69:8a:fe:d7:6c:2d:
         6f:c1:98:2e:33:33:7c:43:63:03:78:01:8c:49:25:b6:df:52:
         13:60:3d:58:4a:de:28:64:61:ae:0c:b4:ba:77:8b:fd:fb:12:
         cb:c3:0a:fe:3d:7a:c4:09:1b:b3:d7:bc:cf:e6:3a:62:94:68:
         56:cf:e4:e7:ed:e4:06:cf:2a:15:0c:a1:7e:6c:be:6f:d9:5c:
         dc:af:92:8a:9d:d7:97:16:21:fe:71:e1:2f:9a:6e:b5:4b:2f:
         66:94:e9:ae:1d:0c:ab:c9:f5:db:68:6d:50:2d:a0:37:4b:38:
         50:67:11:54:37:4c:e2:aa:b5:ea:00:f9:17:ec:31:5b:6a:f3:
         d5:67:d3:db:16:12:f2:10:b5:4d:c4:7f:a9:37:c9:82:ef:a2:
         53:f3:ef:38:bf:14:34:db:10:16:ae:fd:80:ae:0b:aa:e9:df:
         be:06:6c:8f:9f:06:56:8b:ce:aa:c3:c3:80:ee:a2:29:f6:1b:
         68:12:79:c6:23:04:83:a7:d4:25:f2:aa:91:ca:a7:36:7b:b2:
         c9:7a:45:c5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQijj2iwRckh/3Qm2iVajH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWU2ZDMyNDIyNTdiMjk2NWI2Mjc4ZmY4YzE3ZTE2ZmYzZjA4YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta6anhdkQChcDEUvOOv0mlVZXwqt
9XmIE7cJW+pG+HG+m6Y/7KkZtTKxIEqeuSNB4PNq7GTD42yMX4dktKPQs2J3Jhdr
9O4BhxDSetVAhRyxypPBPKdJYqaUp6Ia+8auHSj6TziiR9CPnEHMqJx3qu/c1UBC
pfK/3aRBYD2+oODSh2nHpvq397GhIIowUi9pOd4sz9rUqyjJ32N3m9WO4ykv2fbt
MyMLuGoCiKG7AVzhjhs6NO7N9tZZwt86aaSpv5s/wFA54LmOR4tGJC3YLQH7k+c+
N/KZLb4zsO3+l0xqfGG96WiKqvVKIOFk71Tkp/4JJSdb4J90cVGoJBNPYQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJHm0yQiV7KWW2J4/4wX4W/z8IshMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5LzBjMGY2
MS1iNjljLTQ2NTctOTg2Ny03ZTc0YTZhOThlY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvMGMwZjYx
LWI2OWMtNDY1Ny05ODY3LTdlNzRhNmE5OGVjZC8xL2tlYlRKQ0pYc3BaYllual9q
QmZoYl9Qd2l5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufJEMA0EAgACMAcDBQMqDMKAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMfvDANBgkqhkiG9w0BAQsFAAOCAQEANpDJYECsRB6b
zIVzogfnqJPPoJ8L6YVET1yV/xkHltNl7W/e0Tf+HDoEzcTax76RaYr+12wtb8GY
LjMzfENjA3gBjEkltt9SE2A9WEreKGRhrgy0uneL/fsSy8MK/j16xAkbs9e8z+Y6
YpRoVs/k5+3kBs8qFQyhfmy+b9lc3K+Sip3XlxYh/nHhL5putUsvZpTprh0Mq8n1
22htUC2gN0s4UGcRVDdM4qq16gD5F+wxW2rz1WfT2xYS8hC1TcR/qTfJgu+iU/Pv
OL8UNNsQFq79gK4LqunfvgZsj58GVovOqsPDgO6iKfYbaBJ5xiMEg6fUJfKqkcqn
NnuyyXpFxQ==
-----END CERTIFICATE-----