Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer (raw, json)
Hash identifier:          4M9bS6IleNCoQ1ruoaxlbBNfcrrT7o7HUXuGcSBhe04=
Subject key identifier:   27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B21B14E3AB020C2777D1BBFAA9BA0F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200930
                          IP: 193.58.180.0/22
                          IP: 2a0d:6ac0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:1b:14:e3:ab:02:0c:27:77:d1:bb:fa:a9:ba:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:fe:7a:4d:d1:0a:33:4c:e2:a0:9c:ed:5d:
                    d6:8e:1d:56:9a:53:e3:91:c5:e5:b8:aa:89:8b:fa:
                    4b:4d:14:fc:8b:d3:fa:87:9c:5b:fb:62:35:67:fd:
                    5b:1e:09:cf:75:da:6e:0a:b9:b1:56:39:24:25:c2:
                    0d:62:ea:ca:96:8e:18:b9:a6:05:98:bc:fc:34:c7:
                    77:12:fb:d9:f8:b7:94:b6:d8:e0:9a:47:ba:7d:10:
                    4e:2f:fb:6e:3a:f2:52:20:85:25:c9:e9:5a:c7:1d:
                    ba:30:ba:af:b9:91:c7:6f:99:1d:3e:78:8e:47:0d:
                    51:88:4f:1b:08:e9:3c:fa:45:90:be:78:86:a9:cc:
                    67:c3:b3:83:c4:f4:3f:b0:d0:50:e7:89:6c:f1:98:
                    0d:58:39:e3:df:2d:59:30:c3:be:e3:3c:b1:14:ed:
                    ac:a5:e3:10:35:f5:d3:d4:12:38:49:13:05:c1:92:
                    a1:12:8d:0a:1d:a9:55:55:9e:36:60:b4:60:10:c2:
                    57:bd:11:d6:d4:f1:a5:31:2c:e8:d5:9d:f9:e3:c5:
                    ef:d7:4f:15:64:81:10:36:48:47:62:0a:45:af:8a:
                    78:3f:39:a6:de:e4:fc:86:ba:4c:70:54:53:85:65:
                    ad:bc:41:36:df:27:f4:b4:08:2d:14:74:f2:a9:c5:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.180.0/22
                IPv6:
                  2a0d:6ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200930

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:87:56:8c:4c:4d:01:7f:65:b6:f8:d9:32:fb:79:59:c8:
         1d:bb:60:d5:42:46:da:5e:43:cc:51:73:be:9a:bf:0a:10:e5:
         24:3d:f3:14:9c:66:20:0c:45:9b:8b:64:17:1e:15:e6:51:04:
         93:a8:d7:cf:c9:02:21:01:63:2c:93:c2:58:88:34:94:62:18:
         63:d3:67:63:bc:45:c1:7d:8b:18:0f:9b:3c:32:04:00:8b:e0:
         81:89:05:2c:a9:25:a9:f9:54:ea:65:fc:a5:c7:aa:c9:a5:68:
         50:02:c4:77:a7:a8:33:65:d2:0f:42:ce:93:84:d2:4d:85:0d:
         8b:0d:8c:f2:41:be:a4:c5:19:fe:21:cd:74:3a:24:54:6e:67:
         56:87:61:07:e1:18:1a:2c:aa:b7:88:a8:46:17:e3:29:8d:cb:
         ff:a4:6b:29:66:44:52:01:ef:35:c7:5c:2e:e9:28:b6:44:88:
         5e:a5:13:16:ed:b2:cf:05:b3:98:ca:c9:dd:9c:a4:1b:17:6e:
         cd:40:7d:fa:55:8e:d3:55:ca:d9:fd:7f:c7:fe:d7:01:40:d5:
         b8:4f:2c:66:d4:dd:b5:d5:dd:a8:d8:cb:75:16:19:ce:ff:1c:
         6e:0d:f4:44:2a:5a:ce:5c:a0:f8:8e:c3:16:5a:61:30:fd:c0:
         29:29:fe:de
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhshsU46sCDCd30bv6qboPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YxMzBiNmY0NWYwMGY3YzFkMTM1YjZjOTNiMjBlNjkwNDEyY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLz+ek3RCjNM4qCc7V3Wjh1WmlPj
kcXluKqJi/pLTRT8i9P6h5xb+2I1Z/1bHgnPddpuCrmxVjkkJcINYurKlo4YuaYF
mLz8NMd3EvvZ+LeUttjgmke6fRBOL/tuOvJSIIUlyelaxx26MLqvuZHHb5kdPniO
Rw1RiE8bCOk8+kWQvniGqcxnw7ODxPQ/sNBQ54ls8ZgNWDnj3y1ZMMO+4zyxFO2s
peMQNfXT1BI4SRMFwZKhEo0KHalVVZ42YLRgEMJXvRHW1PGlMSzo1Z3548Xv108V
ZIEQNkhHYgpFr4p4Pzmm3uT8hrpMcFRThWWtvEE23yf0tAgtFHTyqcW/hQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCfxMLb0XwD3wdE1tsk7IOaQQSz8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2VhZDRh
MC0yNTIxLTRhYmItYWMyZC0wN2RiZDkwMGM0YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZWFkNGEw
LTI1MjEtNGFiYi1hYzJkLTA3ZGJkOTAwYzRhZC8xL0pfRXd0dlJmQVBmQjBUVzJ5
VHNnNXBCQkxQdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwTq0MA0EAgACMAcDBQMqDWrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ4jANBgkqhkiG9w0BAQsFAAOCAQEAMV+HVoxMTQF/
Zbb42TL7eVnIHbtg1UJG2l5DzFFzvpq/ChDlJD3zFJxmIAxFm4tkFx4V5lEEk6jX
z8kCIQFjLJPCWIg0lGIYY9NnY7xFwX2LGA+bPDIEAIvggYkFLKklqflU6mX8pceq
yaVoUALEd6eoM2XSD0LOk4TSTYUNiw2M8kG+pMUZ/iHNdDokVG5nVodhB+EYGiyq
t4ioRhfjKY3L/6RrKWZEUgHvNcdcLukotkSIXqUTFu2yzwWzmMrJ3ZykGxduzUB9
+lWO01XK2f1/x/7XAUDVuE8sZtTdtdXdqNjLdRYZzv8cbg30RCpazlyg+I7DFlph
MP3AKSn+3g==
-----END CERTIFICATE-----