Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
File:                     UNlf0yarPwj3bczGVrs-Hia03Fc.cer (raw, json)
Hash identifier:          sxXK/vqznyRFx0wIZHTk9lr+cHgY8Zbb99Newn1xJPI=
Subject key identifier:   50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019519058A34280402C40A697FBBB23B20E3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:25:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204620

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:19:05:8a:34:28:04:02:c4:0a:69:7f:bb:b2:3b:20:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 12:25:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:34:81:5f:90:29:c2:a9:c4:98:ba:02:ae:
                    b3:4e:1c:d1:65:10:70:2c:ec:e2:1c:93:28:91:70:
                    ae:cb:58:a8:4f:ff:e9:f6:49:cf:71:75:93:d3:55:
                    82:44:28:8b:38:80:a8:89:99:af:7e:35:1e:92:a0:
                    9a:85:c3:f9:75:57:fa:33:85:d4:0c:d8:55:c3:61:
                    94:d4:4d:93:5f:8e:90:4b:1f:09:f3:18:2d:4f:a1:
                    21:44:f6:1f:64:62:f8:16:e2:f8:61:5f:e0:9c:9b:
                    83:b1:21:a1:19:3d:fd:50:78:8d:25:50:60:44:0a:
                    55:14:12:86:d5:8f:a2:d9:d8:03:d9:71:65:7a:16:
                    f8:8b:79:fd:74:d1:20:c5:99:7b:99:22:ff:d0:10:
                    76:45:a2:0d:01:3d:b7:5a:41:2f:3c:7a:a5:08:05:
                    12:d9:dd:3e:38:4f:02:75:b9:9e:7f:e0:71:83:16:
                    5a:3f:1a:d5:7d:62:a1:04:31:ec:05:7e:e6:3e:c9:
                    1b:c3:65:92:2c:89:a9:f4:44:61:89:8c:f6:7c:b3:
                    5a:2e:47:88:13:0c:e1:8d:c9:b2:14:cf:8b:d1:c1:
                    08:0f:34:21:bf:97:52:88:1d:d0:73:e8:11:1b:fd:
                    d4:e7:24:e8:02:18:f1:41:49:12:e3:6f:75:08:98:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204620

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:87:5c:18:3d:d0:9c:da:30:2c:a5:ba:f1:5a:06:97:66:
         b2:51:b0:1f:ea:cd:7e:e8:39:3f:1e:0f:21:db:8e:50:d3:81:
         47:b8:6e:ba:04:37:c1:08:01:fc:82:9c:72:b5:8b:bc:9d:17:
         00:ab:c3:71:35:d2:c6:4f:7e:b0:07:54:5c:cb:0e:56:3f:9a:
         3c:d3:fe:21:14:40:0e:30:20:16:25:3c:c1:d2:2e:7c:aa:71:
         ae:85:9a:f6:5e:14:18:74:68:bc:4d:7c:2f:2b:cb:2b:b5:66:
         cc:89:6f:16:cf:c2:1c:23:d1:77:e5:af:ff:0e:08:22:0e:0e:
         6c:6f:cb:c9:da:0a:26:23:b7:d9:06:60:da:fd:1d:ae:41:55:
         c0:3f:3a:ae:f4:38:13:d7:14:6c:92:a8:88:b5:a7:af:67:e4:
         a3:2e:81:e2:c9:65:d8:78:bb:9d:47:1d:df:12:be:79:0a:fd:
         48:36:0b:d4:80:c3:82:ae:e6:0a:99:1f:cb:84:e1:9e:ae:df:
         94:cf:c7:94:31:4c:4a:cb:fa:19:05:8c:7c:b2:f2:10:2c:8a:
         d6:78:b4:85:f5:10:4d:46:82:44:9f:2d:95:2b:b5:37:79:2b:
         c4:7c:7d:d9:83:1f:21:a2:d3:2f:59:bc:ae:94:7c:1e:89:ec:
         da:f9:18:fb
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZUZBYo0KAQCxAppf7uyOyDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE4MTIyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQ5NWZkMzI2YWIzZjA4Zjc2ZGNjYzY1NmJiM2UxZTI2YjRkYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rM0gV+QKcKpxJi6Aq6zThzRZRBw
LOziHJMokXCuy1ioT//p9knPcXWT01WCRCiLOICoiZmvfjUekqCahcP5dVf6M4XU
DNhVw2GU1E2TX46QSx8J8xgtT6EhRPYfZGL4FuL4YV/gnJuDsSGhGT39UHiNJVBg
RApVFBKG1Y+i2dgD2XFlehb4i3n9dNEgxZl7mSL/0BB2RaINAT23WkEvPHqlCAUS
2d0+OE8Cdbmef+BxgxZaPxrVfWKhBDHsBX7mPskbw2WSLImp9ERhiYz2fLNaLkeI
EwzhjcmyFM+L0cEIDzQhv5dSiB3Qc+gRG/3U5yToAhjxQUkS4291CJgCpQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFDZX9Mmqz8I923Mxla7Ph4mtNxXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2U2Y2Nj
Ny1kMWU1LTRmMDctOGRhYi01MDZhNDkzNGNhZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvZTZjY2M3
LWQxZTUtNGYwNy04ZGFiLTUwNmE0OTM0Y2FkNS8xL1VObGYweWFyUHdqM2JjekdW
cnMtSGlhMDNGYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMfTDANBgkqhkiG9w0BAQsFAAOCAQEASyCHXBg90Jza
MCyluvFaBpdmslGwH+rNfug5Px4PIduOUNOBR7huugQ3wQgB/IKccrWLvJ0XAKvD
cTXSxk9+sAdUXMsOVj+aPNP+IRRADjAgFiU8wdIufKpxroWa9l4UGHRovE18LyvL
K7VmzIlvFs/CHCPRd+Wv/w4IIg4ObG/LydoKJiO32QZg2v0drkFVwD86rvQ4E9cU
bJKoiLWnr2fkoy6B4sll2Hi7nUcd3xK+eQr9SDYL1IDDgq7mCpkfy4Thnq7flM/H
lDFMSsv6GQWMfLLyECyK1ni0hfUQTUaCRJ8tlSu1N3krxHx92YMfIaLTL1m8rpR8
Hons2vkY+w==
-----END CERTIFICATE-----