Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.cer (raw, json)
Hash identifier:          hMvgmBApiByu6hG3grQwcgBnr8zj2DigQB9hd6BVwZU=
Subject key identifier:   27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B57DE89D1194E7BDE693BB68B025E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:49:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205977

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:7d:e8:9d:11:94:e7:bd:e6:93:bb:68:b0:25:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:49:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:4b:89:98:5e:89:14:27:49:be:1c:9b:0f:
                    7b:a8:c7:3e:1a:99:61:11:f4:94:bc:9b:c9:b7:58:
                    0b:6e:5f:0b:71:63:e4:35:62:1a:6b:e0:ab:37:91:
                    38:c2:56:f8:98:ee:5c:54:f5:31:e8:bd:cb:48:49:
                    7c:95:3e:e4:2e:91:aa:3e:ae:a2:f5:e2:3f:57:fb:
                    80:f3:1c:51:1d:f0:99:8f:74:a4:87:fb:ad:de:43:
                    e3:63:b0:59:55:9d:28:66:99:1e:69:dc:e9:7d:6e:
                    64:f1:6d:da:fb:7c:19:d2:8d:d6:04:8d:a9:91:f1:
                    83:ce:cc:30:68:fd:f5:8a:93:25:5e:3f:ca:5f:ed:
                    86:0e:65:bb:d2:be:9c:35:7b:08:33:c7:51:09:26:
                    4e:2f:8a:23:7e:0e:ba:70:9c:2d:a7:9f:f6:e4:e2:
                    0a:1a:c9:f7:17:51:04:5a:3b:77:c7:8b:d2:d7:73:
                    8f:4e:03:71:b7:20:9e:7b:6a:a6:9b:a7:0a:b6:fc:
                    3c:59:68:59:6f:8e:cb:60:75:01:44:2b:16:22:7b:
                    2e:e9:c1:4c:d6:f9:01:79:b0:33:dc:cd:92:c2:45:
                    82:c2:03:98:86:5e:02:f5:85:5b:cf:c7:00:57:be:
                    e9:3d:1b:21:98:25:80:7d:2c:d0:fb:a3:92:55:6a:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205977

    Signature Algorithm: sha256WithRSAEncryption
         30:34:59:d4:9e:97:f5:ea:ab:17:50:29:7e:30:b4:35:c7:b3:
         c3:6f:18:71:39:0f:bd:39:04:36:08:30:c9:ff:6c:5b:97:7f:
         06:ac:6a:cd:03:eb:38:7d:46:11:4e:9e:71:3f:49:65:ac:4a:
         37:5b:45:0e:33:fd:e8:37:df:51:4c:c5:a0:69:7b:fc:11:8a:
         09:67:dc:81:14:29:c6:a0:b7:04:75:1b:78:b6:21:de:00:6c:
         01:57:ba:12:3e:b5:78:3c:f9:30:48:45:5f:cb:d0:5d:f0:5f:
         63:f2:a0:fd:75:80:13:ce:56:66:45:1e:65:cf:7a:b9:7e:57:
         91:58:94:05:8c:93:e7:3f:04:b8:2d:8e:c5:22:2a:7a:7c:6e:
         fc:6f:76:a7:5c:27:7f:cd:bd:25:d2:2f:25:9b:a1:93:07:5e:
         b8:53:fe:de:56:a8:f9:fe:d1:a3:de:f0:fb:bc:f2:56:e2:22:
         ec:da:15:df:89:1d:ed:f5:cb:5b:c6:65:ae:9c:6a:f9:0a:23:
         af:b1:fc:32:6f:98:66:94:1f:68:5a:1c:c6:87:73:53:db:86:
         97:14:53:eb:50:a9:7a:e0:a2:7d:e4:7f:39:9e:0c:ad:a5:01:
         78:26:1b:82:52:29:7b:86:62:f8:be:be:c8:d1:b2:54:1b:9a:
         24:ac:ea:bd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQntX3onRGU573mk7tosCXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzQ1NzIwZDlhNTUzOGVhMzU4YjFmNDNkMDhmODhjZGU2ZjZlYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ5LiZheiRQnSb4cmw97qMc+Gplh
EfSUvJvJt1gLbl8LcWPkNWIaa+CrN5E4wlb4mO5cVPUx6L3LSEl8lT7kLpGqPq6i
9eI/V/uA8xxRHfCZj3Skh/ut3kPjY7BZVZ0oZpkeadzpfW5k8W3a+3wZ0o3WBI2p
kfGDzswwaP31ipMlXj/KX+2GDmW70r6cNXsIM8dRCSZOL4ojfg66cJwtp5/25OIK
Gsn3F1EEWjt3x4vS13OPTgNxtyCee2qmm6cKtvw8WWhZb47LYHUBRCsWInsu6cFM
1vkBebAz3M2SwkWCwgOYhl4C9YVbz8cAV77pPRshmCWAfSzQ+6OSVWrJRQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2FmOWNi
NC04NTc0LTQyYmYtOWQwNS1jM2VmNzM3NzEyODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvYWY5Y2I0
LTg1NzQtNDJiZi05ZDA1LWMzZWY3Mzc3MTI4Ni8xL0owVnlEWnBWT09vMWl4OUQw
SS1JemViMjY3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMkmTANBgkqhkiG9w0BAQsFAAOCAQEAMDRZ1J6X9eqr
F1ApfjC0Ncezw28YcTkPvTkENggwyf9sW5d/BqxqzQPrOH1GEU6ecT9JZaxKN1tF
DjP96DffUUzFoGl7/BGKCWfcgRQpxqC3BHUbeLYh3gBsAVe6Ej61eDz5MEhFX8vQ
XfBfY/Kg/XWAE85WZkUeZc96uX5XkViUBYyT5z8EuC2OxSIqenxu/G92p1wnf829
JdIvJZuhkwdeuFP+3lao+f7Ro97w+7zyVuIi7NoV34kd7fXLW8Zlrpxq+Qojr7H8
Mm+YZpQfaFocxodzU9uGlxRT61CpeuCifeR/OZ4MraUBeCYbglIpe4Zi+L6+yNGy
VBuaJKzqvQ==
-----END CERTIFICATE-----