Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
File:                     BKSudHHI82IdUyVtdfEQt0iZeJg.cer (raw, json)
Hash identifier:          L+KdTsQJ7MRT58NvtWQT+kam8jNDcvAfCQSXvz7VSxQ=
Subject key identifier:   04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B644BA9ABAA6E989E5750478FB9097
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208721
                          IP: 45.14.116.0/22
                          IP: 2a0f:50c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:44:ba:9a:ba:a6:e9:89:e5:75:04:78:fb:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04a4ae7471c8f3621d53256d75f110b748997898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:58:8c:df:1b:ab:d0:85:89:00:f4:57:3a:
                    ed:fe:ce:29:9a:79:c4:d0:0e:5e:4d:cb:cb:d3:98:
                    2c:87:ed:2a:65:9b:50:09:59:f6:84:72:dd:38:a4:
                    49:e4:27:21:1c:ca:90:1b:fe:c1:51:32:07:ce:71:
                    bc:c7:b7:43:44:ba:b6:a7:41:ef:6e:dc:61:75:71:
                    2c:a8:1d:e1:b8:bd:b5:4f:80:53:c6:02:e2:d2:be:
                    5e:64:66:d5:23:de:4e:a7:c6:b6:a5:7e:a0:b1:2c:
                    44:60:cc:26:fa:61:b2:da:9c:cf:33:71:8f:81:87:
                    35:20:e0:05:41:d6:f4:93:b2:2c:14:40:af:79:21:
                    91:16:fc:dc:06:43:c0:28:dc:01:fb:bb:83:88:67:
                    76:12:0b:88:45:e7:ee:fc:25:e6:cc:bf:29:fc:ef:
                    92:a1:51:92:82:8b:fb:e2:09:de:9d:8e:7d:8a:af:
                    e1:ed:63:ab:22:7a:25:a6:82:2a:a4:a5:2d:e6:36:
                    59:e4:13:cd:05:59:eb:48:22:fd:6f:6b:b3:1e:46:
                    04:b9:31:90:17:43:75:03:bf:09:3c:31:e3:d6:62:
                    2d:a2:b7:40:e0:67:c6:68:c4:ed:df:3e:34:78:fe:
                    34:cb:b0:14:1e:5d:fe:3a:2b:4b:3c:b4:88:98:d1:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.116.0/22
                IPv6:
                  2a0f:50c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208721

    Signature Algorithm: sha256WithRSAEncryption
         8b:38:2b:44:d4:a1:94:0a:dd:18:b1:e6:ef:82:a4:14:f3:0e:
         47:1f:2f:86:ec:73:30:b6:d1:40:40:f3:06:49:6f:07:18:0e:
         ef:7c:8a:b1:e3:51:85:da:78:c5:3e:ec:8b:de:60:c8:49:4d:
         79:33:47:0e:df:af:2e:1d:52:b3:d7:3c:05:bf:e3:c9:51:fb:
         2c:f1:b2:8e:45:8c:05:78:ba:1d:c2:80:9c:78:21:0b:0e:58:
         59:fc:72:09:e6:4a:6a:f4:55:43:59:2f:37:6c:05:ac:a6:76:
         c3:e5:96:03:bf:f7:74:0e:51:e1:3a:73:84:50:0c:af:46:fc:
         3c:a1:ce:d7:64:92:1d:97:b7:69:b0:b8:be:75:4d:14:43:7a:
         f4:e5:34:53:f6:1b:a6:aa:44:19:cd:6a:69:c3:6a:85:1d:ac:
         f5:2d:51:b4:f1:b5:f0:b3:ab:25:6a:d3:3f:b9:29:2d:2e:d7:
         d3:27:86:5e:c8:c4:72:ea:58:a9:3e:ee:6a:6d:96:a6:fe:ac:
         9c:08:b2:ba:2f:0b:37:f5:c2:2e:ed:2e:11:fc:a4:3d:f3:cf:
         a9:fc:ff:16:4b:c2:35:e8:2e:87:f6:2c:1a:27:7c:de:34:8e:
         a1:92:99:cc:4e:87:30:af:58:bb:f2:b6:b0:95:da:22:d4:24:
         80:6d:c3:71
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntkS6mrqm6YnldQR4+5CXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGE0YWU3NDcxYzhmMzYyMWQ1MzI1NmQ3NWYxMTBiNzQ4OTk3ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44xYjN8bq9CFiQD0Vzrt/s4pmnnE
0A5eTcvL05gsh+0qZZtQCVn2hHLdOKRJ5CchHMqQG/7BUTIHznG8x7dDRLq2p0Hv
btxhdXEsqB3huL21T4BTxgLi0r5eZGbVI95Op8a2pX6gsSxEYMwm+mGy2pzPM3GP
gYc1IOAFQdb0k7IsFECveSGRFvzcBkPAKNwB+7uDiGd2EguIRefu/CXmzL8p/O+S
oVGSgov74gnenY59iq/h7WOrInolpoIqpKUt5jZZ5BPNBVnrSCL9b2uzHkYEuTGQ
F0N1A78JPDHj1mItordA4GfGaMTt3z40eP40y7AUHl3+OitLPLSImNFJ5QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFASkrnRxyPNiHVMlbXXxELdImXiYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2YzYmE1
ZS04OThjLTRmZTktYmQ4OC0zYzM2NzNkNDQ5MDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvZjNiYTVl
LTg5OGMtNGZlOS1iZDg4LTNjMzY3M2Q0NDkwNS8xL0JLU3VkSEhJODJJZFV5VnRk
ZkVRdDBpWmVKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ50MA0EAgACMAcDBQMqD1DAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvUTANBgkqhkiG9w0BAQsFAAOCAQEAizgrRNShlArd
GLHm74KkFPMORx8vhuxzMLbRQEDzBklvBxgO73yKseNRhdp4xT7si95gyElNeTNH
Dt+vLh1Ss9c8Bb/jyVH7LPGyjkWMBXi6HcKAnHghCw5YWfxyCeZKavRVQ1kvN2wF
rKZ2w+WWA7/3dA5R4TpzhFAMr0b8PKHO12SSHZe3abC4vnVNFEN69OU0U/YbpqpE
Gc1qacNqhR2s9S1RtPG18LOrJWrTP7kpLS7X0yeGXsjEcupYqT7uam2Wpv6snAiy
ui8LN/XCLu0uEfykPfPPqfz/FkvCNeguh/YsGid83jSOoZKZzE6HMK9Yu/K2sJXa
ItQkgG3DcQ==
-----END CERTIFICATE-----