Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
File:                     I9FK_odQITwoDltovvsYhm95SX8.cer (raw, json)
Hash identifier:          o1Q8ALr80IZiASU2PkcH0aRDZMwJdmRaf6r6qf3Teg0=
Subject key identifier:   23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423697CD7A628DD84085391048BC75F2A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201400
                          IP: 91.103.138.0/24
                          IP: 2a13:26c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:7c:d7:a6:28:dd:84:08:53:91:04:8b:c7:5f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=23d14afe8750213c280e5b68befb18866f79497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:3b:1f:f9:54:8b:7b:9b:dc:89:87:9f:5c:
                    a7:f3:7d:a9:a9:04:34:21:ca:06:17:21:0f:ef:08:
                    92:fc:2e:5d:60:ae:da:73:e7:8d:16:f9:0d:69:4b:
                    51:db:5c:60:32:79:d2:42:7e:6c:14:72:9d:e8:d2:
                    8f:43:53:49:f0:0b:20:af:f0:8d:49:a1:16:a5:26:
                    f7:b4:c0:49:27:c8:6b:20:90:7a:26:8b:2b:f4:e2:
                    6e:a6:80:80:a6:06:bf:2e:b7:a1:be:90:3f:bb:0c:
                    1c:0e:a1:f2:b8:54:a6:d7:da:e4:53:95:9d:60:ed:
                    91:78:97:99:75:0c:03:52:91:53:36:f1:12:21:60:
                    8d:c3:52:8c:25:02:bb:97:f8:dd:a2:1d:46:9b:37:
                    7a:37:a1:df:8f:95:9f:16:ef:e5:e7:cb:63:f6:42:
                    45:df:23:e4:44:55:94:94:96:83:f5:b3:d9:8b:82:
                    73:4b:14:b1:fa:0f:15:83:10:94:c8:f9:b3:67:88:
                    94:e2:e0:af:cf:72:c1:be:f1:7b:15:46:c9:e1:18:
                    47:da:36:bb:97:88:b6:5b:3a:73:4e:26:ce:b8:16:
                    7a:e7:69:51:02:3f:52:29:98:b4:51:8a:0c:a6:33:
                    fa:a6:9c:f8:22:54:48:5f:e6:bd:b1:3b:3b:9e:d7:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.103.138.0/24
                IPv6:
                  2a13:26c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201400

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:f7:df:3b:9a:66:02:a6:6c:29:09:aa:60:a8:44:c0:cf:
         60:f0:6d:95:20:a7:87:1c:a6:ec:6f:bb:fd:79:25:ac:cb:9e:
         79:17:15:c6:56:ce:80:39:78:f0:9d:50:13:b0:ac:03:a2:cf:
         1d:f3:fc:bd:32:f1:42:32:3c:75:cf:88:b1:44:43:98:7b:db:
         ee:d8:66:94:1d:00:f2:3f:a3:a3:9a:28:fb:cd:ae:6a:09:2d:
         53:eb:f3:49:bd:fa:32:d0:d5:66:8f:a4:e9:ad:c9:93:81:3b:
         4d:b7:eb:f4:8a:b3:f9:59:89:1d:15:af:71:3a:04:25:14:e0:
         47:04:21:ed:27:dd:e1:d3:2e:1b:28:d2:eb:30:79:0c:b0:fe:
         51:06:b1:90:38:8a:19:ac:e9:cf:77:ba:3a:af:3f:9f:cb:dd:
         36:32:d0:89:54:31:24:96:e9:f2:2c:9f:42:08:24:8a:00:3f:
         78:0d:8e:37:2a:3a:b8:8b:f6:fa:90:a5:d7:30:1b:5d:f0:26:
         61:0a:70:f2:4f:92:4d:f2:cb:55:7e:22:8b:1d:30:76:92:11:
         e9:35:ed:65:80:88:9a:24:85:43:d1:3d:c4:b9:eb:27:29:e6:
         5f:ff:c7:15:43:56:c7:33:69:22:16:58:4d:db:5c:9d:42:89:
         2c:cc:28:9e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQjaXzXpijdhAhTkQSLx18qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2QxNGFmZTg3NTAyMTNjMjgwZTViNjhiZWZiMTg4NjZmNzk0OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog07H/lUi3ub3ImHn1yn832pqQQ0
IcoGFyEP7wiS/C5dYK7ac+eNFvkNaUtR21xgMnnSQn5sFHKd6NKPQ1NJ8Asgr/CN
SaEWpSb3tMBJJ8hrIJB6Josr9OJupoCApga/LrehvpA/uwwcDqHyuFSm19rkU5Wd
YO2ReJeZdQwDUpFTNvESIWCNw1KMJQK7l/jdoh1Gmzd6N6Hfj5WfFu/l58tj9kJF
3yPkRFWUlJaD9bPZi4JzSxSx+g8VgxCUyPmzZ4iU4uCvz3LBvvF7FUbJ4RhH2ja7
l4i2WzpzTibOuBZ652lRAj9SKZi0UYoMpjP6ppz4IlRIX+a9sTs7ntdL/wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCPRSv6HUCE8KA5baL77GIZveUl/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1Lzg5Zjg0
NS01NzY1LTRjMTEtOTJjZC04NDcyY2E0MGY3YTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvODlmODQ1
LTU3NjUtNGMxMS05MmNkLTg0NzJjYTQwZjdhNy8xL0k5Rktfb2RRSVR3b0RsdG92
dnNZaG05NVNYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW2eKMA0EAgACMAcDBQMqEybAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMSuDANBgkqhkiG9w0BAQsFAAOCAQEAUu/33zuaZgKm
bCkJqmCoRMDPYPBtlSCnhxym7G+7/XklrMueeRcVxlbOgDl48J1QE7CsA6LPHfP8
vTLxQjI8dc+IsURDmHvb7thmlB0A8j+jo5oo+82uagktU+vzSb36MtDVZo+k6a3J
k4E7Tbfr9Iqz+VmJHRWvcToEJRTgRwQh7Sfd4dMuGyjS6zB5DLD+UQaxkDiKGazp
z3e6Oq8/n8vdNjLQiVQxJJbp8iyfQggkigA/eA2ONyo6uIv2+pCl1zAbXfAmYQpw
8k+STfLLVX4iix0wdpIR6TXtZYCImiSFQ9E9xLnrJynmX//HFUNWxzNpIhZYTdtc
nUKJLMwong==
-----END CERTIFICATE-----