Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.cer (raw, json)
Hash identifier:          iVbHi95SIN0k14XlTvMvjrCUdu7QTCOEQlNnkcYEfqY=
Subject key identifier:   20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067DDBE46F0A8E206A78195F83F6BB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12729
                          IP: 212.127.96.0/19
                          IP: 2a02:178::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:dd:be:46:f0:a8:e2:06:a7:81:95:f8:3f:6b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:f4:f8:81:03:67:f3:8b:5a:db:3b:bd:cd:
                    41:86:3d:13:e5:67:df:cd:4a:c1:e9:86:0a:08:48:
                    15:b3:80:77:59:5a:86:c1:91:e4:e1:a6:33:e0:81:
                    3c:6f:27:fa:e4:5b:42:b1:87:13:a4:aa:2c:ab:ee:
                    a6:b6:63:98:4f:69:bd:8c:0d:a2:50:09:37:f3:92:
                    05:16:49:40:8d:d8:d7:37:05:49:c7:9d:98:3b:c4:
                    83:03:77:ed:bf:11:43:c6:58:59:f9:a8:2c:7a:6f:
                    1f:4e:83:b1:f9:03:13:ec:9e:10:80:b8:1e:90:9d:
                    f9:6f:74:73:ce:ba:bd:b3:3d:8f:58:67:26:37:ae:
                    6d:f5:dd:74:de:73:d4:58:be:1d:28:ea:cf:46:2f:
                    82:a7:de:40:02:77:56:50:61:cc:f1:ec:3a:1f:ac:
                    60:4b:05:e5:f9:8a:51:65:69:d2:32:17:b1:29:1f:
                    1f:4d:22:12:34:85:03:1d:91:6b:99:5f:1b:39:d9:
                    33:d6:61:29:ef:95:2e:77:84:77:6e:d6:98:0e:7f:
                    38:a2:ec:f4:8c:61:d4:39:04:29:4c:0c:5b:f6:b9:
                    21:35:86:ab:df:d0:d5:d9:a6:e0:41:6c:ed:f8:fb:
                    5e:f4:84:57:1b:51:c3:e3:31:d1:2b:3b:ea:b4:0f:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.127.96.0/19
                IPv6:
                  2a02:178::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12729

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:66:89:eb:bf:3b:c9:49:51:1f:c4:4d:ad:96:ab:5b:d1:
         2e:ec:2a:5b:a2:75:1b:9f:28:10:9e:c8:1a:c1:fa:50:eb:77:
         90:46:88:77:7c:96:c0:fe:37:be:69:7f:69:56:22:6e:57:5d:
         f2:d5:22:ad:64:97:02:ff:c8:19:44:b7:47:82:87:69:2e:28:
         5a:ec:05:e7:a0:9d:37:4e:73:45:11:12:24:65:cc:4e:58:16:
         5e:a0:f7:44:b3:0c:81:4a:19:40:3c:99:5a:4a:6d:7e:33:bb:
         c0:ae:4c:79:9d:fe:8b:e7:73:22:53:d4:c5:89:98:31:30:cf:
         c6:b3:a2:5a:79:38:0a:e7:3c:3c:4a:bf:85:c8:8c:79:c4:8f:
         14:ee:33:66:7b:57:7c:92:68:62:79:c9:fd:96:1b:01:1d:52:
         b4:23:d7:cf:d8:bb:6b:8e:c8:67:9c:32:5f:38:d8:b6:32:2a:
         e0:30:a2:56:37:e8:2d:5c:a0:0d:8b:82:ef:50:9e:dc:9c:23:
         3a:3e:00:e4:fd:3d:f6:e2:ae:cc:19:56:12:12:a7:d8:58:ac:
         09:4b:b7:86:d1:b9:56:5c:23:5b:da:dc:b3:a4:8f:3f:dc:f6:
         ac:cd:7d:ed:af:d7:4a:e7:2d:8b:18:f3:47:ab:83:8d:32:4d:
         d8:6f:ef:9b
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQgZ92+RvCo4gangZX4P2u2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDhkZTNhZDE4ZGQwYWUxNDM2MmQwZTg0ZGVjMDQzZDM3OWNjMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFP0+IEDZ/OLWts7vc1Bhj0T5Wff
zUrB6YYKCEgVs4B3WVqGwZHk4aYz4IE8byf65FtCsYcTpKosq+6mtmOYT2m9jA2i
UAk385IFFklAjdjXNwVJx52YO8SDA3ftvxFDxlhZ+agsem8fToOx+QMT7J4QgLge
kJ35b3Rzzrq9sz2PWGcmN65t9d103nPUWL4dKOrPRi+Cp95AAndWUGHM8ew6H6xg
SwXl+YpRZWnSMhexKR8fTSISNIUDHZFrmV8bOdkz1mEp75Uud4R3btaYDn84ouz0
jGHUOQQpTAxb9rkhNYar39DV2abgQWzt+Pte9IRXG1HD4zHRKzvqtA/v9QIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFCCN460Y3QrhQ2LQ6E3sBD03nMJCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzYxMDk0
YS05NDY5LTQyOTktODlmMi1iZGY2ZTQyOTRjMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNjEwOTRh
LTk0NjktNDI5OS04OWYyLWJkZjZlNDI5NGMyZS8xL0lJM2pyUmpkQ3VGRFl0RG9U
ZXdFUFRlY3drSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQF1H9gMA0EAgACMAcDBQAqAgF4MBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjG5MA0GCSqGSIb3DQEBCwUAA4IBAQAP9WaJ6787yUlR
H8RNrZarW9Eu7CpbonUbnygQnsgawfpQ63eQRoh3fJbA/je+aX9pViJuV13y1SKt
ZJcC/8gZRLdHgodpLiha7AXnoJ03TnNFERIkZcxOWBZeoPdEswyBShlAPJlaSm1+
M7vArkx5nf6L53MiU9TFiZgxMM/Gs6JaeTgK5zw8Sr+FyIx5xI8U7jNme1d8kmhi
ecn9lhsBHVK0I9fP2LtrjshnnDJfONi2MirgMKJWN+gtXKANi4LvUJ7cnCM6PgDk
/T324q7MGVYSEqfYWKwJS7eG0blWXCNb2tyzpI8/3PaszX3tr9dK5y2LGPNHq4ON
Mk3Yb++b
-----END CERTIFICATE-----