Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
File:                     vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer (raw, json)
Hash identifier:          xir/3Mm5v5NUYVZEqMFCdiYbismesAuYaQxif8mcmTQ=
Subject key identifier:   BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDAA0C9E65EBA2E7C6CB1CBC962EFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51876
                          IP: 45.136.132.0/22
                          IP: 2a0e:8dc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:aa:0c:9e:65:eb:a2:e7:c6:cb:1c:bc:96:2e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bee0a94997672a920a290ccbfd049126f7075c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:da:ad:50:e4:c1:6e:7d:ee:c5:b8:a8:ce:
                    6f:38:e5:1c:08:14:3b:07:64:62:25:8d:5c:39:52:
                    62:54:6b:85:60:23:79:0c:4a:36:3b:4b:7a:99:48:
                    45:df:32:c7:e1:09:7e:0c:e9:a4:bc:9f:99:80:c7:
                    3f:44:d4:00:19:0c:a6:39:ae:21:fb:68:f7:b0:92:
                    1b:8d:f5:b1:f7:88:e0:b4:18:b9:d7:9a:64:f8:b7:
                    74:91:15:e5:73:dc:b1:28:7f:2b:99:bc:8d:00:75:
                    63:19:89:ca:8c:6d:78:c6:8e:30:92:46:8d:0d:8c:
                    5c:a4:d8:8a:23:95:a2:24:b0:18:54:60:6e:5d:e1:
                    39:ad:e1:6b:3f:54:70:51:b9:0a:6a:79:49:85:01:
                    0a:50:b0:6a:24:cc:ff:68:c0:3d:0b:b2:7f:4f:5e:
                    4e:de:ea:bd:2f:3c:df:9c:69:fa:02:fa:b7:3d:fe:
                    89:d4:98:7f:54:49:2c:19:bd:44:5c:05:8b:fc:38:
                    c0:22:41:bf:ab:91:af:bf:1a:30:3f:5b:f0:fd:1b:
                    c5:e6:c0:21:04:12:b2:24:15:35:11:53:eb:00:f4:
                    7e:ac:b2:ef:52:d6:6d:ba:b7:8e:9a:85:51:55:97:
                    90:cf:64:69:2a:9a:8a:26:b7:d0:77:6e:92:19:45:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.132.0/22
                IPv6:
                  2a0e:8dc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51876

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:70:a6:b5:c8:d8:74:4a:10:be:00:d4:b8:96:46:01:56:
         d6:05:ae:39:4c:c8:44:c4:ac:aa:78:47:46:2b:bf:16:33:ce:
         9b:60:63:52:a3:22:66:41:5a:aa:f0:d0:37:64:1a:e9:9d:9f:
         b6:b9:73:5a:37:cf:fa:95:97:14:29:2f:61:d3:5f:22:83:78:
         0e:c3:43:f0:8d:16:88:37:20:58:31:5a:00:ee:40:f9:61:eb:
         d4:da:ff:9d:ee:d7:8a:a1:99:12:42:1e:d7:2d:32:e3:54:27:
         33:47:2e:47:4e:f4:1e:20:97:0f:43:03:f8:65:19:d1:98:a1:
         21:74:36:4e:0f:0a:22:d8:56:72:33:74:bc:63:7e:0a:57:89:
         11:c3:68:01:7a:57:e0:8e:f9:96:60:a8:9d:8d:89:82:7d:04:
         0b:ec:21:ae:b6:38:09:88:e6:29:b4:ee:90:7c:7d:62:1d:16:
         a8:24:71:45:74:91:d2:2d:71:17:da:69:58:9a:58:c6:2b:41:
         73:f2:26:e0:1f:68:e5:18:9e:ca:b2:17:9c:f8:b3:ee:a9:0e:
         8f:a1:0b:e5:92:a0:42:91:83:a4:54:c1:f4:2e:d3:89:bf:be:
         13:3d:4b:9a:fa:4f:9b:fb:07:38:90:4e:43:9d:37:60:bf:15:
         7a:69:8d:1a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/aoMnmXroufGyxy8li7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWUwYTk0OTk3NjcyYTkyMGEyOTBjY2JmZDA0OTEyNmY3MDc1Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7arVDkwW597sW4qM5vOOUcCBQ7
B2RiJY1cOVJiVGuFYCN5DEo2O0t6mUhF3zLH4Ql+DOmkvJ+ZgMc/RNQAGQymOa4h
+2j3sJIbjfWx94jgtBi515pk+Ld0kRXlc9yxKH8rmbyNAHVjGYnKjG14xo4wkkaN
DYxcpNiKI5WiJLAYVGBuXeE5reFrP1RwUbkKanlJhQEKULBqJMz/aMA9C7J/T15O
3uq9LzzfnGn6Avq3Pf6J1Jh/VEksGb1EXAWL/DjAIkG/q5GvvxowP1vw/RvF5sAh
BBKyJBU1EVPrAPR+rLLvUtZtureOmoVRVZeQz2RpKpqKJrfQd26SGUXiyQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFL7gqUmXZyqSCikMy/0EkSb3B1yZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2MzZTMy
OS0xNWVmLTQyM2EtYmIxMi0zYTYwNjNjZmVhOTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYzNlMzI5
LTE1ZWYtNDIzYS1iYjEyLTNhNjA2M2NmZWE5NS8xL3Z1Q3BTWmRuS3BJS0tRekxf
UVNSSnZjSFhKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYiEMA0EAgACMAcDBQMqDo3AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDKpDANBgkqhkiG9w0BAQsFAAOCAQEAjmpwprXI2HRK
EL4A1LiWRgFW1gWuOUzIRMSsqnhHRiu/FjPOm2BjUqMiZkFaqvDQN2Qa6Z2ftrlz
WjfP+pWXFCkvYdNfIoN4DsND8I0WiDcgWDFaAO5A+WHr1Nr/ne7XiqGZEkIe1y0y
41QnM0cuR070HiCXD0MD+GUZ0ZihIXQ2Tg8KIthWcjN0vGN+CleJEcNoAXpX4I75
lmConY2Jgn0EC+whrrY4CYjmKbTukHx9Yh0WqCRxRXSR0i1xF9ppWJpYxitBc/Im
4B9o5RieyrIXnPiz7qkOj6EL5ZKgQpGDpFTB9C7Tib++Ez1LmvpPm/sHOJBOQ503
YL8VemmNGg==
-----END CERTIFICATE-----