Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.cer (raw, json)
Hash identifier:          MkmXNaM6pyZm2i8WlzuTZ5NI0a2QDD/226U/xyx7kRc=
Subject key identifier:   E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942826575C422200702A51D1A892430D1D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:53:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57031
                          IP: 89.22.0.0/21
                          IP: 2001:67c:7c0::/46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:57:5c:42:22:00:70:2a:51:d1:a8:92:43:0d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:53:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:c7:69:2d:16:c2:cb:ff:42:a6:c6:b1:b9:
                    eb:48:69:bc:1d:ce:e0:91:10:11:e4:ec:64:32:6d:
                    a9:7d:74:8d:94:6d:24:8c:25:7f:d8:ab:2b:03:84:
                    3f:6e:33:5f:07:ab:22:0f:f8:aa:68:1c:b0:a7:36:
                    77:d5:40:27:19:b3:d2:16:a2:da:73:cd:e9:79:49:
                    a4:b7:15:9f:dc:69:f8:b4:1e:33:79:eb:eb:b5:b3:
                    39:42:14:f7:4f:b2:3a:39:5c:88:d1:d5:48:18:e2:
                    1f:37:88:b5:ab:51:c5:2d:7c:28:76:f4:ea:4c:2a:
                    63:d5:b7:ef:b9:cd:bc:47:21:11:ce:1d:ff:1b:c4:
                    d3:b0:99:b2:f5:49:8d:0b:2b:16:e4:2e:ee:95:ac:
                    fd:11:b2:7a:27:99:d2:18:9e:83:f1:6b:09:70:7a:
                    f6:2c:54:ab:82:19:94:3f:89:96:6d:60:08:7b:d9:
                    bb:2b:af:00:d3:2b:02:fb:90:44:ad:1c:7f:d6:90:
                    a5:3d:71:3c:b3:d6:be:34:bd:d0:5b:82:51:dd:fe:
                    88:61:c2:8a:66:61:53:47:6a:56:6e:4c:7a:9f:4a:
                    73:38:53:70:5e:c2:06:79:a2:72:ff:d0:8d:cf:03:
                    b7:29:90:0a:fa:d5:f6:3a:5a:75:4d:f2:ea:0a:c6:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.22.0.0/21
                IPv6:
                  2001:67c:7c0::/46

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57031

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:2b:e5:73:c0:20:e7:e5:45:53:0d:41:b0:e5:6d:bd:58:
         4f:0e:fc:be:94:76:d6:b4:8b:20:0f:85:b0:56:2f:3f:d9:3b:
         aa:50:cf:5a:36:9d:1d:40:90:1a:e5:62:c7:56:e6:71:32:96:
         84:9e:c2:29:1d:83:2b:e4:27:a8:c1:06:96:18:ba:83:6e:1b:
         8e:db:da:d5:4f:13:4f:94:9e:b4:28:c1:04:a7:87:e2:84:92:
         4b:cf:4b:c8:bb:44:66:4b:95:ec:30:16:07:a1:d2:1d:25:2f:
         0b:f2:89:31:1a:e8:bf:c5:7b:34:3f:6d:71:70:81:c7:5b:24:
         e0:65:bf:06:ac:2a:72:05:a8:fc:54:3a:90:67:95:4d:38:e0:
         b8:72:01:14:3a:e5:ac:07:c0:82:48:cc:bd:29:5b:f9:ad:a5:
         5c:a3:61:63:36:de:ce:09:e9:1f:23:a9:c4:fb:46:e3:48:83:
         84:58:c6:46:ce:ce:8b:3d:78:65:92:59:72:90:36:3d:a9:68:
         c0:c4:bc:1f:a7:25:ab:b3:f8:ad:c8:dc:54:70:0d:80:76:df:
         82:41:05:c4:26:93:10:37:eb:61:ec:58:e5:7c:ec:1b:0b:83:
         2d:aa:26:0e:52:da:09:04:b3:d9:20:a1:2b:d2:0a:51:6a:eb:
         06:e5:3b:7b
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQoJldcQiIAcCpR0aiSQw0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQxN2IxMzY1M2ZmMWUzZTc4MjJlYjFlNWUwYTE3ZjRkNGY3ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycrHaS0Wwsv/QqbGsbnrSGm8Hc7g
kRAR5OxkMm2pfXSNlG0kjCV/2KsrA4Q/bjNfB6siD/iqaBywpzZ31UAnGbPSFqLa
c83peUmktxWf3Gn4tB4zeevrtbM5QhT3T7I6OVyI0dVIGOIfN4i1q1HFLXwodvTq
TCpj1bfvuc28RyERzh3/G8TTsJmy9UmNCysW5C7ulaz9EbJ6J5nSGJ6D8WsJcHr2
LFSrghmUP4mWbWAIe9m7K68A0ysC+5BErRx/1pClPXE8s9a+NL3QW4JR3f6IYcKK
ZmFTR2pWbkx6n0pzOFNwXsIGeaJy/9CNzwO3KZAK+tX2Olp1TfLqCsb86wIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFObRexNlP/Hj54IuseXgoX9NT3iBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzg4NGUz
ZS03YjUzLTQ3NWMtODYxZi02YWNkNTgxZDRiMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvODg0ZTNl
LTdiNTMtNDc1Yy04NjFmLTZhY2Q1ODFkNGIwZi8xLzV0RjdFMlVfOGVQbmdpNng1
ZUNoZjAxUGVJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQDWRYAMA8EAgACMAkDBwIgAQZ8B8AwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAN7HMA0GCSqGSIb3DQEBCwUAA4IBAQBtlyvlc8Ag
5+VFUw1BsOVtvVhPDvy+lHbWtIsgD4WwVi8/2TuqUM9aNp0dQJAa5WLHVuZxMpaE
nsIpHYMr5CeowQaWGLqDbhuO29rVTxNPlJ60KMEEp4fihJJLz0vIu0RmS5XsMBYH
odIdJS8L8okxGui/xXs0P21xcIHHWyTgZb8GrCpyBaj8VDqQZ5VNOOC4cgEUOuWs
B8CCSMy9KVv5raVco2FjNt7OCekfI6nE+0bjSIOEWMZGzs6LPXhlkllykDY9qWjA
xLwfpyWrs/ityNxUcA2Adt+CQQXEJpMQN+th7FjlfOwbC4MtqiYOUtoJBLPZIKEr
0gpRausG5Tt7
-----END CERTIFICATE-----