Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.cer (raw, json)
Hash identifier:          D1G/sT3zFfMAUtSDCy20e1keeAAJpJ2rk8DLvwWzH5c=
Subject key identifier:   F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D5168B14FF2638CC2C4D85BF25E16C35
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 07:50:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 13215
                          IP: 185.97.164.0/22
                          IP: 2a0b:a8c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:16:8b:14:ff:26:38:cc:2c:4d:85:bf:25:e1:6c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 07:50:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:6c:d4:aa:08:55:fb:a3:37:b6:1f:d1:0d:
                    3c:f8:4f:48:cf:54:54:37:96:27:cd:fa:09:5e:a6:
                    a8:56:3b:85:11:12:f2:3c:e8:f3:3f:f3:3b:17:04:
                    84:0c:6e:1c:c6:c0:34:25:9b:ae:4a:b1:e9:a0:b5:
                    12:2b:62:b8:fb:e7:65:ea:28:72:ca:56:e9:73:6b:
                    89:65:6d:69:30:10:2f:8b:2a:b6:bc:11:fd:c8:21:
                    73:3f:03:8b:aa:3f:61:7e:19:60:cb:df:c3:b3:bd:
                    22:97:73:18:3e:38:38:35:db:90:3e:58:49:2a:99:
                    60:71:24:cf:a7:33:61:68:e5:a7:44:58:4c:6b:0d:
                    50:5d:a7:55:66:91:82:b0:eb:fa:b2:d3:13:50:f1:
                    dd:fe:36:ce:4f:0e:78:dd:10:6e:88:02:3a:35:50:
                    1d:8c:5c:f9:18:9e:3a:5f:c5:2d:08:29:fd:1d:4f:
                    cd:6e:1c:e2:96:9d:9b:e4:e0:8a:72:77:64:f6:6d:
                    33:20:73:99:16:d8:ee:d8:60:7b:a2:c1:4d:d7:5b:
                    45:16:b9:1f:6d:f4:c9:04:54:62:9b:e7:5c:1a:b7:
                    34:17:4a:56:b4:6f:48:4a:b5:3c:db:ca:73:d2:ef:
                    84:0d:d5:08:b1:84:99:db:38:9e:1f:ed:da:10:39:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.164.0/22
                IPv6:
                  2a0b:a8c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13215

    Signature Algorithm: sha256WithRSAEncryption
         89:0a:e0:96:dd:94:3a:83:ea:c9:ba:90:ea:1d:f0:7c:2b:a5:
         2e:42:a6:ea:a5:34:4d:a5:52:74:5d:ab:71:3e:34:1b:10:eb:
         1b:69:4c:91:b2:7a:24:27:0e:50:2a:e5:19:cc:25:76:07:a6:
         00:d6:53:6e:ca:dc:a7:08:50:db:93:6b:bf:ad:59:ab:57:51:
         91:3b:ae:b1:3d:f2:a5:fc:bc:d5:7d:7d:c0:f0:c7:95:c1:8a:
         4e:1f:a3:af:c6:8c:25:e5:35:e9:44:11:82:96:1c:f7:a7:ea:
         f7:84:df:61:2b:89:0d:93:10:6c:cd:f2:f7:e5:79:37:be:b5:
         ce:8c:99:79:41:d1:4d:93:ab:c0:67:d9:c4:2e:ab:8a:5f:d7:
         fb:d4:8a:34:31:8b:4d:68:bd:ca:22:e3:e2:4d:75:e8:55:79:
         91:42:29:48:a8:b6:a8:5e:0b:de:f1:ba:50:ef:4d:97:40:9e:
         b8:b1:34:03:02:50:c5:08:ef:98:a9:92:99:b8:f5:08:ca:9e:
         12:bc:f0:1a:ae:7b:98:ee:98:f9:4a:3f:b1:54:47:20:63:88:
         91:c6:c0:4a:62:e7:f9:87:3a:d9:66:51:36:e3:b1:b3:97:4b:
         09:f0:5c:59:45:4e:6a:bf:13:fd:93:59:1e:32:76:e8:2b:64:
         18:09:b0:ac
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZTVFosU/yY4zCxNhb8l4Ww1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA1MDc1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGEyYjYwNWM1OGUwNzQ2YWFkYzViZjBkN2NiYzM2YzkzMDdmNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomBs1KoIVfujN7Yf0Q08+E9Iz1RU
N5YnzfoJXqaoVjuFERLyPOjzP/M7FwSEDG4cxsA0JZuuSrHpoLUSK2K4++dl6ihy
ylbpc2uJZW1pMBAviyq2vBH9yCFzPwOLqj9hfhlgy9/Ds70il3MYPjg4NduQPlhJ
KplgcSTPpzNhaOWnRFhMaw1QXadVZpGCsOv6stMTUPHd/jbOTw543RBuiAI6NVAd
jFz5GJ46X8UtCCn9HU/Nbhzilp2b5OCKcndk9m0zIHOZFtju2GB7osFN11tFFrkf
bfTJBFRim+dcGrc0F0pWtG9ISrU828pz0u+EDdUIsYSZ2zieH+3aEDm+SwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPiitgXFjgdGqtxb8NfLw2yTB/dNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzA3NmQz
Ny00YWI0LTRlYzMtYTRiMC01MjQwMjVlMTMyMDIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3
LTRhYjQtNGVjMy1hNGIwLTUyNDAyNWUxMzIwMi8xLzEtS0syQmNXT0IwYXEzRnZ3
MTh2RGJKTUg5MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArlhpDANBAIAAjAHAwUDKguowDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgIznzANBgkqhkiG9w0BAQsFAAOCAQEAiQrglt2UOoPq
ybqQ6h3wfCulLkKm6qU0TaVSdF2rcT40GxDrG2lMkbJ6JCcOUCrlGcwldgemANZT
bsrcpwhQ25Nrv61Zq1dRkTuusT3ypfy81X19wPDHlcGKTh+jr8aMJeU16UQRgpYc
96fq94TfYSuJDZMQbM3y9+V5N761zoyZeUHRTZOrwGfZxC6ril/X+9SKNDGLTWi9
yiLj4k116FV5kUIpSKi2qF4L3vG6UO9Nl0CeuLE0AwJQxQjvmKmSmbj1CMqeErzw
Gq57mO6Y+Uo/sVRHIGOIkcbASmLn+Yc62WZRNuOxs5dLCfBcWUVOar8T/ZNZHjJ2
6CtkGAmwrA==
-----END CERTIFICATE-----