Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
File:                     __N-YUS-f13ZOtubq9g9SNUYlP0.cer (raw, json)
Hash identifier:          hod+cbB0WW59uqWlqpT33wt/VRwGdT7iOlNI7iRTUYE=
Subject key identifier:   FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420681406F4617F8E156BA0337E482A67
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 13079
                          IP: 213.168.128.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:14:06:f4:61:7f:8e:15:6b:a0:33:7e:48:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:1a:58:2b:b6:f4:f6:ba:5f:35:dc:9a:6f:
                    e8:f5:ea:c1:d8:17:14:c7:80:15:61:68:07:1c:fa:
                    c1:54:e8:92:4b:fa:32:6e:3f:4a:ea:c5:84:df:d6:
                    91:ab:6a:e7:a4:ff:bb:b3:99:10:b6:f9:f6:61:bb:
                    21:b5:3c:60:59:43:67:0b:62:47:f8:67:21:43:60:
                    a3:20:7a:52:68:16:90:f0:f2:28:bf:6f:62:6e:bd:
                    78:30:da:0c:3e:ab:cc:6d:cc:2a:3f:2a:d7:1d:c9:
                    5a:0e:97:0e:86:85:7e:42:1c:9d:dc:32:0a:66:65:
                    b7:23:02:4f:d7:9e:a2:c3:9c:5f:17:ed:65:c1:2b:
                    de:f9:a6:f8:61:5e:5e:c3:cb:06:c2:88:2c:60:e5:
                    e8:da:75:c6:54:3f:60:80:87:95:60:9f:73:2a:08:
                    58:7a:04:94:ca:f7:0c:66:4b:e6:e7:44:65:48:0b:
                    59:a3:44:f8:0d:15:fd:61:87:45:c5:1c:2c:8f:2a:
                    fe:1c:4d:41:1e:33:47:f2:6b:d9:35:f8:31:7a:5f:
                    51:a4:af:a2:c5:f9:bc:a1:d8:43:b3:9f:90:7d:15:
                    23:38:37:db:8c:37:56:fd:e4:e0:0a:75:a2:54:12:
                    fa:b4:3c:77:65:4c:10:30:9d:4f:b3:6a:23:48:3c:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.168.128.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13079

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:65:68:d6:a0:f7:e4:93:2f:f2:86:9f:08:c7:a1:1e:55:
         7b:17:86:be:c7:fb:93:71:cf:f7:05:3f:f6:18:85:07:06:be:
         ad:f7:82:01:c3:95:69:70:20:a9:43:05:b3:e0:68:2a:b1:bd:
         85:02:e8:cb:d9:4c:9b:16:c6:f0:14:cc:ac:45:eb:f2:f7:40:
         88:7b:51:4e:6b:d2:a7:b2:8d:aa:73:b7:b5:28:db:f2:4e:ba:
         5f:81:55:07:7c:db:75:e4:c6:df:cd:3f:42:b9:1c:3c:a1:4b:
         bc:29:d7:2c:28:06:a4:ef:a7:61:ac:df:ac:08:ae:7a:f2:11:
         4a:a3:df:52:40:84:07:24:6d:a4:3f:32:9a:d4:1b:2c:87:70:
         81:75:2e:21:99:86:01:e1:da:4b:a3:3a:e2:f4:a9:ed:97:0c:
         0a:42:8d:82:8a:25:9a:38:d0:2a:33:a0:4b:d0:4a:78:fd:c4:
         e0:e9:eb:0d:99:1b:66:5b:85:52:06:79:4d:b0:c4:31:a2:c7:
         de:a3:4e:3f:5b:a3:b6:7b:1c:3c:a2:23:23:71:c8:1b:07:76:
         00:c9:96:7d:79:d0:03:57:14:9d:77:a0:9b:81:23:f8:06:ad:
         a9:41:3a:47:ac:a3:d2:6e:a6:34:7c:29:65:4a:f3:23:51:a3:
         dd:4f:af:8b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQgaBQG9GF/jhVroDN+SCpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmYzN2U2MTQ0YmU3ZjVkZDkzYWRiOWJhYmQ4M2Q0OGQ1MTg5NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudQaWCu29Pa6XzXcmm/o9erB2BcU
x4AVYWgHHPrBVOiSS/oybj9K6sWE39aRq2rnpP+7s5kQtvn2YbshtTxgWUNnC2JH
+GchQ2CjIHpSaBaQ8PIov29ibr14MNoMPqvMbcwqPyrXHclaDpcOhoV+Qhyd3DIK
ZmW3IwJP156iw5xfF+1lwSve+ab4YV5ew8sGwogsYOXo2nXGVD9ggIeVYJ9zKghY
egSUyvcMZkvm50RlSAtZo0T4DRX9YYdFxRwsjyr+HE1BHjNH8mvZNfgxel9RpK+i
xfm8odhDs5+QfRUjODfbjDdW/eTgCnWiVBL6tDx3ZUwQMJ1Ps2ojSDwHiQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFP/zfmFEvn9d2Trbm6vYPUjVGJT9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzMyZmUw
Zi1iY2M5LTQyYmMtOTIyNi0wYmNlODBkNGRmZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMzJmZTBm
LWJjYzktNDJiYy05MjI2LTBiY2U4MGQ0ZGZmOS8xL19fTi1ZVVMtZjEzWk90dWJx
OWc5U05VWWxQMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQF1aiAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjMXMA0GCSqGSIb3DQEBCwUAA4IBAQBO6WVo1qD35JMv8oafCMehHlV7F4a+x/uT
cc/3BT/2GIUHBr6t94IBw5VpcCCpQwWz4Ggqsb2FAujL2UybFsbwFMysRevy90CI
e1FOa9Knso2qc7e1KNvyTrpfgVUHfNt15MbfzT9CuRw8oUu8KdcsKAak76dhrN+s
CK568hFKo99SQIQHJG2kPzKa1Bssh3CBdS4hmYYB4dpLozri9KntlwwKQo2CiiWa
ONAqM6BL0Ep4/cTg6esNmRtmW4VSBnlNsMQxosfeo04/W6O2exw8oiMjccgbB3YA
yZZ9edADVxSdd6CbgSP4Bq2pQTpHrKPSbqY0fCllSvMjUaPdT6+L
-----END CERTIFICATE-----