Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
File:                     bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer (raw, json)
Hash identifier:          /Ih4sESgbES1d1/Aviz29KexabUMJz2HvtV5t9yrGwQ=
Subject key identifier:   6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194D5EABFD0DF9FBE7F07757FC9DE9DE693
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 11:41:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215299
                          IP: 188.190.114.0/23
                          IP: 2a14:3ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:ea:bf:d0:df:9f:be:7f:07:75:7f:c9:de:9d:e6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 11:41:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:23:7e:68:89:bd:c7:ab:d8:69:83:1a:73:
                    0b:d1:4c:60:56:2f:23:d8:18:e4:b9:f6:87:f3:b3:
                    78:5e:d3:5c:dd:d9:7a:83:c4:2f:27:b9:13:c6:9c:
                    54:84:da:10:9d:36:d1:03:ef:9b:52:23:40:fa:9a:
                    08:14:5a:b0:c3:14:9c:eb:66:c4:18:68:a9:bb:d8:
                    da:59:14:87:0a:19:78:6c:25:39:7a:46:36:60:73:
                    05:d7:c6:0b:ea:d3:bc:2c:86:4a:01:ce:e3:df:87:
                    e0:90:75:8c:1a:2b:cc:c8:ec:0d:26:12:36:8b:1d:
                    99:f5:50:68:bc:32:73:6e:01:91:2e:18:83:23:9f:
                    f7:85:17:be:36:63:71:2b:3d:d8:35:6e:03:1d:d6:
                    0b:81:e2:2d:5e:a3:c7:85:ff:01:a5:b4:09:b0:fb:
                    c5:30:ba:6d:7c:60:62:30:1c:ce:fe:a4:4d:30:9c:
                    ef:5a:37:36:e9:d4:29:d2:4b:cf:66:fc:d2:fa:01:
                    5d:61:fb:45:ca:dc:ea:99:30:50:8d:bb:55:e1:f1:
                    60:09:53:6a:e0:e2:1e:b3:e4:51:77:27:14:59:c1:
                    7a:0c:9b:90:cd:65:4a:7d:51:be:dd:79:f8:23:08:
                    98:ff:a8:02:1d:ba:48:9a:60:ce:81:d3:f7:63:f3:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.190.114.0/23
                IPv6:
                  2a14:3ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215299

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:ae:0a:12:27:c2:7f:5e:fe:b0:bd:ad:e0:90:ca:87:d7:
         20:8c:0c:bb:43:b7:0c:79:ee:54:ee:de:c0:81:47:08:8f:87:
         38:1e:c1:ed:79:37:c0:c9:60:73:66:f9:9c:4f:4b:5f:1b:bc:
         05:9c:16:19:84:2a:80:b5:98:26:fb:bd:da:38:01:39:0d:55:
         48:88:59:27:2b:b8:c1:2e:48:9a:74:2a:c1:32:69:4a:97:9b:
         87:ce:b5:d3:16:78:56:bb:4c:19:57:d3:2d:c8:7b:e2:f9:32:
         25:3d:50:89:53:33:b0:e1:c2:e0:5a:4b:00:ea:03:26:9e:41:
         da:24:b8:35:c5:91:ba:28:7d:78:9c:4b:fb:a2:5f:42:ec:1c:
         2b:13:23:38:b4:d6:47:16:ae:c0:dd:85:37:aa:84:b2:b7:02:
         86:99:de:20:84:31:7c:61:dd:65:e2:97:a6:82:3e:6c:23:d7:
         3c:57:ce:06:34:7e:e8:da:4e:96:82:ba:e8:ab:d8:48:5b:e7:
         27:69:10:53:49:8d:9a:12:08:25:e4:4f:14:87:d5:3c:e2:29:
         ed:d8:c9:17:1b:9f:6c:57:12:3e:12:8d:69:94:e7:95:52:60:
         5d:20:ce:95:6b:f3:e2:a1:9e:fe:02:fa:26:40:f4:68:ba:ca:
         b6:23:cb:27
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZTV6r/Q35++fwd1f8neneaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA1MTE0MTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk1ZmRjYTM2N2JjZTE5ZTJmMjUzYjc4ZjM2MDhmZjM0MTQyOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g0jfmiJvcer2GmDGnML0UxgVi8j
2BjkufaH87N4XtNc3dl6g8QvJ7kTxpxUhNoQnTbRA++bUiNA+poIFFqwwxSc62bE
GGipu9jaWRSHChl4bCU5ekY2YHMF18YL6tO8LIZKAc7j34fgkHWMGivMyOwNJhI2
ix2Z9VBovDJzbgGRLhiDI5/3hRe+NmNxKz3YNW4DHdYLgeItXqPHhf8BpbQJsPvF
MLptfGBiMBzO/qRNMJzvWjc26dQp0kvPZvzS+gFdYftFytzqmTBQjbtV4fFgCVNq
4OIes+RRdycUWcF6DJuQzWVKfVG+3Xn4IwiY/6gCHbpImmDOgdP3Y/Mx7QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGyV/co2e84Z4vJTt482CP80FCjJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2YwMWEw
Mi01YTllLTQ0NDEtOWIzZC1kNWMxODg2MmQwMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZjAxYTAy
LTVhOWUtNDQ0MS05YjNkLWQ1YzE4ODYyZDAyNi8xL2JKWDl5alo3emhuaThsTzNq
ellJX3pRVUtNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQBvL5yMA0EAgACMAcDBQMqFDrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNJAzANBgkqhkiG9w0BAQsFAAOCAQEAR+iuChInwn9e
/rC9reCQyofXIIwMu0O3DHnuVO7ewIFHCI+HOB7B7Xk3wMlgc2b5nE9LXxu8BZwW
GYQqgLWYJvu92jgBOQ1VSIhZJyu4wS5ImnQqwTJpSpebh8610xZ4VrtMGVfTLch7
4vkyJT1QiVMzsOHC4FpLAOoDJp5B2iS4NcWRuih9eJxL+6JfQuwcKxMjOLTWRxau
wN2FN6qEsrcChpneIIQxfGHdZeKXpoI+bCPXPFfOBjR+6NpOloK66KvYSFvnJ2kQ
U0mNmhIIJeRPFIfVPOIp7djJFxufbFcSPhKNaZTnlVJgXSDOlWvz4qGe/gL6JkD0
aLrKtiPLJw==
-----END CERTIFICATE-----