Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
File:                     xPHyFPsizFNhKPXeSqAXqHiA8oU.cer (raw, json)
Hash identifier:          X3p9zKNC3OalhwMEsfNhHy3O0tD27BY4MSYrmn6ss2o=
Subject key identifier:   C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823BF6E393C39A9E812375D2A5253B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51707
                          IP: 46.18.8.0/21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:bf:6e:39:3c:39:a9:e8:12:37:5d:2a:52:53:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:e1:4c:d0:ec:58:73:21:b5:39:0f:bf:d8:
                    dc:6a:49:4a:3c:55:4a:87:bb:64:a9:f6:97:cf:54:
                    a1:97:82:f9:4b:d1:31:6b:2f:0b:6e:df:69:8b:02:
                    85:63:7b:7e:dd:60:e5:4d:75:70:e4:9e:e9:47:d8:
                    a3:2e:2c:5b:7b:67:b2:6b:ef:a2:2a:53:4e:a4:f3:
                    67:41:84:5c:1c:00:74:9b:c4:de:a3:1c:42:95:f7:
                    c8:f6:77:bf:78:d1:60:e8:ab:89:d2:dc:85:05:92:
                    4e:37:e4:5b:89:70:2d:2d:65:c9:44:53:59:64:3b:
                    a5:51:8e:7d:04:de:7d:c5:4e:15:92:3f:ad:8b:e0:
                    b7:e6:0e:c1:5a:14:72:5e:ec:ef:58:e3:3b:45:57:
                    e8:40:b4:c8:04:2d:b7:19:cb:ff:fa:9b:a4:c4:03:
                    8b:08:3a:65:e2:d6:4b:8c:cf:50:d2:14:d1:37:2a:
                    83:c9:5c:40:c7:5a:84:8e:13:e4:52:5a:8f:2a:01:
                    2b:5b:b8:44:27:2a:51:a4:d2:d7:ec:57:6c:f2:4e:
                    b2:5d:e7:21:ce:f8:e3:54:c5:3e:da:da:ec:e5:fb:
                    bd:9a:98:36:f2:42:0a:27:b5:39:e3:30:87:ee:24:
                    01:f6:63:45:02:69:b7:25:19:ff:2c:2d:83:71:d3:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.8.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51707

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:a6:5d:a4:d5:3c:80:bb:ad:b7:f8:8e:20:13:fd:ee:55:
         5d:db:5e:7e:72:a8:fd:4a:eb:f9:28:8b:af:16:f2:ac:04:13:
         f9:ca:c6:f2:ed:ba:c0:7c:9c:bd:58:53:f1:f7:da:ec:94:96:
         fe:0d:aa:b7:8c:11:7d:30:6e:58:ed:74:d0:19:b2:86:0f:06:
         1c:0c:98:b6:d0:46:54:16:81:bc:65:06:c8:76:9c:db:1a:9a:
         3a:99:b2:0c:1d:1d:36:d0:52:88:24:66:fb:3c:8f:57:1e:7c:
         aa:b1:f7:e1:98:60:9b:49:da:71:80:1d:cd:c8:3e:30:10:8e:
         f3:fa:de:58:bd:52:29:f1:ba:66:a6:0c:69:22:7c:3c:71:86:
         1b:6a:0e:33:1d:b2:01:d5:88:0d:99:11:7d:2d:3e:5d:8b:b6:
         67:b6:11:4e:a5:20:e6:c4:1b:98:a9:d2:e1:de:3a:e5:23:74:
         62:61:05:98:93:38:50:7f:c7:20:77:4c:74:85:a1:2c:cc:56:
         dc:56:a5:96:4c:d2:02:f9:e5:44:8d:af:4c:f1:16:73:23:1c:
         d1:30:7c:59:6c:d3:44:7b:86:5d:aa:07:50:35:3e:fa:8f:7a:
         57:47:29:84:1a:23:50:33:45:f8:ab:f0:4c:2c:74:b7:98:d5:
         12:89:5e:84
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQoI79uOTw5qegSN10qUlO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGYxZjIxNGZiMjJjYzUzNjEyOGY1ZGU0YWEwMTdhODc4ODBmMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DhTNDsWHMhtTkPv9jcaklKPFVK
h7tkqfaXz1Shl4L5S9Exay8Lbt9piwKFY3t+3WDlTXVw5J7pR9ijLixbe2eya++i
KlNOpPNnQYRcHAB0m8TeoxxClffI9ne/eNFg6KuJ0tyFBZJON+RbiXAtLWXJRFNZ
ZDulUY59BN59xU4Vkj+ti+C35g7BWhRyXuzvWOM7RVfoQLTIBC23Gcv/+pukxAOL
CDpl4tZLjM9Q0hTRNyqDyVxAx1qEjhPkUlqPKgErW7hEJypRpNLX7Fds8k6yXech
zvjjVMU+2trs5fu9mpg28kIKJ7U54zCH7iQB9mNFAmm3JRn/LC2DcdORzwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMTx8hT7IsxTYSj13kqgF6h4gPKFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiL2UyYjM0
OS1lNzk2LTQ4NjUtODA0MC1lY2Y0ZjQyMGM5OGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZTJiMzQ5
LWU3OTYtNDg2NS04MDQwLWVjZjRmNDIwYzk4YS8xL3hQSHlGUHNpekZOaEtQWGVT
cUFYcUhpQThvVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDLhIIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDJ+zANBgkqhkiG9w0BAQsFAAOCAQEArPCmXaTVPIC7rbf4jiAT/e5VXdtefnKo
/Urr+SiLrxbyrAQT+crG8u26wHycvVhT8ffa7JSW/g2qt4wRfTBuWO100Bmyhg8G
HAyYttBGVBaBvGUGyHac2xqaOpmyDB0dNtBSiCRm+zyPVx58qrH34Zhgm0nacYAd
zcg+MBCO8/reWL1SKfG6ZqYMaSJ8PHGGG2oOMx2yAdWIDZkRfS0+XYu2Z7YRTqUg
5sQbmKnS4d465SN0YmEFmJM4UH/HIHdMdIWhLMxW3FallkzSAvnlRI2vTPEWcyMc
0TB8WWzTRHuGXaoHUDU++o96V0cphBojUDNF+KvwTCx0t5jVEolehA==
-----END CERTIFICATE-----