Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
File:                     I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer (raw, json)
Hash identifier:          iTnu4spUlpt+/s+xy0RrJNgDh/adr4FKSQQp8u3JNVI=
Subject key identifier:   23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206863618A5898B02A56D98BD649954A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202966
                          IP: 45.137.228.0/22
                          IP: 2a0e:ac40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:63:61:8a:58:98:b0:2a:56:d9:8b:d6:49:95:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:39:63:1b:f8:aa:44:12:89:f6:dc:86:4d:
                    ff:4f:d5:96:15:f1:35:c9:e8:7e:35:75:d8:71:6f:
                    4d:ba:2a:7f:7e:52:3d:2f:93:3b:24:d3:fb:bd:b0:
                    31:b4:28:28:5c:b3:64:e9:ea:c4:d4:bc:72:fb:60:
                    d9:8c:e3:80:fb:53:98:3e:87:96:cb:58:36:ee:5d:
                    fb:81:06:95:c0:1c:9d:c9:13:fc:ff:ef:52:95:66:
                    83:9c:b3:b6:dd:8a:1a:7a:f2:ab:c2:cf:76:cc:cf:
                    1c:81:bb:07:57:a2:5b:e3:75:67:0b:b3:04:f5:5d:
                    c9:92:fd:e7:8a:dd:a6:69:3d:f8:5a:e0:dc:c9:51:
                    14:8c:db:83:87:05:f8:d3:c9:58:07:ca:2c:ef:d4:
                    55:1a:80:d2:5f:40:01:c5:8c:8f:84:31:b9:6f:5a:
                    2e:85:2e:76:9e:9a:85:0a:9d:70:60:ac:6f:07:c8:
                    1b:78:8f:19:a0:a8:86:d4:10:c9:78:07:02:4b:d0:
                    4d:78:34:0b:dc:34:15:55:d6:20:93:58:cd:96:f8:
                    c4:f4:ca:a2:73:0d:ae:a2:29:26:d9:20:ae:3c:f2:
                    cd:b7:ba:a8:0e:24:4f:86:bf:87:43:d1:74:18:3e:
                    5c:eb:7a:f4:61:c2:7d:9b:d8:f3:b4:87:13:a2:ca:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.228.0/22
                IPv6:
                  2a0e:ac40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202966

    Signature Algorithm: sha256WithRSAEncryption
         a2:d9:0d:7c:da:74:a7:d8:b9:9f:3f:ed:31:a6:0b:e8:81:f2:
         f4:ff:2a:b1:d8:fe:61:de:b0:64:e2:cf:cb:0b:24:eb:3d:ee:
         db:f6:5d:f9:99:cf:01:c0:f3:24:c5:8a:2d:2d:52:64:29:a5:
         5d:83:9e:50:80:a1:a2:a8:18:ea:9b:c0:d9:54:ea:8c:20:a5:
         47:17:9f:17:96:79:e6:87:42:61:97:3d:ec:10:ad:b7:0b:89:
         d6:d6:98:ab:a1:b3:b6:8f:d4:26:f8:0b:4c:e0:db:81:45:8e:
         0a:5f:99:85:f3:cd:81:4d:17:3d:f7:62:aa:d5:17:27:2c:bd:
         b5:3b:1f:9a:be:be:e6:0e:37:08:1a:25:1c:1b:b9:61:a9:7f:
         3c:73:f7:b3:0f:80:94:88:2f:28:cb:9d:05:96:d1:e3:9d:15:
         07:0a:06:33:c1:fe:60:74:ba:d3:72:fe:68:3c:32:36:e9:5d:
         bb:d4:7b:4e:e5:6d:81:2f:32:ed:cb:af:80:28:e9:96:46:e6:
         2b:5d:fa:4d:ad:ba:10:6c:3c:56:61:5e:6f:e7:6b:3b:05:6f:
         c3:ed:a6:f4:a9:15:4b:03:e0:a2:16:ea:9d:03:f5:e6:06:9a:
         f1:7b:b2:d7:03:40:55:ee:ff:42:85:25:ba:5c:b6:df:a0:ee:
         80:b4:c6:ce
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaGNhiliYsCpW2YvWSZVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2RjZDZmMTcxMjZkNGU5NTFkOTJiYzVmNGMwNmJhOTQ1MGZjOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB45Yxv4qkQSifbchk3/T9WWFfE1
yeh+NXXYcW9Nuip/flI9L5M7JNP7vbAxtCgoXLNk6erE1Lxy+2DZjOOA+1OYPoeW
y1g27l37gQaVwBydyRP8/+9SlWaDnLO23YoaevKrws92zM8cgbsHV6Jb43VnC7ME
9V3Jkv3nit2maT34WuDcyVEUjNuDhwX408lYB8os79RVGoDSX0ABxYyPhDG5b1ou
hS52npqFCp1wYKxvB8gbeI8ZoKiG1BDJeAcCS9BNeDQL3DQVVdYgk1jNlvjE9Mqi
cw2uoikm2SCuPPLNt7qoDiRPhr+HQ9F0GD5c63r0YcJ9m9jztIcTosqJ5QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCPc1vFxJtTpUdkrxfTAa6lFD8jUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2ZkYTA1
OS0zNDM2LTQxNTgtYTFlNC00OWRhMDU5NzhhZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZmRhMDU5
LTM0MzYtNDE1OC1hMWU0LTQ5ZGEwNTk3OGFkMC8xL0k5elc4WEVtMU9sUjJTdkY5
TUJycVVVUHlOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLYnkMA0EAgACMAcDBQMqDqxAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMY1jANBgkqhkiG9w0BAQsFAAOCAQEAotkNfNp0p9i5
nz/tMaYL6IHy9P8qsdj+Yd6wZOLPywsk6z3u2/Zd+ZnPAcDzJMWKLS1SZCmlXYOe
UIChoqgY6pvA2VTqjCClRxefF5Z55odCYZc97BCttwuJ1taYq6Gzto/UJvgLTODb
gUWOCl+ZhfPNgU0XPfdiqtUXJyy9tTsfmr6+5g43CBolHBu5Yal/PHP3sw+AlIgv
KMudBZbR450VBwoGM8H+YHS603L+aDwyNuldu9R7TuVtgS8y7cuvgCjplkbmK136
Ta26EGw8VmFeb+drOwVvw+2m9KkVSwPgohbqnQP15gaa8Xuy1wNAVe7/QoUluly2
36DugLTGzg==
-----END CERTIFICATE-----