Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
File:                     IyYoKFK1RzuXS_-ersILA6XyAQ4.cer (raw, json)
Hash identifier:          furuTkhJ+9xAOI0sRH5PubqB1mxgamO4NhU9BSNRP2E=
Subject key identifier:   23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067B60266F6E058239585E8873C4F0A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216193

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:b6:02:66:f6:e0:58:23:95:85:e8:87:3c:4f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2326282852b5473b974bff9eaec20b03a5f2010e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:f0:e5:a5:e4:46:85:e2:59:2a:1d:75:7a:
                    98:0f:99:04:eb:d4:10:13:f4:3d:70:3c:73:b6:39:
                    74:11:2b:f1:15:51:5f:1c:d2:b1:c5:b2:8e:dc:de:
                    16:1f:01:c5:6c:e6:91:3a:94:0b:b0:d6:b8:82:fa:
                    77:87:22:62:bc:b5:90:68:9c:d0:2d:c9:e1:52:e1:
                    e0:ba:ec:c5:11:2f:54:75:a3:77:82:ab:ae:25:e4:
                    b3:d8:b8:2a:bc:55:ed:c5:ea:2a:81:7b:20:0e:89:
                    5e:5e:56:0a:d7:2d:d9:13:69:24:13:a1:7e:f0:0b:
                    55:63:df:5c:96:c0:71:da:be:d6:14:ad:4e:35:ab:
                    c3:97:4b:da:43:1c:53:2f:f7:61:11:44:5c:23:14:
                    41:ff:1a:eb:36:f4:a9:63:9e:3d:6d:8a:10:70:88:
                    92:8c:9c:ee:e3:7e:64:23:64:54:c1:bb:f7:17:f9:
                    09:86:2f:1c:c7:6b:05:b1:af:23:68:80:75:8f:4b:
                    1a:94:41:a4:8f:4c:e7:a5:04:ba:40:9c:67:ae:66:
                    31:41:8f:ab:5a:6e:80:e7:77:7a:9c:d1:3e:41:77:
                    e8:41:cc:05:2a:0a:28:d5:42:f9:14:41:d3:cc:48:
                    61:fd:c1:a8:16:82:db:06:15:98:1f:5d:8e:d1:5f:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216193

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:93:c7:31:bc:81:56:30:56:4c:0f:d2:dd:cf:e3:a1:9a:
         6a:e3:41:27:6e:4d:e3:a3:0c:96:46:0b:64:60:b1:6c:24:be:
         ec:f1:dc:23:67:0d:36:d0:5d:90:14:f3:a5:0b:7b:c0:54:4f:
         88:5d:59:2a:02:e6:23:32:d4:f4:ba:f2:4c:99:6e:9d:5a:fe:
         da:60:13:e6:3a:d8:10:a4:9c:30:a0:0b:9f:2a:4e:23:85:7b:
         16:f6:37:02:58:9f:69:7e:88:ef:e5:6d:8b:1b:c3:78:e0:ea:
         79:62:29:72:51:d2:a9:4a:5d:a7:b5:c6:07:cc:66:79:7e:e5:
         6f:d8:dc:2d:33:ff:7b:bd:0e:2e:5e:ac:ef:14:36:93:66:7d:
         5f:9d:f3:77:19:f0:8b:7d:6c:a4:1d:57:e3:c1:88:b6:10:dd:
         28:cf:bf:74:40:2c:bf:d0:de:66:a8:4d:4a:f1:f9:19:ff:49:
         46:91:a2:00:29:06:e6:32:b8:ca:7c:f0:01:98:9c:36:27:76:
         e5:0f:21:94:61:1f:7a:6d:d9:6c:66:c9:05:cb:c0:77:ce:37:
         65:db:a5:7f:a4:45:15:34:10:6e:c8:a1:0d:52:8e:25:3f:94:
         1f:83:f5:6e:f4:85:c4:57:38:dc:e7:b1:84:a4:c3:6b:05:ca:
         d5:a2:cb:a9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQgZ7YCZvbgWCOVheiHPE8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzI2MjgyODUyYjU0NzNiOTc0YmZmOWVhZWMyMGIwM2E1ZjIwMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ujw5aXkRoXiWSoddXqYD5kE69QQ
E/Q9cDxztjl0ESvxFVFfHNKxxbKO3N4WHwHFbOaROpQLsNa4gvp3hyJivLWQaJzQ
LcnhUuHguuzFES9UdaN3gquuJeSz2LgqvFXtxeoqgXsgDoleXlYK1y3ZE2kkE6F+
8AtVY99clsBx2r7WFK1ONavDl0vaQxxTL/dhEURcIxRB/xrrNvSpY549bYoQcIiS
jJzu435kI2RUwbv3F/kJhi8cx2sFsa8jaIB1j0salEGkj0znpQS6QJxnrmYxQY+r
Wm6A53d6nNE+QXfoQcwFKgoo1UL5FEHTzEhh/cGoFoLbBhWYH12O0V8mLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCMmKChStUc7l0v/nq7CCwOl8gEOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzg5MDFi
NC1hODIxLTRmYzYtOTQzYS1mNzY5ZTU0MjZkMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvODkwMWI0
LWE4MjEtNGZjNi05NDNhLWY3NjllNTQyNmQyMC8xL0l5WW9LRksxUnp1WFNfLWVy
c0lMQTZYeUFRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMgTANBgkqhkiG9w0BAQsFAAOCAQEAPaGTxzG8gVYw
VkwP0t3P46GaauNBJ25N46MMlkYLZGCxbCS+7PHcI2cNNtBdkBTzpQt7wFRPiF1Z
KgLmIzLU9LryTJlunVr+2mAT5jrYEKScMKALnypOI4V7FvY3AlifaX6I7+VtixvD
eODqeWIpclHSqUpdp7XGB8xmeX7lb9jcLTP/e70OLl6s7xQ2k2Z9X53zdxnwi31s
pB1X48GIthDdKM+/dEAsv9DeZqhNSvH5Gf9JRpGiACkG5jK4ynzwAZicNid25Q8h
lGEfem3ZbGbJBcvAd843Zdulf6RFFTQQbsihDVKOJT+UH4P1bvSFxFc43OexhKTD
awXK1aLLqQ==
-----END CERTIFICATE-----