Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
File:                     d44TTk_7X7E6woT-lIgnaCYVZjI.cer (raw, json)
Hash identifier:          Kv/NtvEdZVF15ZlXKNRTarWOhNdeoIO0YSIW3av2+kc=
Subject key identifier:   77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747E5E3EFF6BEB59A4EEDE8FAA4D2E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 80.75.218.0/24
                          IP: 2a13:7e80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:e5:e3:ef:f6:be:b5:9a:4e:ed:e8:fa:a4:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=778e134e4ffb5fb13ac284fe9488276826156632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:f2:46:72:69:d4:cb:6b:2e:54:c5:cd:9d:
                    c1:02:4b:c4:ca:78:c4:4a:30:34:be:aa:d6:d6:b6:
                    95:5b:88:49:96:f5:df:eb:95:35:a7:67:c0:ca:cc:
                    a7:fb:e1:44:f1:fd:bc:b9:37:24:fc:0d:5d:1f:a6:
                    ec:bc:30:1e:02:ce:be:e0:a7:eb:c4:e2:c1:93:63:
                    c5:22:a9:81:ae:f6:3b:e9:c4:7a:38:06:fc:e5:2f:
                    c4:50:4f:f7:0f:13:3b:83:12:71:02:95:08:41:ae:
                    60:1b:bd:11:28:a2:ed:67:25:05:ff:35:9e:0c:bd:
                    5c:9f:fe:fa:00:33:c5:65:77:0f:44:38:95:38:5b:
                    ad:a4:41:be:b6:7d:4c:5d:67:29:6c:f1:7c:7b:dd:
                    07:9e:5d:01:73:cc:d5:24:64:90:8a:83:2d:ce:d1:
                    73:87:41:fd:e8:e8:88:67:84:18:f8:74:05:00:e0:
                    c3:88:89:72:bf:1d:77:5c:3a:4b:23:df:f2:66:ee:
                    c2:2d:43:b4:07:90:59:f9:a8:1f:d3:c9:69:ec:94:
                    ca:9a:d8:c3:96:f7:66:a8:89:75:99:27:b1:13:da:
                    14:64:12:af:20:e0:e9:48:11:f6:87:d9:18:f1:2a:
                    29:d3:a3:f7:d3:5a:43:9f:04:b3:3e:6b:c4:da:38:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.218.0/24
                IPv6:
                  2a13:7e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:1b:a2:f1:17:56:32:b8:86:71:6f:a8:44:f5:2e:69:0d:
         3b:1f:f9:c5:91:ea:54:28:79:ff:01:78:7e:d2:6d:00:93:13:
         1d:02:f9:01:8f:d8:39:7a:a9:cf:d9:d0:ce:44:62:40:02:b4:
         01:a3:43:e4:1a:89:9f:18:4c:8b:63:dc:31:25:99:ee:7a:83:
         79:52:79:25:80:88:96:79:bc:ef:65:c6:f7:22:5f:5d:2f:71:
         5a:b6:35:03:fa:8e:52:5b:91:cd:b5:82:13:13:81:c8:eb:88:
         59:ec:4c:3e:28:8e:67:65:21:9d:f8:92:0b:c7:40:26:7e:9c:
         42:3f:8d:19:8a:5f:2e:c1:f2:92:28:c9:8f:6c:45:f5:66:f9:
         75:f2:ab:74:5b:f6:9e:8b:46:9d:2c:93:dc:1d:d9:3f:94:70:
         24:80:28:ab:da:e1:05:67:64:42:30:08:b7:29:a7:ca:45:f9:
         35:05:c6:fb:9d:2d:ce:7c:60:29:69:e4:bf:20:43:52:32:3d:
         48:bf:fb:ec:b1:d8:7d:fd:96:08:d0:0b:b0:2b:27:f5:43:eb:
         cf:89:0c:4f:ab:64:3f:48:18:8e:ae:d7:8e:d3:ca:44:3e:07:
         68:14:f7:0d:b7:5d:ee:5e:af:c0:39:84:89:64:e8:81:50:f6:
         cc:2c:25:7b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQnR+Xj7/a+tZpO7ej6pNLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzhlMTM0ZTRmZmI1ZmIxM2FjMjg0ZmU5NDg4Mjc2ODI2MTU2NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMLyRnJp1MtrLlTFzZ3BAkvEynjE
SjA0vqrW1raVW4hJlvXf65U1p2fAysyn++FE8f28uTck/A1dH6bsvDAeAs6+4Kfr
xOLBk2PFIqmBrvY76cR6OAb85S/EUE/3DxM7gxJxApUIQa5gG70RKKLtZyUF/zWe
DL1cn/76ADPFZXcPRDiVOFutpEG+tn1MXWcpbPF8e90Hnl0Bc8zVJGSQioMtztFz
h0H96OiIZ4QY+HQFAODDiIlyvx13XDpLI9/yZu7CLUO0B5BZ+agf08lp7JTKmtjD
lvdmqIl1mSexE9oUZBKvIODpSBH2h9kY8Sop06P301pDnwSzPmvE2jjSgwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHeOE05P+1+xOsKE/pSIJ2gmFWYyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzU4NDFi
MS0wMTJmLTQwNDYtYjFkNS0wOTliYWQwMzc2OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNTg0MWIx
LTAxMmYtNDA0Ni1iMWQ1LTA5OWJhZDAzNzY4ZS8xL2Q0NFRUa183WDdFNndvVC1s
SWduYUNZVlpqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUEvaMA0EAgACMAcDBQMqE36AMA0GCSqGSIb3
DQEBCwUAA4IBAQAw2Bui8RdWMriGcW+oRPUuaQ07H/nFkepUKHn/AXh+0m0AkxMd
AvkBj9g5eqnP2dDORGJAArQBo0PkGomfGEyLY9wxJZnueoN5UnklgIiWebzvZcb3
Il9dL3FatjUD+o5SW5HNtYITE4HI64hZ7Ew+KI5nZSGd+JILx0AmfpxCP40Zil8u
wfKSKMmPbEX1Zvl18qt0W/aei0adLJPcHdk/lHAkgCir2uEFZ2RCMAi3KafKRfk1
Bcb7nS3OfGApaeS/IENSMj1Iv/vssdh9/ZYI0AuwKyf1Q+vPiQxPq2Q/SBiOrteO
08pEPgdoFPcNt13uXq/AOYSJZOiBUPbMLCV7
-----END CERTIFICATE-----