Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
File:                     Yap9YxOr3CfJLQulSehoP5qPFQ8.cer (raw, json)
Hash identifier:          vhpBrU4oGAMLD3/lNJmP4xQvCy/fu/oAoQpRfJFQQJI=
Subject key identifier:   61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDD0CEDFC3179AE8312B84A782B308
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56827
                          IP: 91.227.232.0/22
                          IP: 2001:67c:22b4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:d0:ce:df:c3:17:9a:e8:31:2b:84:a7:82:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:d9:93:52:04:a8:45:82:0d:2f:6f:bc:15:
                    de:b1:16:09:3c:3d:2e:5a:17:22:1c:71:cc:f2:bd:
                    83:02:5e:6a:b0:e6:25:6f:bf:c0:a5:0f:f5:72:2c:
                    e4:3e:c9:fb:1e:0a:e8:2b:2d:aa:de:26:5d:55:46:
                    f2:cb:d7:e4:97:93:8e:20:c7:81:a7:60:a7:52:ce:
                    91:cb:16:bd:df:f5:41:b3:69:f5:98:06:63:76:8e:
                    cd:4e:09:34:5c:a2:b4:13:6c:7b:b2:2a:a9:97:f4:
                    aa:88:fc:2d:36:85:d0:00:c4:d8:f6:b8:3b:9b:a8:
                    98:2c:1b:b9:61:cf:33:6e:e3:2c:3f:1c:02:19:82:
                    f9:e1:b8:8e:47:27:c5:67:22:74:cf:26:f2:52:8b:
                    8f:98:b2:49:e9:4c:8e:16:67:7e:95:56:a2:43:95:
                    af:5b:2f:67:a8:bd:1f:91:fb:5d:96:72:4b:76:4c:
                    af:22:21:44:3d:fc:ab:42:91:1e:8b:8e:73:d4:0d:
                    c2:46:17:b1:9f:4e:76:92:ca:d4:85:41:00:51:77:
                    ba:1a:44:59:08:4f:b0:0d:1c:5b:09:fd:26:db:a5:
                    c9:7d:0a:89:73:19:dc:ec:00:f5:e7:ca:a9:5c:e6:
                    13:5c:0e:df:04:fc:31:7c:2d:9d:dc:49:59:86:92:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.232.0/22
                IPv6:
                  2001:67c:22b4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56827

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:2c:35:e6:7b:cf:99:8e:8e:13:e1:35:0c:f2:cd:c4:d4:
         70:a2:81:40:0f:bb:c8:dc:d3:90:94:8b:dd:36:42:d3:4c:88:
         c3:31:ba:a0:ab:76:f1:c1:0d:c0:34:9b:04:5d:2f:96:e2:93:
         0c:09:ab:9c:9b:43:f1:1a:91:93:09:74:60:97:e6:87:0d:fb:
         9e:28:81:ef:c7:d2:33:4b:ba:dc:7f:d4:d5:64:c0:e0:57:8e:
         0b:1d:c3:6f:e8:fd:b6:83:9a:fa:75:61:a4:5f:12:45:1f:6a:
         19:79:92:f2:c2:30:bd:8d:c3:5c:52:57:31:35:5f:44:76:3d:
         48:c9:c7:11:b2:1f:0d:88:3a:1d:f3:10:43:38:1d:cd:18:98:
         d4:70:64:1a:db:50:be:9b:07:a2:be:4d:3c:df:47:23:e0:04:
         ef:44:39:a7:bb:4e:62:a1:6a:63:7a:a4:32:ae:f0:2e:1d:c0:
         62:f5:83:83:94:f7:2c:5d:de:53:0f:fa:fe:97:20:91:41:e9:
         c6:c9:5c:06:21:8b:6b:05:f5:64:0a:42:53:07:b5:8e:10:f7:
         ee:f4:f2:b1:b2:6d:9e:97:32:3f:b1:21:0e:da:ba:c5:a7:79:
         b4:4c:ca:16:f3:63:0d:1b:e0:c4:0c:60:12:d3:af:bd:cc:02:
         e1:0f:f8:d5
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQl/dDO38MXmugxK4SngrMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWFhN2Q2MzEzYWJkYzI3YzkyZDBiYTU0OWU4NjgzZjlhOGYxNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHZk1IEqEWCDS9vvBXesRYJPD0u
WhciHHHM8r2DAl5qsOYlb7/ApQ/1cizkPsn7HgroKy2q3iZdVUbyy9fkl5OOIMeB
p2CnUs6Ryxa93/VBs2n1mAZjdo7NTgk0XKK0E2x7siqpl/SqiPwtNoXQAMTY9rg7
m6iYLBu5Yc8zbuMsPxwCGYL54biORyfFZyJ0zybyUouPmLJJ6UyOFmd+lVaiQ5Wv
Wy9nqL0fkftdlnJLdkyvIiFEPfyrQpEei45z1A3CRhexn052ksrUhUEAUXe6GkRZ
CE+wDRxbCf0m26XJfQqJcxnc7AD158qpXOYTXA7fBPwxfC2d3ElZhpJrXwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFGGqfWMTq9wnyS0LpUnoaD+ajxUPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2QyMzBj
Zi04NTNmLTQzYjctOTc0MS1kY2E4ZGE4NzZmZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZDIzMGNm
LTg1M2YtNDNiNy05NzQxLWRjYThkYTg3NmZlNi8xL1lhcDlZeE9yM0NmSkxRdWxT
ZWhvUDVxUEZROC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQCW+PoMA8EAgACMAkDBwAgAQZ8IrQwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAN37MA0GCSqGSIb3DQEBCwUAA4IBAQBp+Sw15nvP
mY6OE+E1DPLNxNRwooFAD7vI3NOQlIvdNkLTTIjDMbqgq3bxwQ3ANJsEXS+W4pMM
Caucm0PxGpGTCXRgl+aHDfueKIHvx9IzS7rcf9TVZMDgV44LHcNv6P22g5r6dWGk
XxJFH2oZeZLywjC9jcNcUlcxNV9Edj1IyccRsh8NiDod8xBDOB3NGJjUcGQa21C+
mweivk0830cj4ATvRDmnu05ioWpjeqQyrvAuHcBi9YODlPcsXd5TD/r+lyCRQenG
yVwGIYtrBfVkCkJTB7WOEPfu9PKxsm2elzI/sSEO2rrFp3m0TMoW82MNG+DEDGAS
06+9zALhD/jV
-----END CERTIFICATE-----