Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
File:                     St2XYC4ZGOerwfYtz9TaynNJmz4.cer (raw, json)
Hash identifier:          3klX0l/JksDLiBKVdKoer4n7QNDIA6/XJR5SB2Y5WE8=
Subject key identifier:   4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958AE351806D3B06415145B647755A1881
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 15:05:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211615

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8a:e3:51:80:6d:3b:06:41:51:45:b6:47:75:5a:18:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 15:05:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:8c:00:a1:8a:e0:59:1d:db:a8:5e:b3:0c:
                    c9:7a:44:b3:c6:24:49:c4:75:97:e2:4d:80:44:d7:
                    7b:5a:64:5e:e3:78:35:6f:95:4f:7a:d5:59:aa:20:
                    da:b6:3d:75:d3:f6:4b:74:7b:96:e4:d1:a0:03:89:
                    79:46:ea:c3:16:38:c7:33:8f:a2:74:70:e4:95:ef:
                    da:d4:34:fe:69:f9:00:4a:52:65:d4:6d:a0:3c:8e:
                    c7:9b:38:c4:20:18:52:20:0f:c0:df:d3:f2:b7:4f:
                    c1:7b:42:7b:a3:fe:31:7f:99:47:aa:d8:d6:1a:50:
                    27:6a:42:e0:3e:49:e5:0f:1b:9b:dd:6c:14:38:8c:
                    5a:e0:24:99:5f:35:05:45:f3:d8:cc:72:76:df:26:
                    b6:3b:04:fe:d4:2b:3d:bb:97:06:49:27:74:2d:84:
                    3f:8a:3d:1a:d4:be:8b:03:71:a4:bd:b1:c1:b7:2f:
                    05:59:41:09:0c:90:b3:18:43:7a:fb:fe:82:49:b5:
                    e0:28:ba:43:33:59:22:ec:e1:90:c0:07:e4:76:5a:
                    72:b3:7e:5d:ce:20:49:e5:ca:1c:6d:6d:0a:72:5d:
                    85:68:db:c6:9d:c9:d9:42:56:4b:50:75:27:d0:b2:
                    ba:3e:a7:67:ef:ec:9c:60:30:38:22:0c:07:5f:f0:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211615

    Signature Algorithm: sha256WithRSAEncryption
         a7:1b:f9:4c:78:0d:5c:ec:d3:41:33:04:45:da:1d:3f:2a:4b:
         ca:ba:be:5b:54:06:42:2b:c7:3a:e7:73:1e:e9:17:ee:bd:05:
         6a:6b:bd:ec:5f:39:2a:bb:00:05:ee:ef:83:f9:d3:90:86:04:
         9b:d8:03:1a:21:0e:ad:c4:d0:d0:aa:10:bb:ea:6b:bb:11:96:
         77:9d:90:a1:23:55:72:7d:4c:f6:cf:09:d7:dc:19:b4:85:ca:
         e2:cf:d8:c4:d6:ed:ed:5b:43:17:de:d0:b6:9e:90:34:ac:aa:
         64:7c:73:e1:c2:25:5e:f6:ed:06:f5:61:80:09:a6:15:04:e1:
         b0:46:01:d6:81:42:9e:d1:bb:6b:11:ad:3d:2e:d3:a0:42:de:
         6e:9e:fe:f3:bd:c1:56:8c:5a:4f:b8:14:e6:0b:73:15:fd:4f:
         69:0a:f1:f5:f7:82:8b:1c:26:24:4e:12:94:d5:cb:a1:0d:36:
         67:10:59:76:19:32:96:da:a4:c9:d3:23:a7:bb:fd:9c:ea:ab:
         6d:3f:75:1e:61:3d:c6:2d:40:c6:18:9f:6b:f7:66:d9:67:cb:
         5b:0b:72:5b:b8:79:78:77:4e:22:af:1e:cc:a2:98:53:7c:43:
         e8:4d:c9:f0:aa:29:ce:9f:e0:23:bb:e1:1f:f9:dd:bd:f6:b9:
         3d:e9:d4:d6
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZWK41GAbTsGQVFFtkd1WhiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEyMTUwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRkOTc2MDJlMTkxOGU3YWJjMWY2MmRjZmQ0ZGFjYTczNDk5YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsGMAKGK4Fkd26heswzJekSzxiRJ
xHWX4k2ARNd7WmRe43g1b5VPetVZqiDatj110/ZLdHuW5NGgA4l5RurDFjjHM4+i
dHDkle/a1DT+afkASlJl1G2gPI7HmzjEIBhSIA/A39Pyt0/Be0J7o/4xf5lHqtjW
GlAnakLgPknlDxub3WwUOIxa4CSZXzUFRfPYzHJ23ya2OwT+1Cs9u5cGSSd0LYQ/
ij0a1L6LA3GkvbHBty8FWUEJDJCzGEN6+/6CSbXgKLpDM1ki7OGQwAfkdlpys35d
ziBJ5cocbW0Kcl2FaNvGncnZQlZLUHUn0LK6Pqdn7+ycYDA4IgwHX/AJ1wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFErdl2AuGRjnq8H2Lc/U2spzSZs+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzU3NTQy
YS1lMWFjLTQwMTQtODZmZS0xMmU1ZTgxNzMyMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNTc1NDJh
LWUxYWMtNDAxNC04NmZlLTEyZTVlODE3MzIwMS8xL1N0MlhZQzRaR09lcndmWXR6
OVRheW5OSm16NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM6nzANBgkqhkiG9w0BAQsFAAOCAQEApxv5THgNXOzT
QTMERdodPypLyrq+W1QGQivHOudzHukX7r0Famu97F85KrsABe7vg/nTkIYEm9gD
GiEOrcTQ0KoQu+pruxGWd52QoSNVcn1M9s8J19wZtIXK4s/YxNbt7VtDF97Qtp6Q
NKyqZHxz4cIlXvbtBvVhgAmmFQThsEYB1oFCntG7axGtPS7ToELebp7+873BVoxa
T7gU5gtzFf1PaQrx9feCixwmJE4SlNXLoQ02ZxBZdhkyltqkydMjp7v9nOqrbT91
HmE9xi1Axhifa/dm2WfLWwtyW7h5eHdOIq8ezKKYU3xD6E3J8Kopzp/gI7vhH/nd
vfa5PenU1g==
-----END CERTIFICATE-----