Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
File:                     wtKsHXyezPVli4jxb2E9ez6OjHI.cer (raw, json)
Hash identifier:          cTFDIiyMqv+fc9NzdF8HOXIrYSCNjxmUWnOpNJ2oszY=
Subject key identifier:   C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B2597344BAB1E2F7CE89E66980D624
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211804
                          IP: 185.250.240.0/22
                          IP: 2a07:d840::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:59:73:44:ba:b1:e2:f7:ce:89:e6:69:80:d6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:26:0c:1e:e3:15:e2:6c:2a:a4:8d:e3:dd:
                    7e:b9:40:84:a2:04:7c:79:88:3e:f3:81:ce:cd:ea:
                    ff:44:e6:07:4e:2a:3c:78:c3:86:68:51:d6:e3:b6:
                    ae:cd:88:29:e8:e3:d3:6e:da:50:8c:43:5a:68:bb:
                    17:71:12:64:43:59:bb:fa:2d:50:2a:6d:84:ee:0f:
                    a5:95:fe:83:54:4d:50:03:56:82:5c:e5:e1:f1:dc:
                    94:51:a4:7a:7b:c6:6f:70:67:9d:71:6a:2b:37:0e:
                    ea:ee:7c:f1:d0:1f:9f:2a:26:51:8e:b7:49:a1:2a:
                    e7:33:0a:b7:80:b9:4c:9e:d0:a4:13:a2:2b:94:03:
                    00:87:4c:f1:4c:51:30:8a:7b:3b:57:93:70:26:b9:
                    a7:d8:70:06:8c:87:c0:5c:c9:a5:05:c7:a3:22:6a:
                    85:01:07:ea:cd:d5:3c:70:b0:b4:18:ef:48:62:65:
                    8d:7a:93:22:d5:c7:fc:6e:82:c1:44:57:92:5e:a0:
                    0d:db:64:24:14:6e:d3:8a:16:ed:23:9c:7f:ba:c1:
                    de:b9:4e:79:4a:b2:7c:f5:49:79:0f:eb:9d:b8:62:
                    05:11:d1:05:0c:09:0e:89:4a:6e:02:34:a5:9d:93:
                    26:bb:4b:6c:7d:da:b9:41:9e:94:8c:38:46:34:32:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.240.0/22
                IPv6:
                  2a07:d840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211804

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:68:0f:c7:9d:27:17:99:5b:87:f2:5c:2d:a7:26:a2:fb:
         32:0a:e0:24:ee:6b:88:a8:36:6d:f3:e8:74:b1:9b:d1:cc:ec:
         ec:60:62:8f:27:c1:27:50:af:c6:95:a4:95:47:58:72:78:c9:
         2a:d8:a8:31:3e:ca:11:73:a2:e5:7c:cd:a6:15:79:db:48:c4:
         71:8b:73:b3:5c:e6:4e:83:7b:92:06:e0:32:54:55:5d:11:43:
         07:32:b8:3b:6f:2e:e3:4d:10:8c:0e:c2:e8:34:1c:79:13:0b:
         be:77:98:77:32:79:6a:b4:40:da:15:87:c2:c5:01:c8:29:35:
         a5:c7:6f:74:35:54:3a:03:ca:8f:fd:2d:75:36:4b:f7:16:76:
         5f:d4:1f:7b:b8:2d:bf:25:8c:d6:5d:17:7a:83:ae:09:c3:ae:
         d3:7f:5a:b1:16:45:1d:cb:f2:21:33:cb:80:e6:42:7e:fc:6c:
         34:bd:fa:ea:2b:43:3f:e5:de:77:7d:4a:ae:0b:73:87:43:5a:
         b8:b1:30:ca:0c:09:b2:5d:b1:39:f0:40:15:65:9b:68:f3:87:
         f4:fa:d9:8a:98:32:aa:1e:89:51:37:d0:83:c2:a1:da:b7:63:
         75:4c:d7:79:16:f1:5e:55:11:a7:b1:b7:00:37:01:eb:4e:65:
         dd:98:cd:b4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQksllzRLqx4vfOieZpgNYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQyYWMxZDdjOWVjY2Y1NjU4Yjg4ZjE2ZjYxM2Q3YjNlOGU4YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosgmDB7jFeJsKqSN491+uUCEogR8
eYg+84HOzer/ROYHTio8eMOGaFHW47auzYgp6OPTbtpQjENaaLsXcRJkQ1m7+i1Q
Km2E7g+llf6DVE1QA1aCXOXh8dyUUaR6e8ZvcGedcWorNw7q7nzx0B+fKiZRjrdJ
oSrnMwq3gLlMntCkE6IrlAMAh0zxTFEwins7V5NwJrmn2HAGjIfAXMmlBcejImqF
AQfqzdU8cLC0GO9IYmWNepMi1cf8boLBRFeSXqAN22QkFG7TihbtI5x/usHeuU55
SrJ89Ul5D+uduGIFEdEFDAkOiUpuAjSlnZMmu0tsfdq5QZ6UjDhGNDJxhwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMLSrB18nsz1ZYuI8W9hPXs+joxyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzhiMWJj
Mi01OTI2LTRhY2UtYjE2Zi0xOTdmZTgzNjU2NDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvOGIxYmMy
LTU5MjYtNGFjZS1iMTZmLTE5N2ZlODM2NTY0My8xL3d0S3NIWHllelBWbGk0anhi
MkU5ZXo2T2pISS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufrwMA0EAgACMAcDBQMqB9hAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7XDANBgkqhkiG9w0BAQsFAAOCAQEAHyNoD8edJxeZ
W4fyXC2nJqL7MgrgJO5riKg2bfPodLGb0czs7GBijyfBJ1CvxpWklUdYcnjJKtio
MT7KEXOi5XzNphV520jEcYtzs1zmToN7kgbgMlRVXRFDBzK4O28u400QjA7C6DQc
eRMLvneYdzJ5arRA2hWHwsUByCk1pcdvdDVUOgPKj/0tdTZL9xZ2X9Qfe7gtvyWM
1l0XeoOuCcOu039asRZFHcvyITPLgOZCfvxsNL366itDP+Xed31Krgtzh0NauLEw
ygwJsl2xOfBAFWWbaPOH9PrZipgyqh6JUTfQg8Kh2rdjdUzXeRbxXlURp7G3ADcB
605l3ZjNtA==
-----END CERTIFICATE-----