Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
File:                     kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer (raw, json)
Hash identifier:          DpS4VnuStzR7zL8Waj9cX6u/Hg8UM//sfhRY6MTGaBM=
Subject key identifier:   90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAB900AEC95ABA6F0BB963E345258F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60939
                          IP: 213.134.24.0/24
                          IP: 2a13:5880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:b9:00:ae:c9:5a:ba:6f:0b:b9:63:e3:45:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:12:01:81:ab:49:f3:64:5c:bd:74:ed:ef:
                    3e:31:f3:47:95:7e:66:e9:7e:05:8b:c7:d8:e9:b2:
                    49:db:27:3e:c9:46:94:b8:e4:fc:70:69:e7:c3:8b:
                    29:80:1a:1a:b1:05:8f:41:98:33:03:a3:fc:9d:5c:
                    43:9c:cd:3e:39:49:fd:17:c3:88:dc:7f:e8:79:db:
                    c1:0d:a7:18:7f:0c:13:fc:ae:0f:a2:61:5f:ee:e0:
                    dd:a6:6b:4f:d2:be:e9:e2:e2:15:db:6e:e9:14:12:
                    4f:28:d3:1b:11:a8:15:b7:26:5d:54:ff:e8:07:80:
                    99:14:22:c8:3a:78:69:77:09:72:8e:1b:cc:85:2d:
                    c8:a1:08:07:67:50:26:4e:0f:29:ee:1b:31:e2:97:
                    90:81:7d:c4:63:fb:f9:0a:2d:be:f1:7a:88:31:f9:
                    93:47:52:68:ba:a2:d7:90:5d:c9:30:8e:28:ab:53:
                    d6:6c:26:ba:52:c2:39:08:8c:f0:78:9d:95:56:de:
                    57:91:68:76:ce:de:0a:90:0a:a5:44:d9:50:58:01:
                    91:2d:93:7d:f8:a6:61:0e:58:4f:c5:95:8c:6b:16:
                    55:be:e2:d7:c3:74:ac:6b:ac:33:ec:e2:2f:99:61:
                    87:82:72:21:bb:24:f5:4c:8d:d8:a2:ff:b2:a3:f1:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.134.24.0/24
                IPv6:
                  2a13:5880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60939

    Signature Algorithm: sha256WithRSAEncryption
         96:82:44:1e:9a:9a:13:96:04:f8:a6:1c:26:e9:4d:cb:03:41:
         e0:c1:be:db:8f:4d:59:e8:9e:6b:f2:c1:08:1c:b9:4c:3b:cd:
         44:79:d2:24:90:3c:1c:1d:7e:20:c3:2f:ec:b7:08:4c:4e:7b:
         7a:b4:be:a6:ea:13:6e:4e:19:e5:db:53:93:bc:6a:a2:1e:ce:
         24:e7:e3:68:31:c3:5c:1f:c4:5a:7d:db:2d:bf:3c:81:b8:b8:
         db:9f:12:74:00:f3:cf:51:91:9c:11:7f:0b:3e:26:cf:82:df:
         af:e2:6d:94:e4:b3:7e:50:a2:c9:8b:f4:28:b3:fd:43:10:24:
         fb:31:51:82:3c:56:6d:3e:87:a3:7b:bb:c2:91:45:4c:33:5b:
         d7:bc:13:24:56:83:7f:c5:5a:25:16:87:9f:d1:48:7a:8b:87:
         5e:c4:02:cb:ef:2b:05:1b:a7:d8:b9:59:35:14:d7:f1:4c:66:
         ac:bc:79:ae:b0:1c:44:5b:65:b8:4a:6b:05:12:a9:58:c6:69:
         1c:d2:ad:d6:dd:30:10:45:ac:1f:2b:a6:e2:74:85:f5:81:08:
         65:6f:f8:f9:77:a2:02:77:d3:79:23:df:6c:49:c4:4b:18:b0:
         78:2f:53:00:f5:56:fb:df:b7:22:0c:66:1f:48:a1:72:c1:56:
         c1:d9:57:cb
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQf+rkArslaum8LuWPjRSWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDUxZWJmOGMyOGY4MTdiN2YxNDhiZmM5NWNjMmI1YjRjYjMwMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboSAYGrSfNkXL107e8+MfNHlX5m
6X4Fi8fY6bJJ2yc+yUaUuOT8cGnnw4spgBoasQWPQZgzA6P8nVxDnM0+OUn9F8OI
3H/oedvBDacYfwwT/K4PomFf7uDdpmtP0r7p4uIV227pFBJPKNMbEagVtyZdVP/o
B4CZFCLIOnhpdwlyjhvMhS3IoQgHZ1AmTg8p7hsx4peQgX3EY/v5Ci2+8XqIMfmT
R1JouqLXkF3JMI4oq1PWbCa6UsI5CIzweJ2VVt5XkWh2zt4KkAqlRNlQWAGRLZN9
+KZhDlhPxZWMaxZVvuLXw3Ssa6wz7OIvmWGHgnIhuyT1TI3Yov+yo/GTmwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJBR6/jCj4F7fxSL/JXMK1tMswCJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzc5YjU5
Ny02YjBjLTRkMDMtYmY0MC0zMTI0N2YzYTQ1MzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNzliNTk3
LTZiMGMtNGQwMy1iZjQwLTMxMjQ3ZjNhNDUzOS8xL2tGSHItTUtQZ1h0X0ZJdjhs
Y3dyVzB5ekFJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1YYYMA0EAgACMAcDBQMqE1iAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDuCzANBgkqhkiG9w0BAQsFAAOCAQEAloJEHpqaE5YE
+KYcJulNywNB4MG+249NWeiea/LBCBy5TDvNRHnSJJA8HB1+IMMv7LcITE57erS+
puoTbk4Z5dtTk7xqoh7OJOfjaDHDXB/EWn3bLb88gbi4258SdADzz1GRnBF/Cz4m
z4Lfr+JtlOSzflCiyYv0KLP9QxAk+zFRgjxWbT6Ho3u7wpFFTDNb17wTJFaDf8Va
JRaHn9FIeouHXsQCy+8rBRun2LlZNRTX8UxmrLx5rrAcRFtluEprBRKpWMZpHNKt
1t0wEEWsHyum4nSF9YEIZW/4+XeiAnfTeSPfbEnESxiweC9TAPVW+9+3IgxmH0ih
csFWwdlXyw==
-----END CERTIFICATE-----