Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
File:                     OPJMluat5giBDDDZoTB8xpr5_00.cer (raw, json)
Hash identifier:          Wa+3Vq+MLmGeHbPwFAJyGmTdF5PwcPlrhYz2YYptt7E=
Subject key identifier:   38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425219D2BA358053B618B6709B6D628D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205121

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:9d:2b:a3:58:05:3b:61:8b:67:09:b6:d6:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:c6:6b:7b:0d:28:17:17:db:86:58:40:a5:
                    c3:2f:9f:f8:b7:35:cc:59:12:a8:91:1b:0e:a1:c1:
                    b1:6a:24:3b:3a:e2:0e:5a:54:18:78:17:82:42:f7:
                    01:11:74:50:18:d2:25:23:80:e3:d4:54:3f:69:86:
                    c3:1e:3e:0b:96:74:6d:c3:a8:99:fd:68:2c:ba:13:
                    76:e7:25:c7:78:fb:1e:52:ae:ad:f0:89:60:41:ed:
                    1f:91:41:1c:29:7f:7e:37:db:d4:e4:06:02:a8:65:
                    48:03:63:92:d2:9f:57:53:a5:b3:50:d6:95:31:d6:
                    6a:90:dd:ee:69:ac:00:20:1c:84:d7:17:f1:28:46:
                    6a:a6:cf:73:9a:7c:28:81:87:3b:34:d2:52:1c:f5:
                    1f:1e:4f:14:54:d1:9b:5b:e1:44:75:9b:12:29:c6:
                    63:e1:17:23:a7:fa:f9:5b:72:39:3f:30:c6:a4:86:
                    83:8b:ae:ce:9d:e7:0c:9f:e9:3f:c9:4c:8e:2f:6a:
                    02:93:ae:99:07:a9:e0:bd:2c:e6:e1:f6:e1:94:e7:
                    ed:95:e4:d2:9a:dd:54:d0:c8:9e:f5:b0:2b:ef:90:
                    72:4c:bc:f3:5b:88:7e:fb:36:70:2d:f3:fa:52:de:
                    f9:00:e6:53:44:99:a1:57:73:be:1d:ef:b9:c1:4d:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205121

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:21:df:07:47:1b:f3:fe:25:b2:da:a5:e8:91:bc:e2:44:
         19:21:6a:0b:4e:5d:f4:23:55:7b:8c:fd:1f:06:19:42:1e:47:
         a2:9b:86:53:83:10:67:ba:04:66:8a:8a:10:94:4b:7f:0f:f2:
         1c:34:97:6d:c9:56:d1:9b:6f:49:0d:cc:0c:83:90:69:a1:bd:
         c2:e3:84:92:d8:72:69:e0:ad:75:51:e8:c9:a0:31:cb:d1:3b:
         b8:b7:fb:21:79:85:f0:09:e9:ea:69:b2:69:84:ab:60:bf:58:
         21:4c:3a:87:b4:5f:bb:b5:0f:e6:19:36:0f:7d:20:d3:0d:1a:
         57:52:7a:cb:15:f3:f9:82:bb:62:a9:65:cd:3a:b7:53:10:5b:
         70:4d:a3:bd:1f:a8:c9:ac:54:8f:b6:6f:4f:19:f9:6e:de:b5:
         9c:0f:52:63:23:74:17:e9:cb:e7:b8:3d:fc:ae:01:68:ad:8c:
         e9:01:ea:5d:ac:38:26:3f:74:1a:f6:30:54:c2:a4:a4:fc:93:
         b4:dd:1c:02:2d:6b:8f:60:56:97:4c:1f:0d:f0:05:b2:85:7d:
         20:1f:9b:ba:24:10:8a:55:a5:04:9a:70:0c:bf:8f:db:cb:61:
         0b:c8:6e:31:df:2e:f4:c6:64:49:80:35:75:bd:95:fd:01:c1:
         59:4a:9a:cc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQlIZ0ro1gFO2GLZwm21ijTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGYyNGM5NmU2YWRlNjA4ODEwYzMwZDlhMTMwN2NjNjlhZjlmZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkDGa3sNKBcX24ZYQKXDL5/4tzXM
WRKokRsOocGxaiQ7OuIOWlQYeBeCQvcBEXRQGNIlI4Dj1FQ/aYbDHj4LlnRtw6iZ
/WgsuhN25yXHePseUq6t8IlgQe0fkUEcKX9+N9vU5AYCqGVIA2OS0p9XU6WzUNaV
MdZqkN3uaawAIByE1xfxKEZqps9zmnwogYc7NNJSHPUfHk8UVNGbW+FEdZsSKcZj
4Rcjp/r5W3I5PzDGpIaDi67OnecMn+k/yUyOL2oCk66ZB6ngvSzm4fbhlOftleTS
mt1U0Mie9bAr75ByTLzzW4h++zZwLfP6Ut75AOZTRJmhV3O+He+5wU3WawIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDjyTJbmreYIgQww2aEwfMaa+f9NMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzhhZjFj
ZC01MDIxLTQ2M2ItOTlhMy0wNGU0YTg0YTc0YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvOGFmMWNk
LTUwMjEtNDYzYi05OWEzLTA0ZTRhODRhNzRhYy8xL09QSk1sdWF0NWdpQkRERFpv
VEI4eHByNV8wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhQTANBgkqhkiG9w0BAQsFAAOCAQEAIqAh3wdHG/P+
JbLapeiRvOJEGSFqC05d9CNVe4z9HwYZQh5HopuGU4MQZ7oEZoqKEJRLfw/yHDSX
bclW0ZtvSQ3MDIOQaaG9wuOEkthyaeCtdVHoyaAxy9E7uLf7IXmF8Anp6mmyaYSr
YL9YIUw6h7Rfu7UP5hk2D30g0w0aV1J6yxXz+YK7YqllzTq3UxBbcE2jvR+oyaxU
j7ZvTxn5bt61nA9SYyN0F+nL57g9/K4BaK2M6QHqXaw4Jj90GvYwVMKkpPyTtN0c
Ai1rj2BWl0wfDfAFsoV9IB+buiQQilWlBJpwDL+P28thC8huMd8u9MZkSYA1db2V
/QHBWUqazA==
-----END CERTIFICATE-----