Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
File:                     4JnuB4Iu8qzpw1b3tCyur_JclpI.cer (raw, json)
Hash identifier:          P70sGr3xnm6Qw2gpf55cnUnwUjUxmjRiLZtSmPZjIX8=
Subject key identifier:   E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423697E846104CCA563DFD49DA08EFB9D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199679
                          AS: 203226
                          IP: 2a14:6980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:7e:84:61:04:cc:a5:63:df:d4:9d:a0:8e:fb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:97:17:e8:d3:a4:e5:9a:3d:e1:88:db:aa:
                    6f:ca:09:17:76:15:06:4f:dd:92:58:32:56:de:5c:
                    f1:7f:2f:69:82:91:a9:fe:3e:4a:c6:02:52:02:60:
                    7c:31:c2:2e:31:c4:74:df:c0:36:74:a2:e2:8d:5e:
                    78:15:35:1a:e3:7b:76:a3:0b:29:21:d6:db:65:c2:
                    4a:54:74:42:f5:87:7c:c9:e8:42:22:e8:14:81:87:
                    3e:a9:13:1d:3c:45:eb:7d:2d:0e:ec:47:e3:30:fb:
                    97:ca:0b:56:64:e3:ff:d9:ca:f4:8a:07:b3:96:39:
                    92:b4:e7:c5:47:c2:52:15:25:e2:b5:f1:39:c1:ed:
                    89:a6:86:46:b4:7b:87:79:11:49:90:b9:69:50:17:
                    20:49:2a:6a:62:79:ee:a8:9f:37:32:01:09:c3:58:
                    01:6e:9a:0e:27:29:48:d8:8c:20:8f:2e:eb:41:99:
                    5e:a0:33:8f:b7:f0:31:d2:66:30:02:15:67:dc:1e:
                    e6:a5:9d:3b:e0:ca:dd:96:3b:f8:b5:18:60:3f:0d:
                    5c:b8:92:a4:64:a9:f8:1e:73:38:a5:a2:a7:ca:c8:
                    00:2f:7d:c2:c8:8f:de:1f:15:4d:dc:f2:d7:8c:1b:
                    aa:12:23:65:c8:69:29:bb:27:a0:cc:1d:d7:79:df:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199679
                  203226

    Signature Algorithm: sha256WithRSAEncryption
         83:61:b4:48:74:db:84:3b:70:12:cd:b2:4d:3b:40:8f:4b:6a:
         eb:c6:10:a2:ea:bd:65:f9:b8:11:f3:40:29:50:3b:5c:3b:7f:
         74:5e:c4:b1:5a:b5:db:71:3a:57:7f:f0:73:1c:30:8b:39:4d:
         1d:4b:87:39:90:16:9e:c1:17:3b:4a:da:e2:ae:28:3c:d1:83:
         cc:49:24:b1:99:4c:15:0d:d6:15:ff:83:18:c9:36:a3:e1:12:
         f4:86:da:88:8e:e4:76:52:68:2f:e5:7c:63:fd:68:92:64:86:
         06:ea:08:fb:2d:10:ae:70:f2:1a:ca:8e:97:fc:f0:cc:f5:ba:
         69:c7:6f:96:15:42:4d:a3:66:4d:2b:a0:6b:02:86:c5:17:9f:
         77:92:80:c6:6c:a3:7f:6a:91:4f:7c:7f:3a:b1:a3:dc:cb:c2:
         52:20:1f:a1:10:f7:03:ae:25:9f:ef:d1:1a:77:f3:77:7d:5a:
         a6:12:1d:b9:ee:13:24:b9:89:0a:f3:c7:e4:53:5e:fd:be:74:
         33:b5:f1:a7:cf:b1:35:68:fc:fc:8c:87:86:35:d6:55:e3:99:
         a3:df:86:58:65:37:5c:85:fc:fa:60:53:a5:e0:82:0f:20:44:
         56:99:50:16:82:0a:9b:c7:f6:1f:f6:a2:7d:e4:69:84:69:04:
         21:37:d4:9c
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQjaX6EYQTMpWPf1J2gjvudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDk5ZWUwNzgyMmVmMmFjZTljMzU2ZjdiNDJjYWVhZmYyNWM5NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPOXF+jTpOWaPeGI26pvygkXdhUG
T92SWDJW3lzxfy9pgpGp/j5KxgJSAmB8McIuMcR038A2dKLijV54FTUa43t2owsp
IdbbZcJKVHRC9Yd8yehCIugUgYc+qRMdPEXrfS0O7EfjMPuXygtWZOP/2cr0igez
ljmStOfFR8JSFSXitfE5we2JpoZGtHuHeRFJkLlpUBcgSSpqYnnuqJ83MgEJw1gB
bpoOJylI2Iwgjy7rQZleoDOPt/Ax0mYwAhVn3B7mpZ074Mrdljv4tRhgPw1cuJKk
ZKn4HnM4paKnysgAL33CyI/eHxVN3PLXjBuqEiNlyGkpuyegzB3Xed/1AwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOCZ7geCLvKs6cNW97Qsrq/yXJaSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0Lzk3MzJi
Yi1mNTkwLTQxOTQtODViZS1kMDY5ZjE3NjAyYjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvOTczMmJi
LWY1OTAtNDE5NC04NWJlLWQwNjlmMTc2MDJiNi8xLzRKbnVCNEl1OHF6cHcxYjN0
Q3l1cl9KY2xwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhRpgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMDC/8CAwMZ2jANBgkqhkiG9w0BAQsFAAOCAQEAg2G0SHTbhDtwEs2yTTtAj0tq
68YQouq9Zfm4EfNAKVA7XDt/dF7EsVq123E6V3/wcxwwizlNHUuHOZAWnsEXO0ra
4q4oPNGDzEkksZlMFQ3WFf+DGMk2o+ES9IbaiI7kdlJoL+V8Y/1okmSGBuoI+y0Q
rnDyGsqOl/zwzPW6acdvlhVCTaNmTSugawKGxRefd5KAxmyjf2qRT3x/OrGj3MvC
UiAfoRD3A64ln+/RGnfzd31aphIdue4TJLmJCvPH5FNe/b50M7Xxp8+xNWj8/IyH
hjXWVeOZo9+GWGU3XIX8+mBTpeCCDyBEVplQFoIKm8f2H/aifeRphGkEITfUnA==
-----END CERTIFICATE-----