Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
File:                     S81y1ss4Wjozxsj-VFnGhqaElQk.cer (raw, json)
Hash identifier:          pCrhOYWv8aA1Fpyxb1cFs23QJYq7nJNwkIh7Tmg9pUo=
Subject key identifier:   4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019566405EB2087D57F0DD1A3469577A437F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Mar 2025 12:20:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41133
                          IP: 45.91.228.0/24
                          IP: 2a0e:1ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:66:40:5e:b2:08:7d:57:f0:dd:1a:34:69:57:7a:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 12:20:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:b6:ab:de:e9:36:61:bf:07:77:46:b4:52:
                    ad:6b:76:1d:9f:df:f0:ff:a5:18:47:59:26:a5:32:
                    16:66:7d:39:de:9d:e1:f8:6f:e2:b1:ea:14:32:63:
                    9e:a4:4f:99:5b:dd:46:5a:cd:19:2e:68:24:0e:b6:
                    f8:78:fc:a8:1b:2b:69:7b:c7:b5:f9:2e:5b:c2:b4:
                    33:ee:7e:d2:24:4d:f3:3f:08:5a:ba:50:f9:f3:de:
                    96:c6:b1:ab:46:56:f6:9f:70:60:0b:96:ca:7f:25:
                    2f:40:4c:ca:95:06:d1:66:e7:b6:79:36:bd:95:71:
                    29:96:9d:c8:2d:19:74:7d:05:6e:9e:ad:5d:84:94:
                    ab:62:f3:89:0a:9d:09:58:33:72:2d:e3:9b:e4:7f:
                    ae:05:84:ef:b6:4c:48:2f:d4:84:08:08:ab:cf:30:
                    a1:05:59:bc:65:ce:b5:ca:b1:46:24:04:2c:8f:e1:
                    fb:a9:9a:84:4f:cf:18:05:ac:80:19:1f:08:bd:6d:
                    20:03:c5:37:6f:75:85:d8:06:bc:bf:73:f1:51:44:
                    8d:48:e8:04:41:15:04:1f:9d:48:8c:8f:57:5e:b1:
                    64:c6:01:ae:a1:44:26:7e:49:45:7d:95:67:0e:93:
                    b4:3b:ca:7b:a4:d5:e2:6f:d8:69:b1:e5:90:af:2e:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.228.0/24
                IPv6:
                  2a0e:1ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41133

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:4d:b6:17:40:58:e6:e9:bc:c8:9d:84:55:09:db:94:23:
         38:4b:99:fb:0d:b4:ff:6f:5e:a0:1c:ac:e5:46:db:67:8c:25:
         56:1e:8c:94:5f:90:dd:d2:60:38:1d:b1:6f:1f:a0:d5:d8:64:
         c9:bc:d9:ae:37:ff:e5:45:c6:34:a7:4d:0a:f9:f8:84:98:b7:
         5e:e8:b7:55:f7:b0:67:e1:0c:bb:88:fa:38:f6:db:a1:8a:5b:
         8e:ed:d5:7a:d0:44:27:ce:a5:71:1e:30:ca:7c:0b:29:a3:3c:
         5e:af:79:26:35:6e:c5:86:d4:fb:1d:11:88:d5:b7:91:b2:1b:
         25:02:97:9a:a1:36:47:ad:46:59:b6:60:93:a6:74:ec:b8:b7:
         76:70:b8:2f:76:e3:75:d1:51:87:ac:35:49:5c:33:64:7c:87:
         8f:90:71:f6:50:f9:e2:64:f3:14:96:6f:88:a5:82:22:8b:d3:
         a0:11:b3:13:57:4b:63:77:8c:61:17:49:4a:a7:6a:b4:9f:b7:
         b0:77:e8:14:91:17:69:3c:c7:1d:ef:04:87:29:3e:e8:16:a4:
         72:26:f2:b9:dc:f5:06:81:56:5e:d0:3a:35:33:c7:1e:4f:32:
         71:d0:07:12:d4:af:bc:4e:c4:d8:e4:44:75:f0:a6:bc:d6:d2:
         7e:8e:f8:a7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZVmQF6yCH1X8N0aNGlXekN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzA1MTIyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmNkNzJkNmNiMzg1YTNhMzNjNmM4ZmU1NDU5YzY4NmE2ODQ5NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIK2q97pNmG/B3dGtFKta3Ydn9/w
/6UYR1kmpTIWZn053p3h+G/iseoUMmOepE+ZW91GWs0ZLmgkDrb4ePyoGytpe8e1
+S5bwrQz7n7SJE3zPwhaulD5896WxrGrRlb2n3BgC5bKfyUvQEzKlQbRZue2eTa9
lXEplp3ILRl0fQVunq1dhJSrYvOJCp0JWDNyLeOb5H+uBYTvtkxIL9SECAirzzCh
BVm8Zc61yrFGJAQsj+H7qZqET88YBayAGR8IvW0gA8U3b3WF2Aa8v3PxUUSNSOgE
QRUEH51IjI9XXrFkxgGuoUQmfklFfZVnDpO0O8p7pNXib9hpseWQry5pZwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEvNctbLOFo6M8bI/lRZxoamhJUJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzA4ZjY3
MS0zYzM1LTQ1MGEtYTkwZS0yY2NlOTYwMDY2MGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvMDhmNjcx
LTNjMzUtNDUwYS1hOTBlLTJjY2U5NjAwNjYwZi8xL1M4MXkxc3M0V2pvenhzai1W
Rm5HaHFhRWxRay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALVvkMA0EAgACMAcDBQMqDhrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCgrTANBgkqhkiG9w0BAQsFAAOCAQEAI7ZNthdAWObp
vMidhFUJ25QjOEuZ+w20/29eoBys5UbbZ4wlVh6MlF+Q3dJgOB2xbx+g1dhkybzZ
rjf/5UXGNKdNCvn4hJi3Xui3VfewZ+EMu4j6OPbboYpbju3VetBEJ86lcR4wynwL
KaM8Xq95JjVuxYbU+x0RiNW3kbIbJQKXmqE2R61GWbZgk6Z07Li3dnC4L3bjddFR
h6w1SVwzZHyHj5Bx9lD54mTzFJZviKWCIovToBGzE1dLY3eMYRdJSqdqtJ+3sHfo
FJEXaTzHHe8Ehyk+6Bakcibyudz1BoFWXtA6NTPHHk8ycdAHEtSvvE7E2OREdfCm
vNbSfo74pw==
-----END CERTIFICATE-----