Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer (raw, json)
Hash identifier:          frvI01boOitewi8JcpDXO4HCZiX5SEPR+pCitH5a8Lo=
Subject key identifier:   11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D709D39A8C79AE24273DCB13054494E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Mar 2025 09:58:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211967
                          IP: 2001:67c:26c8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d7:09:d3:9a:8c:79:ae:24:27:3d:cb:13:05:44:94:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 27 09:58:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:e6:2d:1a:55:59:c6:d3:79:3a:f4:03:3e:
                    c1:bb:06:c6:e7:3f:c9:43:e6:c5:90:fe:3e:8a:98:
                    b0:57:cc:0f:11:a7:c5:c4:ac:44:bc:46:e3:6a:6b:
                    a3:74:d5:32:2a:6c:3f:89:b7:bb:5b:68:ec:fe:04:
                    97:91:b6:61:50:b8:a1:59:af:4b:b7:2f:b8:4b:cf:
                    72:01:14:00:6d:40:5b:39:19:37:8e:5e:e0:04:b3:
                    bc:f9:6a:e3:e1:89:66:46:be:a9:13:27:09:81:09:
                    a3:b7:b1:4d:67:36:51:9b:47:5e:45:eb:e7:0a:2d:
                    3a:c2:e6:6a:0b:50:c9:bd:a5:e1:8a:ec:20:21:ac:
                    62:ce:a4:a0:a0:1b:fd:33:f4:02:18:7d:9a:67:72:
                    84:63:ac:0a:c9:d0:45:1f:ed:5c:79:74:00:01:2a:
                    3c:1f:a9:93:f9:25:67:25:f5:89:b6:83:a8:03:88:
                    d8:60:b7:80:68:db:80:18:69:f4:2c:a1:61:68:e2:
                    2c:e6:5a:8d:05:6e:32:8b:3b:dc:d3:07:9c:5d:d6:
                    de:41:4b:91:6b:50:30:8b:9b:b3:78:cb:08:73:87:
                    0e:d2:77:8d:11:56:e9:76:23:32:4d:95:0c:db:85:
                    a0:52:f3:0b:d2:f4:95:4b:46:f7:50:c3:84:23:7c:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:26c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211967

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:e7:61:e5:0e:ac:56:f6:12:37:99:50:fb:4a:18:a1:61:
         7e:65:c8:cf:ed:37:12:af:32:31:a9:cc:28:d0:f8:ba:29:6e:
         e5:f5:c5:9d:d1:f5:d3:a7:2a:39:7c:10:97:76:ff:06:b6:d4:
         f8:6f:7e:10:ce:04:66:9a:26:2e:e2:e6:a6:97:3e:1f:50:7f:
         02:6f:c0:41:5b:61:ce:69:85:e0:fc:f3:88:97:c3:b3:ca:9a:
         d3:7c:23:80:2d:31:6a:2d:ca:45:ba:c5:66:70:b2:80:1f:de:
         c0:5c:0c:03:d9:ca:be:9a:8b:43:cd:b4:98:04:fb:1e:fa:f7:
         a4:87:af:d6:3c:d1:86:6b:e3:a9:60:e0:0c:4d:1a:62:a0:7d:
         79:1b:83:25:e9:66:7a:34:11:aa:5f:d4:99:36:fd:b1:37:31:
         d8:e4:7f:15:6c:11:47:12:b7:d0:71:45:32:82:6c:4f:52:6a:
         d0:c2:aa:cd:ed:c9:a7:95:15:0d:eb:cd:03:18:fa:62:ee:fe:
         4a:1f:f6:0d:84:2d:74:67:93:7c:a0:8a:a6:48:5c:13:ad:4b:
         7d:16:f9:9f:f3:b3:7d:49:57:57:83:70:1d:05:36:35:8a:a2:
         a7:5e:3b:55:63:7c:b1:58:26:7f:a7:d1:ec:df:d5:ae:89:dc:
         01:e6:23:1e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZXXCdOajHmuJCc9yxMFRJTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzI3MDk1ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTJhNmEyNjBkMWU2N2UwYTdiNGU2ZGNmNDAzZmQzOWY2ZGU5NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhLmLRpVWcbTeTr0Az7BuwbG5z/J
Q+bFkP4+ipiwV8wPEafFxKxEvEbjamujdNUyKmw/ibe7W2js/gSXkbZhULihWa9L
ty+4S89yARQAbUBbORk3jl7gBLO8+Wrj4YlmRr6pEycJgQmjt7FNZzZRm0deRevn
Ci06wuZqC1DJvaXhiuwgIaxizqSgoBv9M/QCGH2aZ3KEY6wKydBFH+1ceXQAASo8
H6mT+SVnJfWJtoOoA4jYYLeAaNuAGGn0LKFhaOIs5lqNBW4yizvc0wecXdbeQUuR
a1Awi5uzeMsIc4cO0neNEVbpdiMyTZUM24WgUvML0vSVS0b3UMOEI3zVswIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2Lzg0ZmFl
ZC0wY2I1LTQ3OTktOTQ0Ny1hMzk4OGZjOTBkNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvODRmYWVk
LTBjYjUtNDc5OS05NDQ3LWEzOTg4ZmM5MGQ2MC8xL0VTcHFKZzBlWi1DbnRPYmM5
QVA5T2ZiZWwxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCbIMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM7/zANBgkqhkiG9w0BAQsFAAOCAQEAinbnYeUOrFb2EjeZUPtKGKFhfmXI
z+03Eq8yManMKND4uilu5fXFndH106cqOXwQl3b/BrbU+G9+EM4EZpomLuLmppc+
H1B/Am/AQVthzmmF4PzziJfDs8qa03wjgC0xai3KRbrFZnCygB/ewFwMA9nKvpqL
Q820mAT7Hvr3pIev1jzRhmvjqWDgDE0aYqB9eRuDJelmejQRql/UmTb9sTcx2OR/
FWwRRxK30HFFMoJsT1Jq0MKqze3Jp5UVDevNAxj6Yu7+Sh/2DYQtdGeTfKCKpkhc
E61LfRb5n/OzfUlXV4NwHQU2NYqip147VWN8sVgmf6fR7N/VroncAeYjHg==
-----END CERTIFICATE-----