Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
File:                     b5RYfBGZosPfQBl7GfNlDGF94UU.cer (raw, json)
Hash identifier:          u4u1mC0z1RvlMIWrlN38X8XJTYzbrHHQqRx+CGgoBg4=
Subject key identifier:   6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961E012F5405E86FF0BA4E0659FF694837
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 04:41:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198716
                          AS: 198817
                          IP: 91.236.234.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:01:2f:54:05:e8:6f:f0:ba:4e:06:59:ff:69:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 04:41:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f94587c1199a2c3df40197b19f3650c617de145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:70:98:8d:3d:25:0b:8c:86:ae:28:df:ba:
                    e5:8a:e8:af:09:ee:1e:f5:d2:f1:bc:f6:ad:bd:14:
                    66:c3:49:95:95:4b:36:da:97:0d:00:25:37:9f:7a:
                    34:cf:dd:22:4b:3f:db:75:eb:25:92:50:b4:df:f4:
                    5e:99:ac:7b:b3:d0:c9:24:cb:ae:0a:73:ca:1e:46:
                    5d:73:e7:1c:7b:30:04:fe:43:d6:cb:f2:c3:1a:69:
                    2e:fa:ed:7f:ce:52:02:a1:d2:cd:b3:bc:51:84:ef:
                    8c:ba:43:41:06:55:68:f1:40:27:1e:10:93:ff:2b:
                    a3:59:a5:c8:44:84:22:3f:2f:20:0a:a6:17:4e:18:
                    cd:a3:aa:09:11:35:da:0c:5b:55:39:d5:f4:cc:16:
                    64:32:f5:87:39:96:97:47:1e:37:05:1c:6a:37:63:
                    a4:ef:c2:13:59:7e:ff:8a:b4:62:e8:88:50:22:cc:
                    57:e8:23:d5:3d:1a:fc:59:e6:5a:3d:77:4f:01:49:
                    2b:d7:bf:0f:1f:85:df:43:8b:e4:0c:e3:f9:6a:04:
                    54:aa:e4:15:74:36:ca:e4:a5:42:d2:51:07:b3:de:
                    ab:2d:57:a8:17:78:87:f3:34:88:8e:03:e2:c4:68:
                    d9:10:a4:8e:7c:fa:e5:7e:98:63:14:69:c6:d5:6c:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.234.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198716
                  198817

    Signature Algorithm: sha256WithRSAEncryption
         55:25:37:ff:08:ea:5f:3e:31:d1:66:89:1e:de:8d:31:63:ff:
         3d:e7:30:60:85:6d:7c:25:66:85:42:a3:19:90:27:75:82:6b:
         46:41:fe:0d:cf:94:27:9f:2a:ba:67:21:40:5c:dc:f1:3d:83:
         2e:e8:54:b3:0c:f0:9c:39:a5:57:2e:b7:3c:cc:50:bb:60:33:
         21:4b:99:c7:c2:61:14:f8:ef:9d:ae:b7:b3:88:9d:96:c3:c4:
         42:55:8e:9a:e9:2f:4b:7c:0a:11:03:33:dc:60:99:da:97:57:
         b6:2a:73:c7:16:0a:0d:6c:09:92:e8:01:8a:3a:d5:58:f5:a9:
         af:80:4b:e2:eb:2a:7e:d6:31:10:e9:bc:20:a0:9e:7f:9d:76:
         80:0a:98:02:0c:2a:9d:8f:c9:d7:3b:6a:f0:c8:06:eb:72:3b:
         14:ee:3f:9f:9c:1c:7d:4a:94:15:10:96:ed:55:e6:9c:85:9a:
         ff:69:42:ea:53:a8:e5:ad:16:ef:44:65:51:82:a1:40:6a:13:
         39:37:0a:f4:0f:3b:c7:7b:cb:70:11:88:0c:67:d2:d0:d6:6b:
         7e:b3:5a:1c:52:87:37:73:d6:ac:f9:2c:d3:79:87:b0:87:e1:
         0e:f0:09:c8:77:b1:12:8e:26:74:18:48:b6:6a:80:f6:e1:c2:
         fb:14:0d:dd
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZYeAS9UBehv8LpOBln/aUg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDEwMDQ0MTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjk0NTg3YzExOTlhMmMzZGY0MDE5N2IxOWYzNjUwYzYxN2RlMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdwmI09JQuMhq4o37rliuivCe4e
9dLxvPatvRRmw0mVlUs22pcNACU3n3o0z90iSz/bdeslklC03/Remax7s9DJJMuu
CnPKHkZdc+ccezAE/kPWy/LDGmku+u1/zlICodLNs7xRhO+MukNBBlVo8UAnHhCT
/yujWaXIRIQiPy8gCqYXThjNo6oJETXaDFtVOdX0zBZkMvWHOZaXRx43BRxqN2Ok
78ITWX7/irRi6IhQIsxX6CPVPRr8WeZaPXdPAUkr178PH4XfQ4vkDOP5agRUquQV
dDbK5KVC0lEHs96rLVeoF3iH8zSIjgPixGjZEKSOfPrlfphjFGnG1Ww3XQIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFG+UWHwRmaLD30AZexnzZQxhfeFFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzBjMTRk
Yi04NjIwLTQ5OTYtYWZhZS1iOWNmNDAwOTQ2NDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvMGMxNGRi
LTg2MjAtNDk5Ni1hZmFlLWI5Y2Y0MDA5NDY0MC8xL2I1UllmQkdab3NQZlFCbDdH
Zk5sREdGOTRVVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW+zqMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwMIPAIDAwihMA0GCSqGSIb3DQEBCwUAA4IBAQBVJTf/COpfPjHRZoke3o0xY/89
5zBghW18JWaFQqMZkCd1gmtGQf4Nz5Qnnyq6ZyFAXNzxPYMu6FSzDPCcOaVXLrc8
zFC7YDMhS5nHwmEU+O+drreziJ2Ww8RCVY6a6S9LfAoRAzPcYJnal1e2KnPHFgoN
bAmS6AGKOtVY9amvgEvi6yp+1jEQ6bwgoJ5/nXaACpgCDCqdj8nXO2rwyAbrcjsU
7j+fnBx9SpQVEJbtVeachZr/aULqU6jlrRbvRGVRgqFAahM5Nwr0DzvHe8twEYgM
Z9LQ1mt+s1ocUoc3c9as+SzTeYewh+EO8AnId7ESjiZ0GEi2aoD24cL7FA3d
-----END CERTIFICATE-----