Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
File:                     KAabTsBHxsLYCkmS5CKLMXzIsgw.cer (raw, json)
Hash identifier:          KfvK4CNWbpzduXqw2LfbvcpqujFOHHWHshr5gOojPck=
Subject key identifier:   28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3BB3FA9849FA82E0089A8DCB1245E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212435
                          IP: 193.163.76.0/24
                          IP: 2a12:4b80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:bb:3f:a9:84:9f:a8:2e:00:89:a8:dc:b1:24:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:18:83:41:7d:08:37:48:ad:32:1a:ea:de:
                    41:27:81:4d:e9:86:d8:00:eb:71:2e:71:77:0b:b4:
                    b7:90:07:bb:b0:bd:48:c8:04:d2:6d:ce:26:db:e9:
                    96:20:8b:54:f6:c7:e0:55:6d:63:d0:0c:c6:d7:ba:
                    d3:03:f8:48:8d:7d:df:71:28:7c:82:5a:45:ae:e0:
                    26:26:b3:f0:da:ae:3a:13:b7:42:85:55:cb:58:d2:
                    85:9c:28:cc:4c:d2:4f:dc:17:a4:77:c0:af:a6:ec:
                    e7:24:cf:8b:ee:c5:d2:42:51:69:a7:06:af:bf:8a:
                    59:d1:0b:5f:8e:60:9a:4c:66:d6:8d:5b:60:30:9d:
                    79:c2:13:67:24:f7:9c:6f:4b:6f:9f:1f:7c:b5:01:
                    7e:f0:65:e2:32:79:1b:1a:35:2f:6d:af:01:02:50:
                    b3:c0:e4:cc:0f:e0:6d:bb:ce:f0:d7:19:a8:62:88:
                    75:ea:30:53:a2:f5:2b:a5:10:46:41:a2:c9:23:18:
                    20:ab:4a:6f:65:93:80:04:e9:f5:ac:1b:9c:12:9b:
                    00:4d:55:e1:a2:30:17:e2:ec:37:eb:de:13:4e:e7:
                    7a:44:0f:f4:b9:10:b8:a2:8c:af:18:5b:2e:60:8a:
                    69:76:0d:d3:84:bc:0f:3f:da:a0:a3:fb:00:3b:17:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.76.0/24
                IPv6:
                  2a12:4b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212435

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:3e:b4:07:9c:a4:a0:c9:2a:c3:98:44:ae:a8:6c:c2:f4:
         99:3c:4a:2b:9c:bf:b1:1d:1c:67:e3:6f:51:36:ad:17:5f:cf:
         fd:64:28:5a:13:c8:8a:a3:7b:33:e0:ac:82:0d:4b:1c:8e:78:
         f1:6b:6c:74:ce:17:a6:57:97:a9:ef:f2:19:46:e2:85:22:59:
         dc:ab:8d:f9:61:39:00:1a:25:ef:88:d3:70:82:db:b2:31:e5:
         ee:1c:48:cf:94:75:5d:23:91:2c:1e:2c:86:83:01:2d:c4:20:
         e9:d1:6d:7e:dd:77:b7:31:76:7e:02:83:86:91:91:0e:b5:a2:
         23:bb:95:5f:d9:11:ca:9d:7b:9f:9d:22:52:a2:69:5a:96:27:
         b6:e8:b4:24:06:d6:78:2d:41:67:6c:90:35:a8:04:3a:bb:22:
         20:90:22:dc:36:f0:ca:65:e0:9b:1c:a9:13:6b:c0:61:ad:52:
         f3:07:96:25:14:d4:1b:93:81:9b:f9:41:22:53:dc:53:0b:f8:
         7d:f6:be:4e:4b:af:f0:57:53:22:dd:51:14:a8:56:91:52:db:
         96:55:75:24:a3:ad:dd:24:be:82:3b:07:a2:3d:45:e1:07:ef:
         df:74:01:a6:28:27:be:c0:01:42:ef:ee:37:dd:73:f0:29:73:
         92:5b:7f:d6
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQks7s/qYSfqC4AiajcsSReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODA2OWI0ZWMwNDdjNmMyZDgwYTQ5OTJlNDIyOGIzMTdjYzhiMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzAYg0F9CDdIrTIa6t5BJ4FN6YbY
AOtxLnF3C7S3kAe7sL1IyATSbc4m2+mWIItU9sfgVW1j0AzG17rTA/hIjX3fcSh8
glpFruAmJrPw2q46E7dChVXLWNKFnCjMTNJP3Bekd8CvpuznJM+L7sXSQlFppwav
v4pZ0QtfjmCaTGbWjVtgMJ15whNnJPecb0tvnx98tQF+8GXiMnkbGjUvba8BAlCz
wOTMD+Btu87w1xmoYoh16jBTovUrpRBGQaLJIxggq0pvZZOABOn1rBucEpsATVXh
ojAX4uw3694TTud6RA/0uRC4ooyvGFsuYIppdg3ThLwPP9qgo/sAOxdzbwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCgGm07AR8bC2ApJkuQiizF8yLIMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzAyNDU1
NC03YWE2LTRjOWYtYTQ4Ny1kZjdiNDViZTQ2YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvMDI0NTU0
LTdhYTYtNGM5Zi1hNDg3LWRmN2I0NWJlNDZjNy8xL0tBYWJUc0JIeHNMWUNrbVM1
Q0tMTVh6SXNndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwaNMMA0EAgACMAcDBQMqEkuAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM90zANBgkqhkiG9w0BAQsFAAOCAQEAWgA+tAecpKDJ
KsOYRK6obML0mTxKK5y/sR0cZ+NvUTatF1/P/WQoWhPIiqN7M+Csgg1LHI548Wts
dM4XpleXqe/yGUbihSJZ3KuN+WE5ABol74jTcILbsjHl7hxIz5R1XSORLB4shoMB
LcQg6dFtft13tzF2fgKDhpGRDrWiI7uVX9kRyp17n50iUqJpWpYntui0JAbWeC1B
Z2yQNagEOrsiIJAi3DbwymXgmxypE2vAYa1S8weWJRTUG5OBm/lBIlPcUwv4ffa+
Tkuv8FdTIt1RFKhWkVLbllV1JKOt3SS+gjsHoj1F4Qfv33QBpignvsABQu/uN91z
8Clzklt/1g==
-----END CERTIFICATE-----