Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
File:                     1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer (raw, json)
Hash identifier:          mJusCnZZECyTRpwNfDIDJFYvhsZ187rvDpJJPOtwINw=
Subject key identifier:   D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A4ADBF16907D2FB8442406AB23340
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207948
                          IP: 185.1.149.0/24
                          IP: 2001:7f8:e3::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:4a:db:f1:69:07:d2:fb:84:42:40:6a:b2:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:6f:20:45:eb:7e:e1:98:38:25:a8:6a:8e:
                    52:6f:64:bd:e4:81:36:96:25:24:1b:73:b7:e0:6b:
                    d3:ed:0d:73:e2:e5:e8:34:db:5d:6c:3b:33:01:81:
                    d6:91:cb:07:08:3f:51:11:95:3e:ac:e2:97:77:41:
                    bc:6c:0d:22:8e:e5:a5:a4:1c:b7:88:b6:65:8f:40:
                    8e:6e:4b:51:a7:b2:c9:ba:e2:55:e9:85:46:0b:2c:
                    ae:49:7c:50:8f:90:e5:3b:6c:e2:11:ab:59:d7:a2:
                    4e:3c:a9:a2:b7:13:95:a6:b5:f5:aa:29:85:7e:f6:
                    da:60:6c:9a:ac:b5:ea:37:c2:a2:ac:51:5b:b7:b8:
                    c1:f1:69:e4:90:93:8e:ea:6e:b1:9c:95:12:63:e7:
                    ce:90:be:8b:31:04:22:6d:55:8f:d7:83:1e:2a:89:
                    77:d4:40:9e:52:45:51:1f:0d:b3:07:14:36:01:d9:
                    26:d0:9b:76:70:24:6e:22:19:6f:49:ea:6c:2c:a2:
                    67:7b:74:f7:8e:20:96:4c:16:39:22:da:1c:6f:51:
                    64:8d:58:df:18:66:37:99:1c:9a:15:e6:83:c7:62:
                    b0:fe:9d:69:4c:68:ed:16:37:5f:87:d7:a9:b7:01:
                    d4:e2:35:90:1f:54:29:86:ca:b5:ea:99:b0:02:71:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.149.0/24
                IPv6:
                  2001:7f8:e3::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207948

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:6a:73:69:28:d6:9f:da:54:74:29:41:33:4a:a6:8b:af:
         b4:a4:f9:96:d6:da:4d:1f:e2:22:d5:a8:43:a2:d6:05:54:2e:
         6e:44:75:6e:2e:e6:5a:73:9f:a2:89:3a:ae:82:c8:20:6e:c4:
         c0:95:87:30:cf:21:fa:79:96:11:5d:4e:23:57:c6:89:54:9d:
         6f:37:3b:43:3b:a7:d7:91:1e:40:4e:19:8c:90:4b:eb:41:4c:
         ac:b4:0f:15:4e:1f:cb:72:33:86:d4:62:3b:d8:86:0a:73:7d:
         df:ed:ee:47:d9:21:ca:e9:7d:b3:c2:6b:ce:20:07:85:2d:43:
         74:b1:33:dd:d7:3c:8f:a6:01:24:c2:65:74:60:57:51:85:c1:
         cb:a2:a9:20:54:b6:3b:5c:cf:51:02:66:2d:4c:e2:3c:e8:4f:
         3b:7a:62:6c:98:55:d7:63:2f:55:8a:2f:5e:02:27:9f:ed:8c:
         5e:bb:64:8c:ba:f6:39:62:11:7e:61:cc:1d:0a:19:99:ee:85:
         98:34:cb:97:62:8a:da:84:44:4e:52:6b:95:42:98:ff:07:71:
         b8:e6:8f:1e:74:21:69:e8:b4:72:eb:ce:4f:70:c9:c6:49:e8:
         07:cc:83:61:19:a8:f0:bc:52:a1:59:39:39:7e:0b:83:e7:fc:
         a9:28:5e:df
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQjakrb8WkH0vuEQkBqsjNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWIyMzJhYTI0MzFjYTRkZTVkODI1MmEzYzljYzZiYjYzMGQxZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2VvIEXrfuGYOCWoao5Sb2S95IE2
liUkG3O34GvT7Q1z4uXoNNtdbDszAYHWkcsHCD9REZU+rOKXd0G8bA0ijuWlpBy3
iLZlj0CObktRp7LJuuJV6YVGCyyuSXxQj5DlO2ziEatZ16JOPKmitxOVprX1qimF
fvbaYGyarLXqN8KirFFbt7jB8WnkkJOO6m6xnJUSY+fOkL6LMQQibVWP14MeKol3
1ECeUkVRHw2zBxQ2Adkm0Jt2cCRuIhlvSepsLKJne3T3jiCWTBY5Itocb1FkjVjf
GGY3mRyaFeaDx2Kw/p1pTGjtFjdfh9eptwHU4jWQH1Qphsq16pmwAnE7rwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFNWyMqokMcpN5dglKjycxrtjDR1JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJmZjhj
Yy0zMzE1LTQzZWUtYjg5OC03ZWE1OTJmOWIyOWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmZmOGNj
LTMzMTUtNDNlZS1iODk4LTdlYTU5MmY5YjI5ZS8xLzFiSXlxaVF4eWszbDJDVXFQ
SnpHdTJNTkhVay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAuQGVMA8EAgACMAkDBwAgAQf4AOMwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAyxMMA0GCSqGSIb3DQEBCwUAA4IBAQBj12pzaSjW
n9pUdClBM0qmi6+0pPmW1tpNH+Ii1ahDotYFVC5uRHVuLuZac5+iiTqugsggbsTA
lYcwzyH6eZYRXU4jV8aJVJ1vNztDO6fXkR5AThmMkEvrQUystA8VTh/LcjOG1GI7
2IYKc33f7e5H2SHK6X2zwmvOIAeFLUN0sTPd1zyPpgEkwmV0YFdRhcHLoqkgVLY7
XM9RAmYtTOI86E87emJsmFXXYy9Vii9eAief7Yxeu2SMuvY5YhF+YcwdChmZ7oWY
NMuXYorahEROUmuVQpj/B3G45o8edCFp6LRy685PcMnGSegHzINhGajwvFKhWTk5
fguD5/ypKF7f
-----END CERTIFICATE-----