Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
File:                     iQCNpBkicovFvtu9cIhwHFKbme0.cer (raw, json)
Hash identifier:          FP041vaNEgAm1f6OOnbugMeyh0onCY9HqNSnHsxCxE8=
Subject key identifier:   89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019523F48640C998391FCD6AE03CFC1B37D1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 15:23:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213418
                          IP: 2a14:b700::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:23:f4:86:40:c9:98:39:1f:cd:6a:e0:3c:fc:1b:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 20 15:23:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89008da41922728bc5bedbbd7088701c529b99ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:d0:f1:a1:bf:54:ff:18:26:64:0c:bf:0b:
                    a0:fb:ba:49:40:be:9e:d8:71:34:2a:be:60:98:55:
                    c9:2e:35:19:21:84:ec:98:f6:3d:55:a8:41:21:61:
                    4a:5c:98:73:72:69:ee:05:25:d8:f6:fc:6e:19:c7:
                    34:a4:aa:53:75:eb:da:02:00:1e:ad:1f:bd:be:90:
                    25:95:ae:1b:12:5c:04:d5:c7:43:fc:a2:b2:ea:3c:
                    c0:9f:82:f5:cd:45:19:04:02:f3:a6:e1:a6:c9:09:
                    a3:6e:40:48:d4:b0:39:95:8c:b8:fd:bd:47:06:64:
                    3c:d2:52:3f:76:47:3f:82:49:4d:7b:b3:8c:93:04:
                    f8:12:08:69:28:f2:32:15:f6:b9:e2:8c:91:df:de:
                    ed:9f:f3:8e:b2:c9:a4:0b:a9:03:5b:d9:c1:56:4f:
                    ae:7a:96:b4:44:e5:d0:66:70:52:d2:56:51:cd:85:
                    05:f1:1b:c1:4b:60:f2:63:0d:43:a2:8e:83:ff:be:
                    bc:8a:0c:c5:e5:b9:00:a5:10:56:d2:7f:ef:19:9e:
                    b3:a2:e7:93:56:d1:f8:ec:45:45:d5:a7:ee:b7:15:
                    b0:23:a5:58:7a:c3:35:13:b2:a0:31:64:f3:58:35:
                    de:35:c0:49:85:a4:96:ed:14:01:25:ed:64:23:3c:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:b700::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213418

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:1b:76:09:bc:b9:98:35:c6:7c:76:25:e6:e6:a7:76:1e:
         e4:fb:8b:8a:6f:61:22:52:27:4b:d4:96:4f:83:3d:52:f7:a2:
         13:a6:00:35:d9:50:a8:69:f0:8e:e7:52:91:a8:20:96:63:ee:
         3e:3b:bc:a1:34:e6:0b:8c:b0:7e:88:bc:a7:82:a6:b2:43:f1:
         29:46:cd:27:e2:11:fc:94:fb:6e:43:ea:f7:48:ff:29:d0:33:
         67:3a:7e:18:c6:31:47:b9:0f:7a:e6:70:69:b0:b9:5d:3d:6b:
         52:85:4d:8b:c4:62:d4:45:d4:42:74:c2:01:28:d2:98:db:04:
         6e:a5:cf:3a:64:c0:25:73:32:49:7d:aa:ee:bb:bb:df:34:7a:
         a9:33:37:a1:97:65:da:15:1d:19:fe:47:61:6d:6b:df:b9:f4:
         b8:20:aa:bc:b3:64:25:0b:6e:76:0d:97:2c:92:d3:b1:cb:e3:
         3e:ab:b1:30:51:7f:12:03:ba:af:a5:6e:c8:57:44:f9:02:76:
         0a:3b:8f:00:fa:f6:dc:6d:7e:74:5c:f0:a9:ca:ae:47:61:bb:
         a4:41:b4:f9:e7:28:39:58:b3:b1:f2:b3:06:28:63:5d:a3:3a:
         d7:46:79:13:11:f9:45:4d:91:4a:0a:2e:84:ff:cd:7b:11:9e:
         02:02:e9:41
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZUj9IZAyZg5H81q4Dz8GzfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjIwMTUyMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTAwOGRhNDE5MjI3MjhiYzViZWRiYmQ3MDg4NzAxYzUyOWI5OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx7Q8aG/VP8YJmQMvwug+7pJQL6e
2HE0Kr5gmFXJLjUZIYTsmPY9VahBIWFKXJhzcmnuBSXY9vxuGcc0pKpTdevaAgAe
rR+9vpAlla4bElwE1cdD/KKy6jzAn4L1zUUZBALzpuGmyQmjbkBI1LA5lYy4/b1H
BmQ80lI/dkc/gklNe7OMkwT4EghpKPIyFfa54oyR397tn/OOssmkC6kDW9nBVk+u
epa0ROXQZnBS0lZRzYUF8RvBS2DyYw1Doo6D/768igzF5bkApRBW0n/vGZ6zoueT
VtH47EVF1afutxWwI6VYesM1E7KgMWTzWDXeNcBJhaSW7RQBJe1kIzyegQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFIkAjaQZInKLxb7bvXCIcBxSm5ntMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2U1YjE0
Yi05ZDViLTQzNDYtOGU4NS02MzcyOWZlNTg4YTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZTViMTRi
LTlkNWItNDM0Ni04ZTg1LTYzNzI5ZmU1ODhhMi8xL2lRQ05wQmtpY292RnZ0dTlj
SWh3SEZLYm1lMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhS3ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDQaowDQYJKoZIhvcNAQELBQADggEBAKLlG3YJvLmYNcZ8diXm5qd2HuT7i4pv
YSJSJ0vUlk+DPVL3ohOmADXZUKhp8I7nUpGoIJZj7j47vKE05guMsH6IvKeCprJD
8SlGzSfiEfyU+25D6vdI/ynQM2c6fhjGMUe5D3rmcGmwuV09a1KFTYvEYtRF1EJ0
wgEo0pjbBG6lzzpkwCVzMkl9qu67u980eqkzN6GXZdoVHRn+R2Fta9+59Lggqryz
ZCULbnYNlyyS07HL4z6rsTBRfxIDuq+lbshXRPkCdgo7jwD69txtfnRc8KnKrkdh
u6RBtPnnKDlYs7HyswYoY12jOtdGeRMR+UVNkUoKLoT/zXsRngIC6UE=
-----END CERTIFICATE-----