Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
File:                     Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer (raw, json)
Hash identifier:          81dPN0mrc0WKmaZEDuWPhI8wwogwnNlOXtKX7A+RvhE=
Subject key identifier:   11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194EB4C3549B8E78B8163FC16F4CFDCDF61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 09 Feb 2025 15:20:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215618

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:eb:4c:35:49:b8:e7:8b:81:63:fc:16:f4:cf:dc:df:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  9 15:20:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:ca:69:ce:01:af:ed:bc:ef:b7:24:e5:16:
                    e4:87:2b:0d:4c:f9:7f:9d:0e:ff:aa:77:b6:57:dc:
                    12:49:4b:f4:00:15:33:07:b6:78:5b:19:2a:f8:f5:
                    de:e3:9c:04:c6:47:bb:1b:bb:21:65:d1:8e:65:af:
                    e4:a7:07:fb:d5:18:09:b7:58:0c:41:fe:06:3c:67:
                    e7:69:5f:64:33:fd:df:cb:2a:7f:c8:cd:7b:ff:79:
                    43:2d:a2:72:18:42:5b:50:58:f4:20:d3:82:ad:38:
                    6d:ef:d2:c8:ff:fb:52:46:5d:dd:59:9b:d2:f1:dc:
                    12:09:35:99:c8:11:27:85:d7:37:18:e6:02:34:c2:
                    b5:3c:48:4a:ec:65:41:53:02:3f:12:f3:b9:3d:a0:
                    db:9c:81:0f:0b:19:ed:3f:a5:b4:2b:37:a7:37:ae:
                    94:3b:34:c9:13:53:c2:ba:22:f7:df:b0:1b:a6:81:
                    0f:2a:65:44:49:e1:67:b9:d9:ba:e1:5f:71:94:5b:
                    09:ec:a5:30:07:16:2c:0f:c7:ce:c8:5b:6c:4d:2d:
                    92:64:2f:f6:51:9e:1a:b4:31:5b:6f:61:54:ae:76:
                    cb:6d:c7:03:13:e9:38:d5:cf:69:ac:df:80:2c:af:
                    8d:fd:e5:39:25:a8:0a:2e:47:29:f4:fa:ba:c3:3c:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215618

    Signature Algorithm: sha256WithRSAEncryption
         29:32:df:1f:98:22:e9:43:31:c6:c3:87:c7:7f:79:af:b4:6c:
         18:b6:a5:97:a6:cd:ab:9b:4a:92:f7:7b:2c:bf:59:05:52:74:
         51:82:d3:5f:d6:7f:bb:1a:cc:22:58:ce:4a:48:52:47:d6:6d:
         8c:98:4a:37:14:b8:77:48:e9:f7:73:5d:86:40:f5:eb:f5:18:
         5c:06:5a:7f:c4:aa:58:32:72:19:55:d0:6d:16:5e:2b:cb:04:
         be:c2:dc:1a:76:af:36:13:59:07:9a:83:0c:ff:9a:20:9d:99:
         0d:0c:b5:e7:b0:c0:53:9f:d4:5c:0b:c3:2d:97:b2:fa:5b:5a:
         8b:58:59:07:16:14:13:e0:0d:3b:63:a2:3e:8e:f7:c1:a1:21:
         4d:b1:33:58:5f:29:f4:cb:93:55:f1:6d:50:c7:11:28:02:18:
         00:bb:de:d3:fa:e2:9a:43:8a:f3:fd:c0:01:e4:19:f8:f7:46:
         e0:15:64:c7:de:33:3b:b0:4f:60:58:07:2a:64:63:3f:23:78:
         fb:15:08:6e:83:c9:f2:ad:d5:a7:5a:d1:ce:69:ae:e3:a3:d9:
         7f:a3:a5:18:cf:d1:81:d0:c7:0a:b0:ad:03:0e:8b:82:fc:70:
         17:3e:8a:22:83:00:23:41:9c:ab:93:fa:f8:ec:7c:bb:0b:86:
         61:6e:03:64
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZTrTDVJuOeLgWP8FvTP3N9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA5MTUyMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWFlNGVjYWY1ZmU0OGUxODU4NmQ5MGZhNTRlOWU2ZmJmZDRmZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23DKac4Br+2877ck5RbkhysNTPl/
nQ7/qne2V9wSSUv0ABUzB7Z4Wxkq+PXe45wExke7G7shZdGOZa/kpwf71RgJt1gM
Qf4GPGfnaV9kM/3fyyp/yM17/3lDLaJyGEJbUFj0INOCrTht79LI//tSRl3dWZvS
8dwSCTWZyBEnhdc3GOYCNMK1PEhK7GVBUwI/EvO5PaDbnIEPCxntP6W0KzenN66U
OzTJE1PCuiL337AbpoEPKmVESeFnudm64V9xlFsJ7KUwBxYsD8fOyFtsTS2SZC/2
UZ4atDFbb2FUrnbLbccDE+k41c9prN+ALK+N/eU5JagKLkcp9Pq6wzxl9QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBGuTsr1/kjhhYbZD6VOnm+/1P7VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxL2RmNDA3
Yi0wNmEwLTQzN2MtODA5ZS03NGIzMjkzOWNjODQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZGY0MDdi
LTA2YTAtNDM3Yy04MDllLTc0YjMyOTM5Y2M4NC8xL0VhNU95dlgtU09HRmh0a1Bw
VTZlYjdfVV90VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNKQjANBgkqhkiG9w0BAQsFAAOCAQEAKTLfH5gi6UMx
xsOHx395r7RsGLall6bNq5tKkvd7LL9ZBVJ0UYLTX9Z/uxrMIljOSkhSR9ZtjJhK
NxS4d0jp93NdhkD16/UYXAZaf8SqWDJyGVXQbRZeK8sEvsLcGnavNhNZB5qDDP+a
IJ2ZDQy157DAU5/UXAvDLZey+ltai1hZBxYUE+ANO2OiPo73waEhTbEzWF8p9MuT
VfFtUMcRKAIYALve0/rimkOK8/3AAeQZ+PdG4BVkx94zO7BPYFgHKmRjPyN4+xUI
boPJ8q3Vp1rRzmmu46PZf6OlGM/RgdDHCrCtAw6LgvxwFz6KIoMAI0Gcq5P6+Ox8
uwuGYW4DZA==
-----END CERTIFICATE-----