Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
File:                     FV9JSb982s8-nUZXsIzYR4DUF0U.cer (raw, json)
Hash identifier:          m4fRTCI9zZ4wlBGfO+Hj9Lc3qFNuc2sJQ0ke8wK3sBw=
Subject key identifier:   15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252196CD2D96EBA9B3AE0C3531356B08
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203376
                          IP: 185.136.200.0/22
                          IP: 2a06:ffc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:96:cd:2d:96:eb:a9:b3:ae:0c:35:31:35:6b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:45:3f:71:be:f2:1f:13:d5:ea:ad:46:8f:
                    a4:61:30:4a:72:ff:25:7d:15:22:23:f1:eb:30:23:
                    10:76:f8:73:f7:7d:5b:2a:e8:75:c2:c5:3a:76:d7:
                    a9:6a:9b:c1:46:a1:58:99:ea:27:87:a2:63:52:5a:
                    6f:68:24:1d:02:2d:2f:7c:63:7b:6a:6a:99:be:dd:
                    1c:e9:18:ee:68:56:65:64:20:92:a5:38:4b:78:11:
                    78:0f:ec:a7:ad:1b:85:cf:c8:4a:b6:ef:06:f1:2d:
                    97:db:0e:26:01:fc:13:11:55:84:f2:b6:5d:e1:77:
                    78:9c:46:64:59:8f:02:02:ee:57:9a:c3:1d:12:63:
                    8d:fa:c7:b3:06:4f:00:bf:81:0c:db:ae:ac:f9:a7:
                    6c:80:73:42:c5:8d:49:e4:02:11:2d:ad:ad:68:d7:
                    38:c9:58:9b:d2:7c:b1:e0:c4:5f:8c:35:7a:b3:0a:
                    41:21:14:1f:b9:40:94:59:80:ef:92:bc:13:0d:30:
                    b7:5a:60:dc:fa:ac:14:c4:be:30:26:01:5a:33:d3:
                    df:39:87:62:2d:6b:f7:94:b8:25:0e:22:be:96:ad:
                    37:1c:40:cb:6d:f8:92:5f:4a:f8:d5:c8:85:14:d6:
                    54:c7:a5:eb:22:a1:b9:b0:ef:c7:f2:5f:d4:cd:74:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.200.0/22
                IPv6:
                  2a06:ffc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203376

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:56:2b:27:64:8c:98:fa:b7:e6:04:b4:2b:5b:9e:10:be:
         d1:d9:e8:1b:2b:7f:06:6d:db:68:dc:36:93:dd:17:e5:b7:38:
         30:bd:42:e1:7c:09:d3:c3:b2:cb:5d:0c:f7:d9:a8:04:e6:c3:
         f3:11:42:79:d6:b8:ac:e8:a0:fb:ed:8d:bc:61:e5:dc:75:79:
         81:2f:b2:91:0a:05:1f:47:0a:2f:1d:0b:39:d1:2b:51:e1:7e:
         0d:12:8f:f8:fd:15:71:22:83:77:31:49:e5:7e:33:88:e0:2f:
         9d:08:62:cb:5d:5f:7d:27:9b:c0:7c:7e:fc:12:43:8b:02:8f:
         08:6a:4a:20:65:10:0f:82:a1:36:d5:9f:45:6a:92:df:3f:8c:
         f3:d3:2b:ab:11:a3:e0:e8:64:93:81:3c:93:5c:ba:1d:a6:e5:
         c1:21:d1:8d:22:4c:a8:55:3d:b3:d3:01:dc:ff:86:11:2f:6f:
         99:eb:4a:82:7e:16:7e:a3:0c:49:8e:5d:d1:49:61:79:2c:65:
         ca:18:9e:a5:2e:c5:d2:9f:97:bd:38:2f:66:9b:fc:f7:84:00:
         61:65:4d:87:b0:89:4c:d0:90:4f:e0:f9:03:d1:0b:31:0f:46:
         2c:c7:ca:39:4f:f8:65:c0:69:ad:36:d0:d7:bb:6b:0c:59:d9:
         c1:8d:b1:0d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlIZbNLZbrqbOuDDUxNWsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVmNDk0OWJmN2NkYWNmM2U5ZDQ2NTdiMDhjZDg0NzgwZDQxNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjdFP3G+8h8T1eqtRo+kYTBKcv8l
fRUiI/HrMCMQdvhz931bKuh1wsU6dtepapvBRqFYmeonh6JjUlpvaCQdAi0vfGN7
amqZvt0c6RjuaFZlZCCSpThLeBF4D+ynrRuFz8hKtu8G8S2X2w4mAfwTEVWE8rZd
4Xd4nEZkWY8CAu5XmsMdEmON+sezBk8Av4EM266s+adsgHNCxY1J5AIRLa2taNc4
yVib0nyx4MRfjDV6swpBIRQfuUCUWYDvkrwTDTC3WmDc+qwUxL4wJgFaM9PfOYdi
LWv3lLglDiK+lq03HEDLbfiSX0r41ciFFNZUx6XrIqG5sO/H8l/UzXSr+wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBVfSUm/fNrPPp1GV7CM2EeA1BdFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzhmNjAx
ZS1jNTZmLTQwZDQtOWFkNS0xYmNlM2JjNjc4ZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvOGY2MDFl
LWM1NmYtNDBkNC05YWQ1LTFiY2UzYmM2NzhlZC8xL0ZWOUpTYjk4MnM4LW5VWlhz
SXpZUjREVUYwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYjIMA0EAgACMAcDBQMqBv/AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMacDANBgkqhkiG9w0BAQsFAAOCAQEARDtWKydkjJj6
t+YEtCtbnhC+0dnoGyt/Bm3baNw2k90X5bc4ML1C4XwJ08Oyy10M99moBObD8xFC
eda4rOig++2NvGHl3HV5gS+ykQoFH0cKLx0LOdErUeF+DRKP+P0VcSKDdzFJ5X4z
iOAvnQhiy11ffSebwHx+/BJDiwKPCGpKIGUQD4KhNtWfRWqS3z+M89MrqxGj4Ohk
k4E8k1y6HablwSHRjSJMqFU9s9MB3P+GES9vmetKgn4WfqMMSY5d0UlheSxlyhie
pS7F0p+XvTgvZpv894QAYWVNh7CJTNCQT+D5A9ELMQ9GLMfKOU/4ZcBprTbQ17tr
DFnZwY2xDQ==
-----END CERTIFICATE-----