Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
File:                     C2LPjNkLafk26CtXgBzXedcuPz4.cer (raw, json)
Hash identifier:          N0Uy0iu5NXfEvhgu/QFfF0QWDKqDJ5grPcEjjhkj2rU=
Subject key identifier:   0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195C8727BFE54D514089016A1DA6DB141AD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 13:58:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214966
                          IP: 194.53.216.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:72:7b:fe:54:d5:14:08:90:16:a1:da:6d:b1:41:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 13:58:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:27:48:72:a5:6f:e1:b1:51:c4:e0:03:05:
                    21:31:13:2e:ae:ef:51:74:47:0c:95:fc:94:fb:2e:
                    48:b0:60:05:e8:b7:84:43:50:8b:17:e7:b5:7f:e1:
                    88:0b:7c:ad:1a:96:e8:2d:ad:0e:0c:86:fe:bd:3a:
                    aa:c0:25:50:11:1b:f5:6b:0f:c3:b8:c1:d1:d4:12:
                    08:97:b7:a1:15:7b:90:b9:e0:a2:25:75:ba:64:03:
                    40:94:ba:38:01:cb:c9:2f:33:f7:91:0b:e9:40:94:
                    d1:18:08:71:ee:71:a7:42:79:fd:55:eb:08:8a:38:
                    4f:b4:18:c1:28:88:55:03:88:2e:3c:d3:9c:45:78:
                    50:f6:5b:da:19:9d:bb:65:b5:69:64:f2:de:e8:95:
                    56:1e:42:94:04:a0:99:b2:c4:1b:0f:8d:5d:39:38:
                    24:6f:8d:ce:ff:d0:4a:7b:bd:31:a4:3a:3e:b8:cd:
                    98:75:51:a5:c7:ab:14:54:17:20:38:43:47:77:2e:
                    f5:f8:12:45:ec:7b:d9:a4:74:a7:16:1f:3f:dd:e8:
                    7c:5c:e9:c3:ec:7a:9a:a5:b8:63:f3:c1:a8:8e:8f:
                    83:58:a8:da:2c:33:14:93:a4:47:92:39:b0:67:d3:
                    d6:f5:6f:e1:0d:12:06:a0:d5:63:8b:e1:73:1f:cf:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214966

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:f7:18:fc:48:27:6f:ee:26:b9:8f:df:98:58:5a:d2:d4:
         e3:9c:7f:7c:7d:e3:b8:ba:fe:26:36:d4:44:01:b7:76:8a:17:
         23:b2:b0:07:8f:1d:1e:f4:25:8f:8f:e5:32:c0:03:06:58:74:
         85:bb:17:cf:1a:cd:88:9b:09:5e:ee:a5:f9:df:cc:76:2e:5d:
         1c:17:1e:90:18:aa:3c:48:b1:d7:7d:ff:dc:63:cc:cb:8f:3c:
         49:ac:f6:9b:a1:8e:70:3f:bb:5d:c2:a5:85:ae:70:bd:8b:60:
         33:6c:ec:45:11:6f:0c:5b:e1:6a:9d:b3:cf:3c:b0:17:e7:19:
         b6:60:41:0f:92:4c:de:d1:4f:31:c3:af:14:8c:66:38:0d:b9:
         8c:67:f7:66:56:48:bd:9e:d7:90:dc:9a:a2:ef:40:6a:0d:c5:
         e5:18:db:a2:0e:68:1b:32:a0:71:a4:37:9d:8d:b7:6a:ef:4d:
         25:b9:e1:3c:fa:cd:89:a8:c0:5c:88:ee:23:c4:86:45:6f:9d:
         15:97:70:0c:3f:d4:f4:1c:a8:a7:f2:17:ac:a8:46:f8:aa:bb:
         6a:ec:08:6a:8c:97:5a:08:58:d7:ad:8c:df:6c:34:e0:0f:25:
         f6:66:62:48:c2:ad:18:3c:97:c1:f7:e6:d0:72:a9:94:e9:b4:
         6f:51:b1:bc
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZXIcnv+VNUUCJAWodptsUGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI0MTM1ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjYyY2Y4Y2Q5MGI2OWY5MzZlODJiNTc4MDFjZDc3OWQ3MmUzZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RgnSHKlb+GxUcTgAwUhMRMuru9R
dEcMlfyU+y5IsGAF6LeEQ1CLF+e1f+GIC3ytGpboLa0ODIb+vTqqwCVQERv1aw/D
uMHR1BIIl7ehFXuQueCiJXW6ZANAlLo4AcvJLzP3kQvpQJTRGAhx7nGnQnn9VesI
ijhPtBjBKIhVA4guPNOcRXhQ9lvaGZ27ZbVpZPLe6JVWHkKUBKCZssQbD41dOTgk
b43O/9BKe70xpDo+uM2YdVGlx6sUVBcgOENHdy71+BJF7HvZpHSnFh8/3eh8XOnD
7Hqapbhj88Gojo+DWKjaLDMUk6RHkjmwZ9PW9W/hDRIGoNVji+FzH88u8QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAtiz4zZC2n5NugrV4Ac13nXLj8+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzgyY2M1
ZC1kNmE4LTQ2NjctYjA0OS05NjdjNTdkNWEzNjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvODJjYzVk
LWQ2YTgtNDY2Ny1iMDQ5LTk2N2M1N2Q1YTM2MS8xL0MyTFBqTmtMYWZrMjZDdFhn
QnpYZWRjdVB6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDwjXYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNHtjANBgkqhkiG9w0BAQsFAAOCAQEAf6b3GPxIJ2/uJrmP35hYWtLU45x/fH3j
uLr+JjbURAG3dooXI7KwB48dHvQlj4/lMsADBlh0hbsXzxrNiJsJXu6l+d/Mdi5d
HBcekBiqPEix133/3GPMy488Saz2m6GOcD+7XcKlha5wvYtgM2zsRRFvDFvhap2z
zzywF+cZtmBBD5JM3tFPMcOvFIxmOA25jGf3ZlZIvZ7XkNyaou9Aag3F5Rjbog5o
GzKgcaQ3nY23au9NJbnhPPrNiajAXIjuI8SGRW+dFZdwDD/U9Byop/IXrKhG+Kq7
auwIaoyXWghY162M32w04A8l9mZiSMKtGDyXwffm0HKplOm0b1GxvA==
-----END CERTIFICATE-----