Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
File:                     ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer (raw, json)
Hash identifier:          8g5rYHkkWeVLyjOeAY34fYK2zGM1AKcOpc5mg9shPzw=
Subject key identifier:   10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428283BAF3CEEC52C0D6361D58393917F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:55:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.115.140.0/22
                          IP: 2a06:7700::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:28:3b:af:3c:ee:c5:2c:0d:63:61:d5:83:93:91:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:55:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:f6:09:40:c4:1c:39:09:ba:93:7e:c6:29:
                    db:9d:e0:e7:2e:6f:f1:3f:61:59:35:9a:0d:61:8f:
                    ba:f6:07:de:3e:ec:1d:ac:51:c7:1f:76:d8:d5:ff:
                    03:b0:8c:68:72:33:51:e5:26:0d:aa:31:0d:f8:04:
                    72:bb:4f:d1:a8:2e:95:3b:23:7b:08:4a:d8:b4:10:
                    10:88:02:b8:10:1c:d4:5f:78:f8:0c:9f:8a:9c:04:
                    de:dc:31:ab:4f:65:7e:6b:c5:6a:ed:60:36:a6:83:
                    ea:cd:bc:54:d2:5e:25:b4:db:07:c2:c3:07:3c:95:
                    fb:99:eb:14:52:14:97:7e:58:12:5f:a5:98:89:1c:
                    ec:eb:22:8a:26:5a:bf:ac:65:c7:ec:7e:53:a7:d0:
                    87:b9:ea:64:3e:f3:a1:37:bb:ea:d0:3d:48:e0:8c:
                    e4:5e:9b:57:53:85:d0:f4:e3:0c:79:62:3d:aa:08:
                    3e:fc:fe:bf:a8:76:e2:f7:d8:27:f3:eb:7b:6a:43:
                    36:93:61:ba:f2:64:95:97:54:7c:66:48:4c:70:cb:
                    da:4e:be:e8:f6:72:67:c6:6e:9c:f7:76:3b:62:e7:
                    70:06:24:da:06:a7:d8:d5:46:0a:e8:b8:de:97:a0:
                    0a:e5:7b:7b:75:fb:25:f1:67:5a:d9:c9:81:25:a7:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.140.0/22
                IPv6:
                  2a06:7700::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:34:46:a7:3a:68:2d:8b:ed:49:6b:43:c3:29:b0:fb:1d:
         ea:55:03:e3:4c:69:41:b3:20:87:93:a2:a0:23:ff:89:6e:b6:
         a6:30:92:bc:94:b1:7e:87:f9:31:e0:4f:59:3a:b2:c1:f8:aa:
         a0:de:c0:e1:07:18:45:fb:0d:20:c7:74:4e:59:03:4a:e8:b7:
         6e:8c:0c:97:8b:96:a1:c7:11:5b:4a:86:fc:2f:94:80:32:ea:
         dd:83:64:6f:34:3f:33:cc:7c:39:dc:20:f6:9b:4a:eb:75:01:
         4c:f0:2f:cb:45:57:fa:94:3f:6a:8f:e0:c9:00:cd:97:f3:bd:
         38:c6:f3:ad:6a:2b:4c:6b:d3:7a:4e:c6:45:7b:ec:40:0b:d6:
         c3:7c:a4:0d:68:c4:09:6e:9c:55:15:b4:fb:4b:0f:c9:b3:ca:
         89:dc:d7:d6:6d:cd:69:34:c3:2e:f8:05:21:69:49:de:f9:92:
         2b:cb:fc:7c:f4:d0:e3:2a:cf:4e:87:77:b2:6f:a6:71:4e:0e:
         4e:46:c1:21:8a:9f:b7:c2:95:55:9d:55:44:98:72:5f:3b:1f:
         a6:32:ab:8f:b9:e2:5a:a0:26:2f:83:c1:ed:a3:45:c9:23:b1:
         21:9c:82:3f:2a:5c:f2:c3:31:1c:a7:4d:ca:76:24:8e:d6:03:
         5b:49:c1:ae
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQoKDuvPO7FLA1jYdWDk5F/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1NTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGQ3MDM4YjgzZWIyNDdmYzY1YmRhZDAxOTViODYyNDZmOGYzMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOn2CUDEHDkJupN+xinbneDnLm/x
P2FZNZoNYY+69gfePuwdrFHHH3bY1f8DsIxocjNR5SYNqjEN+ARyu0/RqC6VOyN7
CErYtBAQiAK4EBzUX3j4DJ+KnATe3DGrT2V+a8Vq7WA2poPqzbxU0l4ltNsHwsMH
PJX7mesUUhSXflgSX6WYiRzs6yKKJlq/rGXH7H5Tp9CHuepkPvOhN7vq0D1I4Izk
XptXU4XQ9OMMeWI9qgg+/P6/qHbi99gn8+t7akM2k2G68mSVl1R8ZkhMcMvaTr7o
9nJnxm6c93Y7YudwBiTaBqfY1UYK6Ljel6AK5Xt7dfsl8Wda2cmBJacuQQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBDXA4uD6yR/xlva0BlbhiRvjzAGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzYxMDVh
ZC04MzA0LTQ5ZjQtYTBkZS0xYzViZGUyYzE0ZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjEwNWFk
LTgzMDQtNDlmNC1hMGRlLTFjNWJkZTJjMTRmNC8xL0VOY0RpNFBySkhfR1c5clFH
VnVHSkctUE1BWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXOMMA0EAgACMAcDBQMqBncAMA0GCSqGSIb3
DQEBCwUAA4IBAQAYxDRGpzpoLYvtSWtDwymw+x3qVQPjTGlBsyCHk6KgI/+Jbram
MJK8lLF+h/kx4E9ZOrLB+Kqg3sDhBxhF+w0gx3ROWQNK6LdujAyXi5ahxxFbSob8
L5SAMurdg2RvND8zzHw53CD2m0rrdQFM8C/LRVf6lD9qj+DJAM2X8704xvOtaitM
a9N6TsZFe+xAC9bDfKQNaMQJbpxVFbT7Sw/Js8qJ3NfWbc1pNMMu+AUhaUne+ZIr
y/x89NDjKs9Oh3eyb6ZxTg5ORsEhip+3wpVVnVVEmHJfOx+mMquPueJaoCYvg8Ht
o0XJI7EhnII/KlzywzEcp03KdiSO1gNbScGu
-----END CERTIFICATE-----