Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
File:                     JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer (raw, json)
Hash identifier:          pj9f/ceAyHyvRWr3ys6Dt5yGdKC+Rwr68zRRakr3OXk=
Subject key identifier:   25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C656ED0B9D175C31FFDDB190FCC37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41157
                          IP: 81.201.176.0/20
                          IP: 2a02:2218::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:65:6e:d0:b9:d1:75:c3:1f:fd:db:19:0f:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:48:65:2e:21:f7:ab:e0:8b:24:6c:b5:dd:
                    81:1a:13:d4:5c:e5:59:ed:94:10:e0:a4:e4:3f:e7:
                    18:61:fb:fe:42:b9:93:f1:40:10:5a:1c:96:11:63:
                    ec:f8:30:a5:24:f4:a4:10:75:4a:91:f0:30:dc:26:
                    1f:83:0e:2d:e4:8f:d4:e0:36:bd:be:18:fa:56:53:
                    67:05:20:72:11:f9:4b:9e:cd:b3:e8:c1:78:74:b8:
                    ab:10:c7:01:f7:f7:c2:cc:c9:1d:48:30:8e:ad:4d:
                    0c:5e:b9:0d:b2:c4:9e:3d:34:1e:9a:f8:2d:f5:99:
                    3b:33:0f:fa:db:74:e3:39:b0:23:29:41:d7:c7:13:
                    ee:5b:a0:8a:34:ba:45:91:0d:18:5c:9c:75:7c:8b:
                    96:2b:d6:4e:cb:d4:c3:e0:83:df:8e:41:4e:23:3c:
                    cb:b5:1d:a8:1a:66:64:f5:87:9e:87:ee:cf:e2:a3:
                    14:be:e4:5f:d1:2f:7c:58:63:1f:d8:27:47:f2:e8:
                    8f:d5:7f:a9:cd:ab:84:ec:91:ac:35:d7:6b:70:37:
                    c7:18:d7:cb:a0:14:a4:e6:96:0a:bb:f1:6b:e0:35:
                    9c:e5:52:91:ec:e0:94:f5:74:43:9e:02:7e:6d:4a:
                    a0:98:66:50:10:a8:54:00:f5:44:f2:b7:b3:9f:d6:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.201.176.0/20
                IPv6:
                  2a02:2218::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41157

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:4a:86:d3:fd:9b:0e:4b:2b:ea:28:0c:ac:88:01:fe:73:
         f8:1a:b3:15:5c:92:bf:e1:5a:f8:d5:77:b8:6c:44:d5:17:fb:
         7a:6a:17:4d:c3:df:41:05:f1:93:07:73:19:cd:f1:28:86:d4:
         85:5f:6f:12:3e:7d:ec:1f:4e:4f:37:cd:ba:16:59:7a:6c:b2:
         9d:98:52:ab:d8:1d:01:62:b4:ed:5d:3d:1b:17:f4:21:56:19:
         43:0a:69:db:c7:81:0f:a9:f8:3d:5f:92:9e:9d:f0:a4:ed:43:
         8b:68:ac:69:55:b9:3f:41:7a:dd:56:e7:ca:4b:f9:b2:2b:3f:
         92:4e:35:34:9e:15:d1:fa:7d:07:26:bd:2d:6f:88:58:a5:6a:
         c2:00:25:ea:e1:8f:da:29:19:66:d9:ce:f8:64:5f:d1:8a:a9:
         af:87:f2:0f:0c:50:56:15:a9:32:49:e4:e7:12:5a:ac:a1:23:
         b8:d5:68:c0:47:da:67:65:ca:89:a7:c1:02:87:2a:ba:d6:20:
         f6:5d:52:e5:ce:ab:97:61:05:f0:3f:a7:83:69:34:6d:f9:65:
         1f:85:cf:12:d4:eb:57:7d:26:51:f1:c1:3b:c0:b4:0d:82:12:
         77:33:fc:07:bb:15:57:98:fd:64:8d:80:b7:1e:f3:90:b7:19:
         95:ac:b2:88
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjGVu0LnRdcMf/dsZD8w3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTJjYjM1YzNmNTZiMjc5OGZmNjFiZDRkOWE1Y2VkMGVlMDM5ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh9IZS4h96vgiyRstd2BGhPUXOVZ
7ZQQ4KTkP+cYYfv+QrmT8UAQWhyWEWPs+DClJPSkEHVKkfAw3CYfgw4t5I/U4Da9
vhj6VlNnBSByEflLns2z6MF4dLirEMcB9/fCzMkdSDCOrU0MXrkNssSePTQemvgt
9Zk7Mw/623TjObAjKUHXxxPuW6CKNLpFkQ0YXJx1fIuWK9ZOy9TD4IPfjkFOIzzL
tR2oGmZk9Yeeh+7P4qMUvuRf0S98WGMf2CdH8uiP1X+pzauE7JGsNddrcDfHGNfL
oBSk5pYKu/Fr4DWc5VKR7OCU9XRDngJ+bUqgmGZQEKhUAPVE8rezn9a6pQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCUss1w/VrJ5j/Yb1NmlztDuA5+wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzc3YzZm
Yy04YTk5LTQyZjQtYWMyMy01NmM2YTEwMzFkYmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNzdjNmZj
LThhOTktNDJmNC1hYzIzLTU2YzZhMTAzMWRiYi8xL0pTeXpYRDlXc25tUDlodlUy
YVhPME80RG43QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEUcmwMA0EAgACMAcDBQMqAiIYMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCgxTANBgkqhkiG9w0BAQsFAAOCAQEABvBKhtP9mw5L
K+ooDKyIAf5z+BqzFVySv+Fa+NV3uGxE1Rf7emoXTcPfQQXxkwdzGc3xKIbUhV9v
Ej597B9OTzfNuhZZemyynZhSq9gdAWK07V09Gxf0IVYZQwpp28eBD6n4PV+Snp3w
pO1Di2isaVW5P0F63Vbnykv5sis/kk41NJ4V0fp9Bya9LW+IWKVqwgAl6uGP2ikZ
ZtnO+GRf0Yqpr4fyDwxQVhWpMknk5xJarKEjuNVowEfaZ2XKiafBAocqutYg9l1S
5c6rl2EF8D+ng2k0bfllH4XPEtTrV30mUfHBO8C0DYISdzP8B7sVV5j9ZI2Atx7z
kLcZlayyiA==
-----END CERTIFICATE-----