Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.cer (raw, json)
Hash identifier:          FlG9r2BzDJLFCUi2WunlP1o6+kQswcmJDGXEdCdvGuI=
Subject key identifier:   D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9DF0A7DAA4FBEE71D1808EAA7B76F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214731

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:df:0a:7d:aa:4f:be:e7:1d:18:08:ea:a7:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:78:31:cd:82:c1:68:f0:04:b9:05:cb:26:
                    c1:51:ac:9c:6f:dd:2a:80:de:29:b9:97:28:ef:0a:
                    4e:10:e7:81:61:cf:6e:21:80:2e:ee:09:18:5b:fb:
                    b1:5d:ff:2d:52:f7:2b:f7:4b:5a:10:e9:a0:17:29:
                    2b:71:16:92:1a:a5:40:a1:79:da:fb:49:cc:8e:39:
                    37:c9:e4:84:35:f5:bd:06:d0:e4:08:65:a6:05:8b:
                    54:c4:dc:78:2e:1e:4c:9b:21:f3:a6:35:0d:7c:e6:
                    b6:a2:76:c7:11:c3:22:83:ea:2e:21:35:91:10:3c:
                    4d:37:77:29:6f:79:85:d0:3c:54:03:f9:5a:e0:53:
                    d1:d6:10:a2:8f:55:54:b4:0e:eb:4c:34:ee:b7:0b:
                    76:bf:c5:17:96:d2:64:2c:f1:b1:a6:cd:9d:e7:38:
                    d8:0d:76:8f:64:92:d2:ed:95:5e:ee:ff:ce:6b:c3:
                    6d:0b:c4:46:9f:39:fc:12:fb:4d:f9:bd:6d:37:35:
                    92:f4:8f:10:d1:aa:69:cd:5c:40:33:44:8d:51:9c:
                    c0:7f:b6:44:3b:c1:9f:e2:c7:15:af:86:e1:5d:e0:
                    26:c1:04:d9:7b:9e:4b:86:5f:d5:33:38:14:60:8b:
                    0b:c6:6b:e0:1a:2f:ff:3e:39:f9:6d:6f:bb:51:23:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214731

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:7a:45:c1:1b:b0:bc:8a:06:03:9b:5b:07:80:2f:f1:70:
         3d:9a:a7:0b:24:91:9e:67:f3:fe:b4:01:c8:6d:cc:eb:c3:8f:
         f4:a0:b6:e7:cc:4d:1c:be:a5:6a:73:cb:8f:63:ad:47:31:20:
         5f:3d:be:37:f2:d8:b8:ce:83:39:87:12:ef:b2:42:da:53:d6:
         76:ab:6d:2d:90:32:45:45:32:9e:1a:86:be:2a:f0:cc:55:03:
         dd:eb:3d:d9:f8:15:3a:a0:de:94:a2:6e:ff:53:a7:fe:65:d2:
         ed:41:0f:ae:26:c8:d1:64:53:dd:63:45:21:18:15:a1:d7:f0:
         93:81:c2:6d:c8:3a:d5:af:9c:f1:dc:58:80:3b:b0:2f:f6:52:
         ae:64:3f:1d:be:a3:b1:1f:b1:1c:33:e7:e6:92:77:5e:ae:57:
         62:bb:55:e9:f3:1f:dd:d8:2e:ae:5b:42:1a:b2:9e:48:12:a5:
         5e:0d:bb:a8:c9:55:82:65:d2:2a:df:25:09:ca:7e:3e:40:b6:
         cc:6d:f8:73:3e:64:fe:40:af:51:d2:69:9d:65:d1:f3:af:44:
         b5:93:b3:46:90:1f:cf:63:d5:ff:e9:0d:fc:95:5a:34:2c:ef:
         d8:78:00:f0:97:57:38:3e:47:2f:8b:7f:6a:3d:94:d1:75:16:
         a0:fd:29:fa
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2d8KfapPvucdGAjqp7dvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGEwMDdlZDJmZTA4ZDQzM2UwZjBhMDJmNDNjYTdhY2IyNmY1YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJV4Mc2CwWjwBLkFyybBUaycb90q
gN4puZco7wpOEOeBYc9uIYAu7gkYW/uxXf8tUvcr90taEOmgFykrcRaSGqVAoXna
+0nMjjk3yeSENfW9BtDkCGWmBYtUxNx4Lh5MmyHzpjUNfOa2onbHEcMig+ouITWR
EDxNN3cpb3mF0DxUA/la4FPR1hCij1VUtA7rTDTutwt2v8UXltJkLPGxps2d5zjY
DXaPZJLS7ZVe7v/Oa8NtC8RGnzn8EvtN+b1tNzWS9I8Q0appzVxAM0SNUZzAf7ZE
O8Gf4scVr4bhXeAmwQTZe55Lhl/VMzgUYIsLxmvgGi//Pjn5bW+7USOjZwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNSgB+0v4I1DPg8KAvQ8p6yyb1oOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2Lzg2Y2Vi
OC00MTg4LTRiNmMtOGJkOC1jMmI4MWNlOThjNmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvODZjZWI4
LTQxODgtNGI2Yy04YmQ4LWMyYjgxY2U5OGM2ZC8xLzFLQUg3U19nalVNLUR3b0M5
RHluckxKdldnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNGyzANBgkqhkiG9w0BAQsFAAOCAQEAfuF6RcEbsLyK
BgObWweAL/FwPZqnCySRnmfz/rQByG3M68OP9KC258xNHL6lanPLj2OtRzEgXz2+
N/LYuM6DOYcS77JC2lPWdqttLZAyRUUynhqGvirwzFUD3es92fgVOqDelKJu/1On
/mXS7UEPribI0WRT3WNFIRgVodfwk4HCbcg61a+c8dxYgDuwL/ZSrmQ/Hb6jsR+x
HDPn5pJ3Xq5XYrtV6fMf3dgurltCGrKeSBKlXg27qMlVgmXSKt8lCcp+PkC2zG34
cz5k/kCvUdJpnWXR869EtZOzRpAfz2PV/+kN/JVaNCzv2HgA8JdXOD5HL4t/aj2U
0XUWoP0p+g==
-----END CERTIFICATE-----