Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
File:                     JQou0RQnyhZIM4Ur1JydtT1j5js.cer (raw, json)
Hash identifier:          RyKGW0yRJF+ZM0nRPCSADKnFrEnPAryvtGc+68UfTmI=
Subject key identifier:   25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01952CE6061C024FBC4698B6362C6D09B786
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 22 Feb 2025 09:03:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212969

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:2c:e6:06:1c:02:4f:bc:46:98:b6:36:2c:6d:09:b7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 22 09:03:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=250a2ed11427ca164833852bd49c9db53d63e63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:12:5a:19:e8:cc:1d:78:95:e4:79:b5:0c:
                    76:df:80:7f:9b:7d:a0:7b:2e:b1:65:b0:18:92:82:
                    72:66:5a:68:ab:46:fb:72:ad:9b:61:5f:6c:16:69:
                    ac:df:b1:b1:3a:e4:2e:39:24:a9:5b:7b:ea:74:0c:
                    63:ec:d3:06:77:66:25:d8:a4:f2:02:3d:03:63:4a:
                    8c:5d:95:46:dc:d1:d3:18:5a:d9:a0:4e:2c:a9:37:
                    06:d3:0b:d0:16:d5:53:87:b8:6c:9f:e1:28:5c:65:
                    15:1b:0e:09:cc:51:dd:9b:51:02:33:fd:b4:7a:9e:
                    b7:76:f6:9f:8c:ad:ba:11:e9:d5:b5:8e:d5:1f:18:
                    ff:01:93:ef:e8:c8:61:60:5a:12:3a:a2:53:6a:b9:
                    93:a0:02:c7:ec:45:8f:4d:5a:d2:ee:0a:b8:92:ce:
                    cd:ca:4a:7b:6e:df:32:e7:aa:07:47:a1:7e:08:e6:
                    5a:b1:e8:95:35:c7:40:d5:42:1e:e9:c1:3b:2d:5f:
                    bc:c5:7c:f6:e9:d4:ae:89:9e:2f:b0:d2:fe:01:58:
                    7c:c9:46:a7:02:c6:ac:47:51:4e:dc:39:a2:27:a4:
                    1b:0d:52:82:9d:20:b5:65:5d:c3:6e:f8:f7:54:62:
                    be:9a:d7:2e:f1:b4:e0:3e:75:42:01:40:9d:d9:89:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212969

    Signature Algorithm: sha256WithRSAEncryption
         17:63:b6:1e:d0:f9:a3:b4:43:78:bc:8f:24:6f:80:e1:9f:4a:
         5b:0f:34:43:3a:d5:a8:25:42:b8:cd:29:50:ae:13:d4:72:1f:
         84:22:d2:a5:0c:2a:ab:94:9b:d6:37:ea:f4:e4:7a:47:ab:98:
         d8:cc:0a:26:59:b7:17:ab:e3:8f:d8:49:17:f2:66:a3:18:96:
         1c:8d:55:32:50:6c:de:44:00:05:a8:b5:c0:5e:78:5c:9a:56:
         75:37:48:c5:af:80:40:a8:dd:72:8f:a2:37:0a:e9:0e:7e:9e:
         fb:5f:28:e4:09:76:a0:62:2f:f1:fc:87:f8:4c:1b:6d:25:e4:
         63:6b:00:09:9b:7f:23:7f:74:e7:1d:ae:4c:c6:35:30:19:fb:
         66:a9:6c:30:68:27:c0:89:ab:c0:40:77:cb:9e:7f:2b:84:e4:
         22:71:8d:73:15:a9:29:29:1d:7e:c3:c1:9c:03:17:16:a7:95:
         d1:47:f5:dd:fc:61:73:74:9f:2c:c6:be:ef:e4:41:ac:2f:e9:
         33:7b:05:59:a7:9e:e3:3e:0a:ed:78:3a:b4:5a:9c:e3:3c:7d:
         c6:d6:00:e6:cd:1d:a4:eb:03:84:83:4c:bf:86:bc:13:28:02:
         78:b8:6e:7d:b4:72:9b:46:ea:0d:a3:c7:e6:b1:e5:58:26:1f:
         30:b1:7a:ff
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZUs5gYcAk+8Rpi2NixtCbeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjIyMDkwMzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTBhMmVkMTE0MjdjYTE2NDgzMzg1MmJkNDljOWRiNTNkNjNlNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/MSWhnozB14leR5tQx234B/m32g
ey6xZbAYkoJyZlpoq0b7cq2bYV9sFmms37GxOuQuOSSpW3vqdAxj7NMGd2Yl2KTy
Aj0DY0qMXZVG3NHTGFrZoE4sqTcG0wvQFtVTh7hsn+EoXGUVGw4JzFHdm1ECM/20
ep63dvafjK26EenVtY7VHxj/AZPv6MhhYFoSOqJTarmToALH7EWPTVrS7gq4ks7N
ykp7bt8y56oHR6F+COZaseiVNcdA1UIe6cE7LV+8xXz26dSuiZ4vsNL+AVh8yUan
AsasR1FO3DmiJ6QbDVKCnSC1ZV3Dbvj3VGK+mtcu8bTgPnVCAUCd2Yk88QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCUKLtEUJ8oWSDOFK9ScnbU9Y+Y7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2I0Mzll
Zi0yY2M1LTRhNzQtYjFlYS01NWM2NWM0MTViMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYjQzOWVm
LTJjYzUtNGE3NC1iMWVhLTU1YzY1YzQxNWIzNi8xL0pRb3UwUlFueWhaSU00VXIx
SnlkdFQxajVqcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/6TANBgkqhkiG9w0BAQsFAAOCAQEAF2O2HtD5o7RD
eLyPJG+A4Z9KWw80QzrVqCVCuM0pUK4T1HIfhCLSpQwqq5Sb1jfq9OR6R6uY2MwK
Jlm3F6vjj9hJF/JmoxiWHI1VMlBs3kQABai1wF54XJpWdTdIxa+AQKjdco+iNwrp
Dn6e+18o5Al2oGIv8fyH+EwbbSXkY2sACZt/I3905x2uTMY1MBn7ZqlsMGgnwImr
wEB3y55/K4TkInGNcxWpKSkdfsPBnAMXFqeV0Uf13fxhc3SfLMa+7+RBrC/pM3sF
Waee4z4K7Xg6tFqc4zx9xtYA5s0dpOsDhINMv4a8EygCeLhufbRym0bqDaPH5rHl
WCYfMLF6/w==
-----END CERTIFICATE-----