Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
File:                     ICNzDgbEv7_6ypBeUxJldCwXirQ.cer (raw, json)
Hash identifier:          cyzYvg/b9cc63sP2G252iQK3hHnCSaeJVZCFV547Cgs=
Subject key identifier:   20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067CB72C8AD927DCCB4FADA235366C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58336
                          AS: 210903

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:cb:72:c8:ad:92:7d:cc:b4:fa:da:23:53:66:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2023730e06c4bfbffaca905e531265742c178ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:07:b2:26:7e:51:c7:85:40:e5:cd:1c:04:
                    f0:ee:c3:4e:77:ff:77:43:ad:10:69:e7:af:0b:0a:
                    52:1a:7a:f9:ed:88:c1:e0:af:01:db:46:1f:fa:f6:
                    fe:d3:08:3e:b8:b1:a6:6c:65:15:64:62:92:4b:cb:
                    ab:a0:e1:6c:3b:ac:c5:95:a4:5a:1b:59:fc:02:3f:
                    ac:b0:08:9c:37:ef:68:fa:74:10:7d:73:8a:68:f2:
                    a5:11:1b:14:35:5e:45:f3:20:03:87:f6:45:e9:97:
                    d8:19:70:55:e3:10:11:49:6c:11:a4:86:e0:73:37:
                    12:35:fe:22:9b:5b:16:5a:74:39:86:26:00:51:1e:
                    b3:d6:c7:b3:11:ac:a0:6d:91:aa:3b:1e:f7:66:ea:
                    33:bb:a4:10:04:ce:12:0f:df:26:0a:76:eb:ef:ed:
                    a5:04:00:4d:dd:5e:c4:bb:b0:ef:c0:d5:1f:b8:d3:
                    7f:8f:57:6f:68:be:79:ba:83:0c:2b:2e:7c:7e:cb:
                    74:c2:0c:c4:8d:40:aa:e4:56:22:0a:74:b2:9c:0d:
                    81:94:cc:26:be:dd:de:c9:96:10:fe:6b:0b:6d:d8:
                    ae:29:0d:3d:fc:d8:71:db:6c:45:ed:dd:40:d8:21:
                    f9:dd:23:19:6f:6e:46:d1:0a:45:2d:00:62:a1:81:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58336
                  210903

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:ed:6f:10:5b:b1:12:cc:db:4c:ca:67:b3:b0:f7:36:fd:
         f1:e8:5c:c4:66:bb:55:50:de:8b:07:13:0a:a9:30:e6:13:44:
         4c:fd:1e:05:ad:f6:fe:a0:d8:c2:40:81:c5:03:ee:e2:98:3d:
         6a:6e:56:37:2d:ef:f3:0a:9b:24:16:bd:88:2d:32:17:d8:94:
         39:ad:88:cd:87:3f:8c:43:c9:7a:48:45:f3:c0:04:83:21:a7:
         73:ef:8c:ad:48:b7:13:0d:43:05:59:ed:d9:58:32:5b:97:67:
         ab:03:16:44:ec:48:92:d2:af:7f:4e:a4:d6:27:70:ff:9c:f5:
         a8:ed:ae:fa:48:02:4f:f9:f1:04:3b:48:be:a0:a2:20:57:ce:
         ab:95:5c:72:b1:98:7a:37:38:7e:e4:d3:28:2c:4b:40:0a:e9:
         dd:38:8a:83:6a:27:df:9d:8f:90:a6:84:07:f6:ec:57:53:3a:
         e1:37:f6:47:c9:f9:2e:cb:9b:1c:ac:63:12:ef:61:5a:e4:01:
         76:f1:b3:dd:d1:5e:6d:73:80:46:f6:ec:5d:82:c7:5b:65:77:
         01:83:3e:83:5c:3e:95:0f:4b:8a:e8:fe:6a:cb:4c:29:0a:64:
         64:67:e6:25:4d:39:70:28:97:8d:ac:a7:60:3b:7c:cf:b7:a8:
         06:ad:6c:a9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgZ8tyyK2Sfcy0+tojU2bBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDIzNzMwZTA2YzRiZmJmZmFjYTkwNWU1MzEyNjU3NDJjMTc4YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreEHsiZ+UceFQOXNHATw7sNOd/93
Q60QaeevCwpSGnr57YjB4K8B20Yf+vb+0wg+uLGmbGUVZGKSS8uroOFsO6zFlaRa
G1n8Aj+ssAicN+9o+nQQfXOKaPKlERsUNV5F8yADh/ZF6ZfYGXBV4xARSWwRpIbg
czcSNf4im1sWWnQ5hiYAUR6z1sezEaygbZGqOx73Zuozu6QQBM4SD98mCnbr7+2l
BABN3V7Eu7DvwNUfuNN/j1dvaL55uoMMKy58fst0wgzEjUCq5FYiCnSynA2BlMwm
vt3eyZYQ/msLbdiuKQ09/Nhx22xF7d1A2CH53SMZb25G0QpFLQBioYHpxwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCAjcw4GxL+/+sqQXlMSZXQsF4q0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzQ1ZDdj
MS1jNGYwLTQ4MzUtYjQ2Ni1iMDMzNWJhM2UwYzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNDVkN2Mx
LWM0ZjAtNDgzNS1iNDY2LWIwMzM1YmEzZTBjMi8xL0lDTnpEZ2JFdjdfNnlwQmVV
eEpsZEN3WGlyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDj4AIDAzfXMA0GCSqGSIb3DQEBCwUAA4IBAQCGz+1v
EFuxEszbTMpns7D3Nv3x6FzEZrtVUN6LBxMKqTDmE0RM/R4Frfb+oNjCQIHFA+7i
mD1qblY3Le/zCpskFr2ILTIX2JQ5rYjNhz+MQ8l6SEXzwASDIadz74ytSLcTDUMF
We3ZWDJbl2erAxZE7EiS0q9/TqTWJ3D/nPWo7a76SAJP+fEEO0i+oKIgV86rlVxy
sZh6Nzh+5NMoLEtACundOIqDaiffnY+QpoQH9uxXUzrhN/ZHyfkuy5scrGMS72Fa
5AF28bPd0V5tc4BG9uxdgsdbZXcBgz6DXD6VD0uK6P5qy0wpCmRkZ+YlTTlwKJeN
rKdgO3zPt6gGrWyp
-----END CERTIFICATE-----