Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer (raw, json)
Hash identifier:          JragM9dwpCYGR+yuEmGh8V89zA1Omxo/Xm1u0AuOohc=
Subject key identifier:   8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B281E0DC8FBD909785EF95644C57B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21212
                          IP: 185.110.96.0/22
                          IP: 2a06:53c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:28:1e:0d:c8:fb:d9:09:78:5e:f9:56:44:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:8e:e8:cc:c0:41:88:08:53:7f:c6:3a:3a:
                    83:d2:dc:dc:f5:5b:21:f8:f2:b1:81:30:5f:2b:d2:
                    33:57:a6:0e:3d:26:a9:6e:22:fa:49:81:f3:67:9f:
                    5c:b8:45:ab:ae:0f:31:e9:6d:f8:ca:64:e4:e5:b2:
                    d0:93:1a:0e:ef:40:f2:c2:02:0e:21:59:90:92:38:
                    47:15:b7:d4:e2:c1:76:f4:a4:5c:ca:d7:fc:48:fe:
                    76:c3:8c:09:90:69:f4:99:ac:53:10:7c:d4:3d:a2:
                    e6:02:95:09:2d:37:07:0b:16:e2:28:8a:f5:16:7f:
                    e9:d4:28:d5:ac:32:0d:48:8c:01:73:4e:40:a9:41:
                    e9:67:d4:1d:06:aa:74:4d:fc:66:9a:60:3b:92:11:
                    ef:0e:c0:f0:37:6d:7e:5b:bd:94:5b:d9:1a:74:6a:
                    67:a0:ab:91:83:d0:e5:47:1a:79:d5:18:20:44:21:
                    9d:36:dc:e3:ae:f5:50:c8:f3:7d:a1:9b:dc:e2:f2:
                    85:cb:c6:3d:8b:4c:58:30:23:eb:63:10:4d:58:4a:
                    a4:c4:fd:17:0c:09:74:7d:13:ef:16:2b:15:b4:95:
                    87:2b:a3:b5:9d:5d:c4:27:b6:a5:27:94:ad:f1:2e:
                    f9:43:28:20:d9:ce:66:59:51:64:20:91:d8:db:ac:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.96.0/22
                IPv6:
                  2a06:53c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21212

    Signature Algorithm: sha256WithRSAEncryption
         11:93:30:3f:c8:f8:13:4c:01:a7:a1:77:5c:22:64:20:d7:84:
         1c:bd:03:3b:0a:c7:75:7c:e0:cf:2c:05:3d:89:c4:e0:bb:ef:
         64:20:89:42:0e:8e:9d:be:d4:e6:2a:fa:02:81:c9:a8:1d:b1:
         f1:92:97:96:9e:30:2a:04:f6:e9:4d:dc:16:ef:dc:30:88:cc:
         cd:27:96:6d:b5:a3:ca:a2:2a:f6:f9:1c:38:ac:10:f0:8a:53:
         96:72:ab:6b:50:15:d3:2f:1d:b3:33:d4:4b:12:fb:60:40:52:
         73:63:3b:bf:da:df:85:12:95:c8:15:34:a8:ff:1d:a9:72:c4:
         0c:fa:8b:43:0b:0d:4d:77:e9:5d:aa:ed:6c:0c:70:a0:8b:bc:
         cb:4e:ef:24:db:ac:c3:b3:db:de:07:43:1e:1f:2b:57:2b:b3:
         ec:11:78:a6:42:5b:d9:1b:2c:45:7d:e4:b7:58:df:fa:2e:96:
         13:7b:be:b1:c1:93:2a:c6:a3:9b:86:e1:51:cd:56:35:54:e8:
         f8:d5:aa:75:c9:1e:5e:b7:4e:36:ea:92:43:d6:52:a2:09:5a:
         37:47:2d:55:6e:51:99:43:c4:d6:b7:8d:e3:8e:e0:eb:0e:98:
         aa:fb:8b:23:f1:2b:54:1b:1e:90:36:ea:ab:b0:e1:f5:30:9e:
         51:9e:27:81
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQmaygeDcj72Ql4XvlWRMV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTNlYzA1MzcyNDJmNDRjZTdkNTkzM2U5YjMyMjA0YjNmODVlOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAiO6MzAQYgIU3/GOjqD0tzc9Vsh
+PKxgTBfK9IzV6YOPSapbiL6SYHzZ59cuEWrrg8x6W34ymTk5bLQkxoO70DywgIO
IVmQkjhHFbfU4sF29KRcytf8SP52w4wJkGn0maxTEHzUPaLmApUJLTcHCxbiKIr1
Fn/p1CjVrDINSIwBc05AqUHpZ9QdBqp0TfxmmmA7khHvDsDwN21+W72UW9kadGpn
oKuRg9DlRxp51RggRCGdNtzjrvVQyPN9oZvc4vKFy8Y9i0xYMCPrYxBNWEqkxP0X
DAl0fRPvFisVtJWHK6O1nV3EJ7alJ5St8S75Qygg2c5mWVFkIJHY26xkBQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFIo+wFNyQvRM59WTPpsyIEs/hemfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzllYjAw
Mi1kMjZhLTQ2ZDYtOWQ4Ny04NDA5MzA2MWU5ZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOWViMDAy
LWQyNmEtNDZkNi05ZDg3LTg0MDkzMDYxZTlmZi8xL2lqN0FVM0pDOUV6bjFaTS1t
eklnU3otRjZaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuW5gMA0EAgACMAcDBQMqBlPAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAlLcMA0GCSqGSIb3DQEBCwUAA4IBAQARkzA/yPgTTAGn
oXdcImQg14QcvQM7Csd1fODPLAU9icTgu+9kIIlCDo6dvtTmKvoCgcmoHbHxkpeW
njAqBPbpTdwW79wwiMzNJ5ZttaPKoir2+Rw4rBDwilOWcqtrUBXTLx2zM9RLEvtg
QFJzYzu/2t+FEpXIFTSo/x2pcsQM+otDCw1Nd+ldqu1sDHCgi7zLTu8k26zDs9ve
B0MeHytXK7PsEXimQlvZGyxFfeS3WN/6LpYTe76xwZMqxqObhuFRzVY1VOj41ap1
yR5et0426pJD1lKiCVo3Ry1VblGZQ8TWt43jjuDrDpiq+4sj8StUGx6QNuqrsOH1
MJ5RnieB
-----END CERTIFICATE-----