Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
File:                     IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer (raw, json)
Hash identifier:          OQC94X/GMtwTu7nSXIKQIodI6Q6+TNrKys+fo1AvrkQ=
Subject key identifier:   21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FD00680E7B3BE8490CBC92C84F70D2D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:01:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216373

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:d0:06:80:e7:b3:be:84:90:cb:c9:2c:84:f7:0d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:01:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:c8:df:1b:a7:36:b5:f6:ff:aa:e7:03:2f:
                    6e:cb:0d:29:c9:5f:e9:e0:53:35:98:c1:87:dc:8c:
                    c6:ba:97:d7:e9:51:d9:ed:7c:b7:cc:b8:67:4d:39:
                    0b:cb:65:2a:b4:69:03:d0:86:d2:71:e4:2d:11:19:
                    80:36:9f:d7:a7:83:af:e9:01:e5:ae:54:2e:c1:40:
                    04:3a:62:46:f2:e8:cf:4f:43:7d:cc:d1:03:94:c3:
                    1a:67:1c:d1:37:01:82:22:62:da:98:5c:c2:fb:1a:
                    d3:b8:b9:10:d3:0d:bf:f5:43:55:33:46:2c:ba:bd:
                    fe:59:09:20:73:3f:0d:00:ca:ad:20:12:c9:01:70:
                    db:c7:88:36:17:65:97:a0:1f:57:2b:4d:45:ce:fc:
                    25:e4:7d:50:53:b9:b2:e1:56:77:c7:cc:cd:8f:22:
                    b4:19:5c:e1:a5:92:18:cb:fd:c2:53:b5:ee:23:92:
                    61:f7:ff:c7:92:ea:11:54:28:56:92:f4:83:1e:5c:
                    73:09:18:f7:f1:e1:d8:61:b0:ff:0d:7d:0b:33:cf:
                    09:80:86:3b:48:ee:12:fc:15:df:ba:2a:20:c7:99:
                    0a:d1:67:2f:9c:cd:09:22:6a:69:c8:7a:1a:f4:e9:
                    49:25:14:96:80:f6:68:e2:9e:bd:a9:c0:fe:bf:04:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216373

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:8f:74:91:5d:19:00:ab:66:a6:71:5b:31:b7:af:27:8c:
         a5:7c:04:22:ca:c4:0f:37:fe:08:6a:61:d4:87:7d:fb:81:f2:
         65:9e:4a:d9:11:00:3a:57:52:9c:d1:cf:bd:4f:06:18:bd:b3:
         2d:f7:61:f3:64:53:ce:f4:d2:2c:ce:65:27:b2:66:c4:8b:76:
         1b:bf:da:ea:b4:46:ef:2d:f3:8e:99:d8:f5:84:83:39:bc:2a:
         35:0c:71:68:61:7c:5c:43:37:6f:02:11:04:e7:2d:8b:31:e8:
         5f:ea:18:0f:82:42:b9:dd:2a:d2:f4:90:65:c0:5b:85:81:a4:
         e8:46:ae:69:d0:ad:ac:d3:de:d1:27:df:55:88:d1:17:45:fe:
         f4:1a:b9:04:18:36:ae:fe:52:ca:51:41:92:c3:00:00:04:1c:
         41:20:94:16:07:57:5e:b3:f9:8e:25:eb:e5:6f:dd:f2:31:7e:
         1f:c3:ba:c8:03:9b:29:2c:2e:44:08:0d:af:d6:3e:ef:72:32:
         83:81:d1:db:72:b1:15:30:e7:88:5c:ea:08:f7:dc:a9:46:b2:
         36:1d:3f:8a:e9:df:40:21:d9:70:af:af:a7:25:33:1f:41:e6:
         e7:25:d3:cd:26:ea:58:55:c6:11:f2:60:33:bc:1c:38:8d:90:
         89:28:8b:35
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZQf0AaA57O+hJDLySyE9w0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDMwMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM5Y2IyNTQ1NGYzOTljODhjZGZmY2JhNzRiYjkzMDg4MzRlMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12/I3xunNrX2/6rnAy9uyw0pyV/p
4FM1mMGH3IzGupfX6VHZ7Xy3zLhnTTkLy2UqtGkD0IbSceQtERmANp/Xp4Ov6QHl
rlQuwUAEOmJG8ujPT0N9zNEDlMMaZxzRNwGCImLamFzC+xrTuLkQ0w2/9UNVM0Ys
ur3+WQkgcz8NAMqtIBLJAXDbx4g2F2WXoB9XK01Fzvwl5H1QU7my4VZ3x8zNjyK0
GVzhpZIYy/3CU7XuI5Jh9//HkuoRVChWkvSDHlxzCRj38eHYYbD/DX0LM88JgIY7
SO4S/BXfuiogx5kK0WcvnM0JImppyHoa9OlJJRSWgPZo4p69qcD+vwSH5QIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFCHJyyVFTzmciM3/y6dLuTCINOCdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5
MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEvMIGHBggrBgEFBQcwCoZ7cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIw
OGI1NDY0ZmYxYWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENE
RkZDQkE3NEJCOTMwODgzNEUwOUQubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw
a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ
ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTTUwDQYJKoZIhvcN
AQELBQADggEBAGpOj3SRXRkAq2amcVsxt68njKV8BCLKxA83/ghqYdSHffuB8mWe
StkRADpXUpzRz71PBhi9sy33YfNkU8700izOZSeyZsSLdhu/2uq0Ru8t846Z2PWE
gzm8KjUMcWhhfFxDN28CEQTnLYsx6F/qGA+CQrndKtL0kGXAW4WBpOhGrmnQrazT
3tEn31WI0RdF/vQauQQYNq7+UspRQZLDAAAEHEEglBYHV16z+Y4l6+Vv3fIxfh/D
usgDmyksLkQIDa/WPu9yMoOB0dtysRUw54hc6gj33KlGsjYdP4rp30Ah2XCvr6cl
Mx9B5ucl080m6lhVxhHyYDO8HDiNkIkoizU=
-----END CERTIFICATE-----