Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
File:                     1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer (raw, json)
Hash identifier:          S57aTNv1zpbA8ZFfuTAykPKfaZRpCFhco/QfwQ0+Yko=
Subject key identifier:   D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521B0CF7206AF57AF167908783D36CC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198079

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:b0:cf:72:06:af:57:af:16:79:08:78:3d:36:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:6a:43:5a:bb:76:6b:94:7d:4a:8f:6a:45:
                    91:54:3f:23:79:8a:7a:bb:33:c4:22:cb:cf:83:ef:
                    7a:1e:48:d5:59:8e:83:3a:4f:27:d8:53:48:ae:50:
                    12:af:02:a9:63:b2:39:9c:ff:33:a8:c5:9a:71:ab:
                    65:03:ad:89:0c:27:a0:8a:e1:24:43:2d:62:90:ae:
                    47:37:d7:53:36:10:b7:8e:49:dc:c4:4a:5b:45:9a:
                    c1:c5:c7:75:51:b3:97:aa:8b:55:7f:d3:11:fe:2d:
                    dd:4b:56:74:70:a7:13:33:a2:ba:e8:c1:4e:12:47:
                    f7:97:71:d2:17:7b:be:15:9f:bc:be:85:c1:f6:f9:
                    c5:71:7a:eb:16:c0:6e:2e:49:3a:2d:f6:60:21:17:
                    1f:d8:e9:cd:7a:40:db:33:15:85:4b:0d:5a:3d:f1:
                    c4:62:33:49:21:d7:38:19:27:90:c8:f2:aa:f6:11:
                    25:31:b3:d7:86:e7:07:1c:9f:76:43:51:b5:95:f3:
                    7b:37:36:80:6b:15:55:ab:e2:ef:f1:7a:c5:51:1e:
                    1d:d0:97:84:c2:34:27:ed:41:56:56:5f:ca:a8:c0:
                    1c:ba:e8:ba:4c:e2:1d:3b:d9:de:ad:47:ab:3c:66:
                    8a:7a:ca:aa:ce:2b:32:eb:b9:3f:25:53:2f:30:15:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198079

    Signature Algorithm: sha256WithRSAEncryption
         a8:ed:e5:b6:e8:e1:1a:7e:b3:14:b7:4f:ba:6d:95:e1:1d:e6:
         3a:d6:77:eb:85:fb:ec:6b:9b:cd:25:07:91:ce:50:e8:4e:29:
         ac:79:cb:ef:69:00:2e:29:f1:72:98:31:9c:23:bf:a5:c4:30:
         99:ab:c7:be:87:ef:05:2d:99:6e:c0:46:3e:77:a7:96:48:d7:
         1e:9f:dc:f1:f7:1b:65:cc:b3:9a:00:d4:74:b5:83:75:4a:74:
         16:29:91:1b:0a:d4:7d:48:98:c1:3b:7d:c1:a8:0e:ef:33:8f:
         37:11:73:54:ac:13:1d:dc:b1:f5:b4:b8:b5:e5:ca:76:3a:fb:
         39:b3:0c:b7:1c:ab:55:3a:80:2c:c6:51:23:e7:79:84:ce:d1:
         82:c8:4b:c5:c8:ff:ca:44:20:2d:ea:ae:eb:5f:c3:b1:1c:3f:
         2d:09:74:a5:12:78:f6:ee:72:7a:96:15:ec:8c:6b:38:c3:22:
         7b:e2:ac:a1:dd:74:42:44:9b:91:7e:23:7c:16:d3:47:37:85:
         9b:2f:21:f5:f4:42:70:12:89:22:75:cd:22:d8:0b:f9:77:11:
         06:25:85:7f:c6:fa:ce:49:2e:0a:9d:c2:7b:23:51:6d:7e:20:
         ca:ed:18:27:fd:1a:b9:e6:bd:cb:11:49:4b:92:dd:87:8d:a4:
         f3:dd:ac:b9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQlIbDPcgavV68WeQh4PTbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjM5Y2Q3NTUzYmQ3ZWEzY2Q4OGVhYzAyNjA1ZWFhNDMwNmQ4ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtphqQ1q7dmuUfUqPakWRVD8jeYp6
uzPEIsvPg+96HkjVWY6DOk8n2FNIrlASrwKpY7I5nP8zqMWacatlA62JDCegiuEk
Qy1ikK5HN9dTNhC3jkncxEpbRZrBxcd1UbOXqotVf9MR/i3dS1Z0cKcTM6K66MFO
Ekf3l3HSF3u+FZ+8voXB9vnFcXrrFsBuLkk6LfZgIRcf2OnNekDbMxWFSw1aPfHE
YjNJIdc4GSeQyPKq9hElMbPXhucHHJ92Q1G1lfN7NzaAaxVVq+Lv8XrFUR4d0JeE
wjQn7UFWVl/KqMAcuui6TOIdO9nerUerPGaKesqqzisy67k/JVMvMBWeoQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNY5zXVTvX6jzYjqwCYF6qQwbY8nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzEwNjNk
ZC1hNTUxLTQxNjQtODEwNi0xMTkwMTFmOTFmZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMTA2M2Rk
LWE1NTEtNDE2NC04MTA2LTExOTAxMWY5MWZlYy8xLzFqbk5kVk85ZnFQTmlPckFK
Z1hxcERCdGp5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMFvzANBgkqhkiG9w0BAQsFAAOCAQEAqO3ltujhGn6z
FLdPum2V4R3mOtZ364X77GubzSUHkc5Q6E4prHnL72kALinxcpgxnCO/pcQwmavH
vofvBS2ZbsBGPnenlkjXHp/c8fcbZcyzmgDUdLWDdUp0FimRGwrUfUiYwTt9wagO
7zOPNxFzVKwTHdyx9bS4teXKdjr7ObMMtxyrVTqALMZRI+d5hM7RgshLxcj/ykQg
Lequ61/DsRw/LQl0pRJ49u5yepYV7IxrOMMie+Ksod10QkSbkX4jfBbTRzeFmy8h
9fRCcBKJInXNItgL+XcRBiWFf8b6zkkuCp3CeyNRbX4gyu0YJ/0auea9yxFJS5Ld
h42k892suQ==
-----END CERTIFICATE-----