Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.cer (raw, json)
Hash identifier:          llRcZJRsFMvOvH6L+Fa1D8eHy6lpxwiKN6HF5D+WgyU=
Subject key identifier:   F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274720C993B68B18CCE70BBDEB14F129
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 30830
                          IP: 80.73.128.0 -- 80.73.133.255
                          IP: 2a01:5140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:20:c9:93:b6:8b:18:cc:e7:0b:bd:eb:14:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:54:a7:98:5b:7c:ae:1a:d8:26:39:56:c3:
                    2a:fe:60:2f:41:d5:60:65:17:56:95:b9:e9:97:f9:
                    52:41:84:9a:ab:7e:e9:40:38:4e:04:b1:ff:8b:a6:
                    25:cd:52:76:b7:68:45:a7:6f:ea:83:e1:e0:f8:b0:
                    8a:fc:28:b9:85:f5:66:b5:dc:53:fe:6c:a6:e0:66:
                    8f:4d:1f:c4:72:9c:a7:1e:a3:38:9a:c5:14:48:c4:
                    10:02:c8:a2:1a:b0:e5:79:82:ed:fe:62:64:bd:41:
                    c8:80:63:67:62:49:3a:c1:2d:c0:46:51:d5:8b:b6:
                    e3:ba:62:50:d1:3f:5d:85:dd:a9:52:7c:95:d9:d4:
                    ed:48:f7:1b:4f:92:44:de:23:69:dd:d5:26:75:0b:
                    ed:6c:9e:aa:74:8e:dd:19:c5:67:75:65:98:86:68:
                    79:37:a9:dd:ad:72:40:e7:75:d2:db:ff:47:19:ca:
                    14:49:c0:79:65:ea:12:1c:69:42:bd:99:17:69:1c:
                    86:ed:67:95:6d:2b:f5:45:24:ae:28:9d:28:a9:c9:
                    47:a7:3b:40:51:72:cf:8b:5d:bf:ae:20:50:47:4b:
                    1f:dc:ad:5b:73:e7:11:3e:0a:dd:91:62:0e:77:c0:
                    6b:29:dd:96:9e:b5:9b:33:05:e0:b2:09:b2:95:e0:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.128.0-80.73.133.255
                IPv6:
                  2a01:5140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30830

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:24:f0:ee:be:c8:e9:f7:dc:cc:ab:65:96:88:af:07:f0:
         ad:9e:61:7e:82:68:f5:00:d1:39:8a:bb:83:e1:cd:07:90:1c:
         d9:7b:7e:19:58:3d:d9:2c:52:fb:a1:8c:51:9d:29:42:fa:7c:
         76:36:a6:01:60:fc:01:e1:4e:1b:df:b9:12:18:56:1e:6e:a3:
         32:51:80:08:cd:b0:ad:19:82:8f:bf:f4:c7:22:bc:a1:87:97:
         08:2a:67:bc:f5:88:5a:08:27:06:b5:88:c6:68:8b:89:5c:c7:
         c8:36:ce:3e:61:5a:c0:85:55:a0:95:e0:c4:b0:47:e8:1d:cd:
         f4:1d:c0:26:2d:3a:2c:90:67:70:78:fd:1b:06:79:98:8e:78:
         1c:ea:28:08:e1:b4:6e:ee:f7:30:ab:78:18:bb:c1:43:69:75:
         9b:9c:17:4b:c7:35:f7:cf:4b:2c:48:dc:d5:5d:c0:65:92:d1:
         d3:40:2c:cf:18:59:9b:07:0e:c8:41:53:a2:38:c3:0f:c6:c2:
         62:4c:5a:8e:08:54:09:55:e1:0d:20:41:03:81:be:cf:9a:95:
         49:0f:e2:5c:13:15:48:ad:17:08:5c:50:3d:76:c7:c8:84:9d:
         15:dd:45:c4:b7:91:21:e4:ea:9b:aa:63:65:e9:a4:07:d5:66:
         ea:6c:ff:5a
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZQnRyDJk7aLGMznC73rFPEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzUzYTE5YjVkY2UxZDQxNTkzNTIyMjk0MjZhOWZkYjdkOWY5YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5Up5hbfK4a2CY5VsMq/mAvQdVg
ZRdWlbnpl/lSQYSaq37pQDhOBLH/i6YlzVJ2t2hFp2/qg+Hg+LCK/Ci5hfVmtdxT
/mym4GaPTR/EcpynHqM4msUUSMQQAsiiGrDleYLt/mJkvUHIgGNnYkk6wS3ARlHV
i7bjumJQ0T9dhd2pUnyV2dTtSPcbT5JE3iNp3dUmdQvtbJ6qdI7dGcVndWWYhmh5
N6ndrXJA53XS2/9HGcoUScB5ZeoSHGlCvZkXaRyG7WeVbSv1RSSuKJ0oqclHpztA
UXLPi12/riBQR0sf3K1bc+cRPgrdkWIOd8BrKd2WnrWbMwXgsgmyleAReQIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPdToZtdzh1BWTUiKUJqn9t9n5o7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2ZmZTA3
Yy0xNmYwLTQ5OTktODg5NC0xMGYwMDkzZWFhZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvZmZlMDdj
LTE2ZjAtNDk5OS04ODk0LTEwZjAwOTNlYWFlMC8xLzkxT2htMTNPSFVGWk5TSXBR
bXFmMjMyZm1qcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTAUBAIAATAOMAwDBAdQSYADBAFQSYQwDQQCAAIwBwMFACoBUUAw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICeG4wDQYJKoZIhvcNAQELBQADggEBAF/r
JPDuvsjp99zMq2WWiK8H8K2eYX6CaPUA0TmKu4PhzQeQHNl7fhlYPdksUvuhjFGd
KUL6fHY2pgFg/AHhThvfuRIYVh5uozJRgAjNsK0Zgo+/9McivKGHlwgqZ7z1iFoI
Jwa1iMZoi4lcx8g2zj5hWsCFVaCV4MSwR+gdzfQdwCYtOiyQZ3B4/RsGeZiOeBzq
KAjhtG7u9zCreBi7wUNpdZucF0vHNffPSyxI3NVdwGWS0dNALM8YWZsHDshBU6I4
ww/GwmJMWo4IVAlV4Q0gQQOBvs+alUkP4lwTFUitFwhcUD12x8iEnRXdRcS3kSHk
6puqY2XppAfVZups/1o=
-----END CERTIFICATE-----