Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
File:                     exPgVmn1VmYr7FZk4QFln5Zsgmo.cer (raw, json)
Hash identifier:          anQXWmXziZN1HM5E3E2zaGHO6QW8N9dRBiK+l2tzbrU=
Subject key identifier:   7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3C289095EEF9761218F489EAC90C5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.223.121.0/24
                          IP: 2001:67c:2f70::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c2:89:09:5e:ef:97:61:21:8f:48:9e:ac:90:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b13e05669f556662bec5664e101659f966c826a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:eb:cd:49:08:99:a5:a9:2d:fd:ec:89:7c:
                    8a:ad:d7:27:ed:25:99:88:fc:15:f7:9e:db:18:6e:
                    b2:b5:a7:ec:4b:7b:a9:2b:cf:17:0d:48:a3:a2:24:
                    a5:b0:19:d0:b3:4b:ec:8e:62:6f:ff:73:dd:65:12:
                    23:d7:9c:ca:ad:8f:2e:1d:01:fb:8e:17:08:f1:6f:
                    bc:10:b2:2b:37:d1:33:e6:26:bb:9b:7f:9a:a9:40:
                    71:9a:b7:e1:6d:97:13:79:94:cf:ea:d2:d3:8e:77:
                    cd:e2:ef:ec:d9:00:4a:fa:c4:0c:8b:b6:0e:fc:23:
                    f0:c3:11:a4:24:20:b0:70:54:fa:7e:a4:f9:7a:6e:
                    26:12:ac:37:54:63:6d:28:dc:5c:c9:0e:69:08:eb:
                    f3:d5:ea:91:72:c3:ea:5a:a5:8c:f4:27:b0:e7:e6:
                    8c:11:de:e8:2a:e7:f4:2e:0b:da:f3:b6:5f:23:61:
                    94:8b:56:67:6d:5e:7a:62:5d:50:25:f9:21:ed:a7:
                    6d:9b:8a:19:e6:41:cc:5b:b5:fa:9f:14:a3:f3:82:
                    42:dc:29:b5:01:99:4c:bf:ca:dd:4d:7d:d3:44:95:
                    06:e1:bc:fe:16:09:d2:63:61:4a:62:e3:e4:86:47:
                    ea:83:f0:e8:d1:2e:c7:57:11:61:a1:bb:4d:b5:29:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.121.0/24
                IPv6:
                  2001:67c:2f70::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:ed:bc:16:4e:c5:56:f1:d7:50:e2:07:1b:4c:16:fe:be:
         79:fe:34:38:3c:e1:7c:fe:88:7a:93:fc:0a:f5:34:c9:e6:f4:
         43:54:a3:4a:af:a7:41:33:c7:9b:e9:fb:21:1d:4c:9b:ca:74:
         08:62:72:c9:21:bd:03:1a:6b:55:90:f6:70:41:66:58:f3:a5:
         26:37:4c:17:6a:cd:47:1c:d6:3b:4a:2c:db:7c:7b:85:00:08:
         4f:9f:54:3d:90:12:d4:17:00:6f:18:6b:d7:ed:8b:69:b8:75:
         6b:c3:b9:21:ef:d9:95:90:8d:d2:6a:1b:e9:aa:17:42:c0:0b:
         7e:5b:6b:fa:d9:7d:e5:f6:18:37:7a:01:18:9a:1a:af:6d:b0:
         3f:75:d5:27:9f:a4:86:93:e4:6a:bb:55:19:6b:af:17:52:5a:
         85:44:06:69:5d:1d:37:5a:34:d9:3a:13:02:99:fb:0e:75:73:
         f1:1e:a6:cd:1d:78:8c:ca:a4:93:49:d4:98:45:7b:33:90:4f:
         5f:a1:3e:ad:f3:3e:8e:b8:2b:93:c7:09:cc:4b:b5:7e:6a:0b:
         74:d0:41:b2:b1:a4:5b:6f:3c:de:b7:b2:c0:95:ca:6e:18:3e:
         03:26:b0:8f:01:9a:62:de:2e:c1:39:b1:1b:4b:17:b7:39:0f:
         6f:86:fd:cc
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQks8KJCV7vl2Ehj0ierJDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjEzZTA1NjY5ZjU1NjY2MmJlYzU2NjRlMTAxNjU5Zjk2NmM4MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJLrzUkImaWpLf3siXyKrdcn7SWZ
iPwV957bGG6ytafsS3upK88XDUijoiSlsBnQs0vsjmJv/3PdZRIj15zKrY8uHQH7
jhcI8W+8ELIrN9Ez5ia7m3+aqUBxmrfhbZcTeZTP6tLTjnfN4u/s2QBK+sQMi7YO
/CPwwxGkJCCwcFT6fqT5em4mEqw3VGNtKNxcyQ5pCOvz1eqRcsPqWqWM9Cew5+aM
Ed7oKuf0Lgva87ZfI2GUi1ZnbV56Yl1QJfkh7adtm4oZ5kHMW7X6nxSj84JC3Cm1
AZlMv8rdTX3TRJUG4bz+FgnSY2FKYuPkhkfqg/Do0S7HVxFhobtNtSnmgQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2Y3NzYx
YS1mYzM4LTQ3NWMtOGExMS05NGM3MzM0NmMwZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZjc3NjFh
LWZjMzgtNDc1Yy04YTExLTk0YzczMzQ2YzBlYS8xL2V4UGdWbW4xVm1ZcjdGWms0
UUZsbjVac2dtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW995MA8EAgACMAkDBwAgAQZ8L3AwDQYJKoZI
hvcNAQELBQADggEBAJuX7bwWTsVW8ddQ4gcbTBb+vnn+NDg84Xz+iHqT/Ar1NMnm
9ENUo0qvp0Ezx5vp+yEdTJvKdAhicskhvQMaa1WQ9nBBZljzpSY3TBdqzUcc1jtK
LNt8e4UACE+fVD2QEtQXAG8Ya9fti2m4dWvDuSHv2ZWQjdJqG+mqF0LAC35ba/rZ
feX2GDd6ARiaGq9tsD911SefpIaT5Gq7VRlrrxdSWoVEBmldHTdaNNk6EwKZ+w51
c/Eeps0deIzKpJNJ1JhFezOQT1+hPq3zPo64K5PHCcxLtX5qC3TQQbKxpFtvPN63
ssCVym4YPgMmsI8BmmLeLsE5sRtLF7c5D2+G/cw=
-----END CERTIFICATE-----