Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer (raw, json)
Hash identifier:          sA+0zz0lNJgV858LL49maoE5neGf0+B+8J23qlHWYJA=
Subject key identifier:   25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F7626B981FEF40F9D7A16F956FE37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47482
                          IP: 45.66.32.0/22
                          IP: 2a09:61c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:76:26:b9:81:fe:f4:0f:9d:7a:16:f9:56:fe:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:ea:44:e3:36:7e:0f:21:cf:ad:f4:67:2b:
                    50:2a:03:35:65:50:f1:f2:c0:31:74:6e:17:28:8a:
                    86:22:d7:b9:1d:fa:84:6c:8b:f0:2f:de:ec:fc:df:
                    e0:fc:05:a1:52:95:f6:68:95:02:8a:0e:81:b9:ba:
                    03:02:31:35:8d:13:e3:7a:7b:85:49:f0:79:7d:b9:
                    4b:af:54:d7:87:f6:4a:0b:d4:e9:2b:88:51:60:fd:
                    0f:23:c3:35:8e:35:3a:cb:95:84:0e:da:90:df:26:
                    bd:13:d1:cc:71:f7:5e:8c:42:9c:fa:6d:cc:ff:72:
                    7b:ed:28:74:52:0a:e0:ed:d1:91:ee:73:82:c4:d2:
                    a7:c8:16:0b:1c:22:92:cc:8e:f6:a2:2f:00:b7:d9:
                    2f:80:9d:bd:1e:e2:55:dd:e6:d4:81:ef:87:ac:48:
                    12:0f:7d:a3:d2:ad:99:c6:2c:ce:d3:29:65:cb:38:
                    ee:03:66:d2:40:eb:72:dd:2e:40:1a:90:59:5e:e4:
                    2d:7b:0e:f4:dd:7d:da:97:77:9e:19:d2:0f:74:7c:
                    e7:80:19:42:00:83:8c:ba:fd:aa:69:95:87:25:79:
                    d5:e4:5e:71:80:f0:fa:00:85:61:d8:32:a4:ff:0a:
                    76:93:28:2d:13:11:f0:7d:06:56:c8:2b:f4:1b:9a:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.32.0/22
                IPv6:
                  2a09:61c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47482

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:c7:43:9f:30:e1:04:60:58:46:36:d9:d6:fa:54:b9:cc:
         64:57:c9:1f:f1:bb:84:c7:ce:62:ee:a5:53:cb:09:92:36:b3:
         1f:72:ed:1f:e7:9b:6e:89:23:5f:af:05:e9:c3:d4:be:2c:79:
         c8:5d:ea:82:c6:e4:74:c2:cf:50:7b:c5:6f:b8:17:4f:1d:30:
         94:d3:5e:3f:61:dc:b3:db:fc:33:71:17:30:0e:d9:be:f3:e0:
         b7:77:73:5a:de:8e:fb:af:ae:6e:95:86:67:9e:3b:b7:e0:a0:
         1e:e3:fb:69:d7:46:51:a4:4e:ef:62:b1:82:32:ed:08:ee:f4:
         8d:f5:46:9c:b7:a0:f1:c5:3d:b9:9d:c7:e4:61:c1:60:ba:d3:
         e0:ee:20:9a:3e:1b:de:82:15:f1:42:77:98:16:9f:35:07:79:
         59:53:01:f7:fe:5f:87:0a:a4:c7:00:03:a1:1c:36:1e:dc:92:
         87:7f:52:c8:ab:95:58:27:70:bb:5a:c2:f6:95:e6:17:b0:cb:
         92:aa:7f:a0:93:b1:0c:d0:96:e0:a4:a9:f8:f5:9e:80:b6:94:
         ab:0f:85:49:a1:2e:98:61:c7:78:0c:6a:10:30:cc:c5:07:ad:
         91:17:dd:ee:b9:df:e4:81:97:93:4c:e3:6f:1c:69:45:c0:a4:
         8c:66:29:02
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlj3YmuYH+9A+dehb5Vv43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNmOWQ4ZDU1MmNkYzdkOGMwZGM2ZjY0OWIzMDFmMjM1MTQwOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPqROM2fg8hz630ZytQKgM1ZVDx
8sAxdG4XKIqGIte5HfqEbIvwL97s/N/g/AWhUpX2aJUCig6BuboDAjE1jRPjenuF
SfB5fblLr1TXh/ZKC9TpK4hRYP0PI8M1jjU6y5WEDtqQ3ya9E9HMcfdejEKc+m3M
/3J77Sh0Ugrg7dGR7nOCxNKnyBYLHCKSzI72oi8At9kvgJ29HuJV3ebUge+HrEgS
D32j0q2ZxizO0yllyzjuA2bSQOty3S5AGpBZXuQtew703X3al3eeGdIPdHzngBlC
AIOMuv2qaZWHJXnV5F5xgPD6AIVh2DKk/wp2kygtExHwfQZWyCv0G5roswIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCXPnY1VLNx9jA3G9kmzAfI1FAnuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2EwZTA4
YS05ZmYwLTQ0YjQtYmNjNC1hMTA2OTBhNzQ0ZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYTBlMDhh
LTlmZjAtNDRiNC1iY2M0LWExMDY5MGE3NDRlNC8xL0pjLWRqVlVzM0gyTURjYjJT
Yk1COGpVVUNlNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLUIgMA0EAgACMAcDBQMqCWHAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC5ejANBgkqhkiG9w0BAQsFAAOCAQEAbmvHQ58w4QRg
WEY22db6VLnMZFfJH/G7hMfOYu6lU8sJkjazH3LtH+ebbokjX68F6cPUvix5yF3q
gsbkdMLPUHvFb7gXTx0wlNNeP2Hcs9v8M3EXMA7ZvvPgt3dzWt6O+6+ubpWGZ547
t+CgHuP7addGUaRO72KxgjLtCO70jfVGnLeg8cU9uZ3H5GHBYLrT4O4gmj4b3oIV
8UJ3mBafNQd5WVMB9/5fhwqkxwADoRw2HtySh39SyKuVWCdwu1rC9pXmF7DLkqp/
oJOxDNCW4KSp+PWegLaUqw+FSaEumGHHeAxqEDDMxQetkRfd7rnf5IGXk0zjbxxp
RcCkjGYpAg==
-----END CERTIFICATE-----