Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer (raw, json)
Hash identifier:          eNsvPcWjBVzQTeJzPRIiWXUolGChgmYsvYgGLPq+7Y4=
Subject key identifier:   45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDA5122BA2174935F59B99E1E263BE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.217.149.0/24
                          IP: 2a01:f440::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:a5:12:2b:a2:17:49:35:f5:9b:99:e1:e2:63:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:a5:27:4d:3e:51:52:5a:1a:4c:8b:34:84:
                    ac:c6:03:28:74:25:23:b2:16:72:b9:36:72:5f:9d:
                    d1:b7:18:9d:3c:e3:6e:51:a7:72:c7:3e:ad:e7:25:
                    aa:29:b7:41:6f:74:fd:e0:23:12:6a:c1:5c:c5:a4:
                    9d:c0:53:b0:1d:1b:f9:3a:f2:fb:fa:74:59:70:1e:
                    da:7f:7d:be:37:b2:01:d9:8d:fc:61:75:c9:95:be:
                    10:3b:68:a2:d5:d2:88:01:69:f3:57:35:fa:9d:a6:
                    7b:1f:a4:96:65:53:27:20:63:fb:40:35:5a:27:30:
                    4d:f1:71:81:a7:23:02:d0:9c:fa:80:cf:e3:ab:52:
                    dd:33:26:0f:ba:c4:32:3b:7a:c8:2c:56:d0:56:52:
                    c9:4d:65:5c:bd:9c:26:b2:f3:a1:48:66:1b:37:a6:
                    47:14:42:57:af:7c:0c:d1:6a:7e:48:c8:58:67:e3:
                    a5:01:4f:7c:68:7b:37:3c:95:1c:3b:ed:1c:bd:28:
                    a7:1c:d7:0d:45:ff:08:11:ec:e5:d4:ee:fd:87:f1:
                    7c:20:dd:95:95:fe:9d:ad:ac:48:d1:d3:4f:e7:99:
                    86:43:2d:66:da:36:63:c4:c5:e0:09:29:d5:49:89:
                    bf:dc:74:6d:cc:0d:86:fa:4d:23:fc:e0:0f:09:87:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.149.0/24
                IPv6:
                  2a01:f440::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:e3:7b:ed:97:4b:54:ce:8d:23:8e:a5:bf:8f:d7:3c:ff:
         8f:b4:f1:fd:9e:37:60:b9:10:d4:08:55:d4:ab:18:a4:d4:a0:
         df:f0:56:06:32:d1:8e:7f:e9:4f:a3:7c:93:e5:ab:27:50:50:
         33:1b:17:49:4c:9e:79:c1:14:6e:51:35:91:f9:4e:76:08:8e:
         a2:5e:65:1c:a4:0d:08:70:dd:46:fd:2c:d0:83:b0:f7:11:5a:
         08:dd:fb:a3:10:e2:b1:2f:05:83:c4:cb:d5:2f:ad:8d:2f:c9:
         3f:f6:f2:f9:52:6c:4d:8d:83:b0:f7:eb:aa:ca:94:51:b9:b6:
         4e:48:bd:4e:4f:bc:d7:b2:b9:13:23:36:7c:92:9a:ed:c2:5a:
         e1:18:7b:60:09:2a:2d:0b:21:d9:ea:6d:dd:81:90:b3:59:2f:
         35:ba:6d:4b:a0:5e:96:5f:93:44:23:7d:e8:75:56:c1:5c:e6:
         ae:dd:eb:7c:bf:e0:57:1c:34:3c:ab:f2:fc:be:43:54:84:4f:
         95:23:e1:c5:e5:7e:a3:6f:03:8a:f9:6a:bc:77:14:72:f0:4f:
         64:ac:46:7c:ad:54:d6:92:6a:b8:2b:af:88:90:c7:db:f0:88:
         7c:b3:0a:66:ba:20:8a:9e:28:7e:12:6e:f5:77:71:e5:29:65:
         1f:60:f3:97
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQl/aUSK6IXSTX1m5nh4mO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVmZmU5OGMyNGMzZDZkNjA4N2M4ZDFkM2Y5MDFiOGNjZDQwMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJulJ00+UVJaGkyLNISsxgModCUj
shZyuTZyX53RtxidPONuUadyxz6t5yWqKbdBb3T94CMSasFcxaSdwFOwHRv5OvL7
+nRZcB7af32+N7IB2Y38YXXJlb4QO2ii1dKIAWnzVzX6naZ7H6SWZVMnIGP7QDVa
JzBN8XGBpyMC0Jz6gM/jq1LdMyYPusQyO3rILFbQVlLJTWVcvZwmsvOhSGYbN6ZH
FEJXr3wM0Wp+SMhYZ+OlAU98aHs3PJUcO+0cvSinHNcNRf8IEezl1O79h/F8IN2V
lf6draxI0dNP55mGQy1m2jZjxMXgCSnVSYm/3HRtzA2G+k0j/OAPCYcIbQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEXv/pjCTD1tYIfI0dP5AbjM1ACIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzFlNGE2
NC03YWEwLTRjOTQtOWJiMC1kZWI3YjkxODkxNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMWU0YTY0
LTdhYTAtNGM5NC05YmIwLWRlYjdiOTE4OTE2OS8xL1JlXy1tTUpNUFcxZ2g4alIw
X2tCdU16VUFJZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9mVMA0EAgACMAcDBQMqAfRAMA0GCSqGSIb3
DQEBCwUAA4IBAQAT1+N77ZdLVM6NI46lv4/XPP+PtPH9njdguRDUCFXUqxik1KDf
8FYGMtGOf+lPo3yT5asnUFAzGxdJTJ55wRRuUTWR+U52CI6iXmUcpA0IcN1G/SzQ
g7D3EVoI3fujEOKxLwWDxMvVL62NL8k/9vL5UmxNjYOw9+uqypRRubZOSL1OT7zX
srkTIzZ8kprtwlrhGHtgCSotCyHZ6m3dgZCzWS81um1LoF6WX5NEI33odVbBXOau
3et8v+BXHDQ8q/L8vkNUhE+VI+HF5X6jbwOK+Wq8dxRy8E9krEZ8rVTWkmq4K6+I
kMfb8Ih8swpmuiCKnih+Em71d3HlKWUfYPOX
-----END CERTIFICATE-----