Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
File:                     AkhBfH_pzOxbnarMCPznmdZzCIw.cer (raw, json)
Hash identifier:          prenyPgDZqludI/F5zMj9RqNg4kHLe3MulskESN8NoM=
Subject key identifier:   02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBB8A65B0187098BF923E8CA980601
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.86.172.0/22
                          IP: 2a05:b840::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:b8:a6:5b:01:87:09:8b:f9:23:e8:ca:98:06:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:3a:25:4a:19:8d:01:f2:1a:65:72:fa:33:
                    8e:01:43:f1:21:a1:e8:c5:e5:4e:19:32:ed:0b:1e:
                    e7:3f:7a:69:4e:da:c2:4c:25:2f:6a:bb:1b:5e:ff:
                    47:59:57:9f:56:90:84:eb:84:f8:67:c3:0f:a3:43:
                    13:91:30:60:bf:cf:34:df:f8:ea:9e:96:87:bc:6b:
                    85:b0:a1:02:87:74:15:84:31:34:e6:2f:e6:62:1d:
                    e6:53:e7:ab:f3:c8:a8:e4:f6:98:c1:7b:d2:e6:a0:
                    a8:7f:3e:ce:4a:20:26:2b:72:09:63:ca:a7:b6:68:
                    d2:c9:f7:fb:98:7f:97:dc:5d:3d:9e:8e:05:5a:2b:
                    6c:9b:8f:54:7a:6d:b7:74:49:cf:94:0c:9b:0c:de:
                    9b:01:5c:bf:7e:5e:c7:3c:67:a2:2f:19:c2:f2:06:
                    09:5b:9f:e3:a0:e0:12:30:59:c1:cc:20:d4:9a:f1:
                    89:09:dd:d7:e8:bc:14:8a:80:49:b8:25:25:57:0c:
                    0d:46:a6:de:ce:c1:0a:8d:99:e6:05:dc:69:b6:06:
                    7f:2c:d7:a5:c9:f8:0d:89:c5:cf:9d:b3:78:79:7e:
                    4d:6f:d0:d6:b9:7a:d3:5f:4f:22:f6:a2:29:1d:eb:
                    fc:a7:07:62:d3:ce:64:09:23:9b:a3:49:e1:00:df:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.172.0/22
                IPv6:
                  2a05:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         4d:55:56:c7:66:51:06:9f:95:dd:99:06:72:f4:cd:57:33:ca:
         d2:07:70:96:7f:b3:34:50:46:90:8f:6c:cf:a5:aa:e1:6c:a0:
         53:95:a8:0c:67:94:11:51:a2:57:1e:4c:8f:1c:6b:15:c2:b6:
         31:63:1a:e4:df:43:ef:07:a9:dc:94:0f:b1:9c:65:fa:00:98:
         d3:0d:f3:75:71:c9:54:f8:59:51:bb:4b:06:64:29:db:14:0b:
         f1:3e:ee:e2:2f:5b:99:4b:52:27:6f:07:28:e3:1a:20:94:73:
         8c:f8:fb:47:61:84:72:fd:fa:7e:17:84:77:36:76:1b:2d:f0:
         bc:f0:4e:45:cf:7f:32:03:ae:97:ec:a3:a4:da:99:bf:44:c0:
         b1:36:cd:1b:71:35:09:8e:ee:e7:37:7e:ec:49:1c:97:a5:6f:
         af:7c:a4:34:3b:3f:6e:98:05:77:c1:98:ec:ee:68:17:40:a6:
         dd:3e:4c:99:3e:58:fd:fd:8e:ee:74:9e:10:ae:18:33:3c:cd:
         01:1b:9b:b9:a0:79:02:a9:e7:38:5b:74:4d:b3:02:f4:e5:e6:
         20:03:b4:f6:9c:ed:fc:40:aa:70:53:a9:54:dc:bb:e6:9a:fe:
         93:b8:dc:e0:0b:5d:82:65:41:c7:d6:f1:49:17:84:a1:73:5a:
         78:84:cc:0b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQi+7imWwGHCYv5I+jKmAYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ4NDE3YzdmZTljY2VjNWI5ZGFhY2MwOGZjZTc5OWQ2NzMwODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudM6JUoZjQHyGmVy+jOOAUPxIaHo
xeVOGTLtCx7nP3ppTtrCTCUvarsbXv9HWVefVpCE64T4Z8MPo0MTkTBgv8803/jq
npaHvGuFsKECh3QVhDE05i/mYh3mU+er88io5PaYwXvS5qCofz7OSiAmK3IJY8qn
tmjSyff7mH+X3F09no4FWitsm49Uem23dEnPlAybDN6bAVy/fl7HPGeiLxnC8gYJ
W5/joOASMFnBzCDUmvGJCd3X6LwUioBJuCUlVwwNRqbezsEKjZnmBdxptgZ/LNel
yfgNicXPnbN4eX5Nb9DWuXrTX08i9qIpHev8pwdi085kCSObo0nhAN9WCQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAJIQXx/6czsW52qzAj855nWcwiMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2YxNjc4
Yy1kZGNjLTQyNTMtODU5NS02M2M3MDc0NDFiYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvZjE2Nzhj
LWRkY2MtNDI1My04NTk1LTYzYzcwNzQ0MWJhNi8xL0FraEJmSF9wek94Ym5hck1D
UHpubWRaekNJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVasMA0EAgACMAcDBQMqBbhAMA0GCSqGSIb3
DQEBCwUAA4IBAQBNVVbHZlEGn5XdmQZy9M1XM8rSB3CWf7M0UEaQj2zPparhbKBT
lagMZ5QRUaJXHkyPHGsVwrYxYxrk30PvB6nclA+xnGX6AJjTDfN1cclU+FlRu0sG
ZCnbFAvxPu7iL1uZS1Inbwco4xoglHOM+PtHYYRy/fp+F4R3NnYbLfC88E5Fz38y
A66X7KOk2pm/RMCxNs0bcTUJju7nN37sSRyXpW+vfKQ0Oz9umAV3wZjs7mgXQKbd
PkyZPlj9/Y7udJ4QrhgzPM0BG5u5oHkCqec4W3RNswL05eYgA7T2nO38QKpwU6lU
3Lvmmv6TuNzgC12CZUHH1vFJF4Shc1p4hMwL
-----END CERTIFICATE-----