Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
File:                     LO4pmOhvp0iOa2T47bwDLOFdG8w.cer (raw, json)
Hash identifier:          wOpIgk89soVvJ0/6UDiOGs6tQno158ZnfWqZunvuFWw=
Subject key identifier:   2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D62CB0F69043298E8B04F2ECB61CE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205564
                          IP: 185.213.252.0/22
                          IP: 2a0b:9140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:2c:b0:f6:90:43:29:8e:8b:04:f2:ec:b6:1c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:44:6c:72:34:b5:49:16:88:be:23:99:58:
                    09:4b:cd:2c:39:a0:f5:3a:29:7d:a3:91:eb:59:96:
                    3b:5a:39:88:4f:c1:60:e4:44:be:43:43:77:2c:ff:
                    f6:96:c4:5a:b6:ba:0e:f6:b9:47:cc:ee:c8:ee:50:
                    4d:af:b8:39:cf:47:78:95:a9:2c:50:3c:00:78:58:
                    4e:1e:a2:65:69:39:46:44:4b:9b:df:38:de:08:98:
                    a4:65:6b:bc:62:2a:12:cd:64:7a:43:0e:cc:f6:81:
                    68:cb:d6:18:d3:ee:e0:98:2e:4a:0e:1e:42:29:bb:
                    8f:e7:df:d1:30:c5:c1:5c:12:be:f8:aa:ef:96:e7:
                    81:1b:fe:16:95:00:34:3e:7a:9d:f8:a1:f3:45:88:
                    ec:a9:a8:c2:22:ef:2a:d8:18:91:bb:68:b5:69:18:
                    95:61:70:f6:4a:83:d9:fb:2a:0f:c7:f1:cf:bd:f3:
                    35:e5:d9:7a:0d:61:5a:20:00:74:f2:96:3a:e1:3a:
                    7e:bf:be:6a:8b:5f:72:11:cf:2b:90:df:6d:97:59:
                    d4:7e:ac:d6:d9:50:3c:e4:db:f8:11:81:76:60:f2:
                    37:f5:e6:15:dc:bb:e7:5b:cf:9b:e0:53:4b:41:1d:
                    87:ee:9a:0f:0a:91:2d:32:99:a2:97:98:75:af:3c:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.252.0/22
                IPv6:
                  2a0b:9140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205564

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:4a:cb:e7:ca:f9:f6:d6:d7:7f:92:b4:fe:64:7f:8f:f7:
         65:3b:8d:18:a6:df:8b:ab:de:fa:83:33:83:a1:fe:9e:7a:d3:
         44:90:37:c5:64:a2:16:6c:6c:0b:a4:2b:96:9e:59:a8:e5:57:
         c4:81:76:dd:a4:d8:0b:e0:ea:5b:da:10:b7:41:69:5e:15:f5:
         b8:da:89:7b:9b:69:1f:c7:35:75:62:bd:0c:a0:64:98:1f:27:
         51:e1:1f:e8:bd:49:d6:e4:cb:01:4d:45:e0:94:17:b6:2b:42:
         8a:67:01:0a:c8:a5:fc:34:a5:c8:8e:8b:73:82:c8:79:8b:75:
         ad:24:bd:cc:ab:01:00:26:4d:1e:71:8e:e8:56:0d:16:b6:b2:
         46:f8:86:96:75:77:3f:85:1b:24:1c:30:f0:76:09:a2:cb:0f:
         3d:cb:7a:9d:fd:67:9f:af:00:7c:23:31:e4:f3:8b:ad:a1:ee:
         bb:c9:1a:b2:85:fa:cd:26:89:34:0d:d3:4c:4e:07:a0:cc:c4:
         02:e0:6b:8d:c5:05:da:01:10:81:ef:71:21:cb:47:24:b8:22:
         d2:06:e0:57:79:10:6e:f6:0a:f5:e9:a2:34:5b:58:9b:d1:b9:
         a9:2b:94:e3:1d:dd:ea:75:2a:11:11:00:5f:17:9f:e8:5e:75:
         25:af:8a:a3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1iyw9pBDKY6LBPLsthziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VlMjk5OGU4NmZhNzQ4OGU2YjY0ZjhlZGJjMDMyY2UxNWQxYmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOhEbHI0tUkWiL4jmVgJS80sOaD1
Oil9o5HrWZY7WjmIT8Fg5ES+Q0N3LP/2lsRatroO9rlHzO7I7lBNr7g5z0d4laks
UDwAeFhOHqJlaTlGREub3zjeCJikZWu8YioSzWR6Qw7M9oFoy9YY0+7gmC5KDh5C
KbuP59/RMMXBXBK++KrvlueBG/4WlQA0Pnqd+KHzRYjsqajCIu8q2BiRu2i1aRiV
YXD2SoPZ+yoPx/HPvfM15dl6DWFaIAB08pY64Tp+v75qi19yEc8rkN9tl1nUfqzW
2VA85Nv4EYF2YPI39eYV3LvnW8+b4FNLQR2H7poPCpEtMpmil5h1rzwihQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCzuKZjob6dIjmtk+O28AyzhXRvMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzVlMTg3
MS0yYWYxLTQ3ZDMtYjI2Mi0wOGY0MzNkYWVhMTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNWUxODcx
LTJhZjEtNDdkMy1iMjYyLTA4ZjQzM2RhZWExNS8xL0xPNHBtT2h2cDBpT2EyVDQ3
YndETE9GZEc4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudX8MA0EAgACMAcDBQMqC5FAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMi/DANBgkqhkiG9w0BAQsFAAOCAQEAC1JKy+fK+fbW
13+StP5kf4/3ZTuNGKbfi6ve+oMzg6H+nnrTRJA3xWSiFmxsC6Qrlp5ZqOVXxIF2
3aTYC+DqW9oQt0FpXhX1uNqJe5tpH8c1dWK9DKBkmB8nUeEf6L1J1uTLAU1F4JQX
titCimcBCsil/DSlyI6Lc4LIeYt1rSS9zKsBACZNHnGO6FYNFrayRviGlnV3P4Ub
JBww8HYJossPPct6nf1nn68AfCMx5POLraHuu8kasoX6zSaJNA3TTE4HoMzEAuBr
jcUF2gEQge9xIctHJLgi0gbgV3kQbvYK9emiNFtYm9G5qSuU4x3d6nUqEREAXxef
6F51Ja+Kow==
-----END CERTIFICATE-----