Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer (raw, json)
Hash identifier:          kRVm1KleEu8eHvAXz5SbQb/dgOeU1vA3IMuKJFyATbQ=
Subject key identifier:   91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B2AAFC27D3BF8516573728673E7AF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59740
                          IP: 185.58.252.0/22
                          IP: 2a02:6660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:2a:af:c2:7d:3b:f8:51:65:73:72:86:73:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9b:cd:5e:5c:69:f6:b4:2e:93:87:15:ce:bf:
                    a5:3b:d1:8c:d2:21:0b:e1:c4:6c:c3:aa:d0:82:6d:
                    b3:1c:cb:0c:e3:6e:72:98:80:d8:ff:88:ab:05:ce:
                    7d:5c:5a:f5:81:80:61:11:40:fb:b1:e3:ef:02:64:
                    c6:88:b4:5c:84:b1:93:c5:92:9b:86:59:a2:e8:47:
                    3d:36:b4:ab:06:62:f7:53:5b:78:e3:56:46:74:e5:
                    f5:24:6d:8c:1c:f9:74:50:01:32:80:62:44:11:f9:
                    64:ce:8e:81:ba:d0:37:11:19:94:51:0e:2a:85:44:
                    e6:e1:f8:b8:66:10:cc:c7:6c:df:67:e9:3b:bc:cf:
                    26:31:15:04:62:3e:01:b7:f0:6e:ac:3a:c6:cc:31:
                    48:fb:e6:bc:df:05:81:c7:b6:a2:0f:a8:0e:f1:58:
                    87:e8:df:0b:57:04:1f:25:dc:56:85:8b:5d:d6:1f:
                    b6:08:32:15:1d:f7:ad:02:07:ea:66:0b:19:05:61:
                    f6:30:53:7f:5a:b7:0b:d4:07:75:39:f0:a3:7f:eb:
                    ca:d0:69:b1:4b:0a:e7:d8:dd:b6:6c:ed:98:a1:2d:
                    bb:f0:d5:0f:8b:d5:e6:42:7b:a6:9b:6a:66:fc:6b:
                    7d:8b:e3:17:cd:37:01:a3:cf:d3:66:bd:5d:33:12:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.58.252.0/22
                IPv6:
                  2a02:6660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59740

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:d8:fd:bd:82:94:6d:b3:26:40:6d:2c:49:e7:0c:c0:36:
         7e:87:fa:50:5c:e0:cb:0d:a1:97:c6:04:e6:7d:1a:6d:e5:a9:
         e9:89:79:a4:c7:62:ec:6d:84:9b:ee:82:6e:75:75:0e:08:0a:
         74:42:be:ab:b8:20:f9:23:95:8a:24:02:2c:5b:40:69:23:40:
         40:fb:4d:b0:07:73:dd:f5:0f:76:16:33:77:78:0f:a6:4f:f7:
         43:15:09:f5:ee:25:05:6b:52:96:b4:ae:d6:df:00:72:86:c5:
         d7:67:78:60:af:50:f6:97:c1:dd:64:95:4b:6c:ab:f0:03:76:
         16:a6:56:97:ec:50:c3:b0:77:af:42:08:da:d5:08:a6:67:69:
         78:5a:6d:91:f5:fa:57:97:d3:54:ef:ab:05:92:02:6d:0f:b9:
         45:82:12:82:46:37:83:65:3d:ec:83:de:6c:37:68:a6:b9:20:
         55:18:bb:7b:6a:53:08:17:a0:c2:9a:fb:b9:15:c6:8b:d5:8c:
         50:81:fd:6e:08:3f:f8:11:30:41:1c:68:f1:e8:57:0f:d7:b1:
         64:cd:aa:79:38:98:a0:33:c3:85:ca:9b:20:a5:47:e5:a9:a5:
         91:1f:51:cb:ce:7d:e9:3c:d9:8f:59:f6:82:8a:94:2f:ee:8d:
         70:c7:69:db
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQmayqvwn07+FFlc3KGc+evMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNkNGM2YzEyNjBmYzlhN2M4OTRiZjZhYmU3N2E2ZWVjZmVjMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZvNXlxp9rQuk4cVzr+lO9GM0iEL
4cRsw6rQgm2zHMsM425ymIDY/4irBc59XFr1gYBhEUD7sePvAmTGiLRchLGTxZKb
hlmi6Ec9NrSrBmL3U1t441ZGdOX1JG2MHPl0UAEygGJEEflkzo6ButA3ERmUUQ4q
hUTm4fi4ZhDMx2zfZ+k7vM8mMRUEYj4Bt/BurDrGzDFI++a83wWBx7aiD6gO8ViH
6N8LVwQfJdxWhYtd1h+2CDIVHfetAgfqZgsZBWH2MFN/WrcL1Ad1OfCjf+vK0Gmx
Swrn2N22bO2YoS278NUPi9XmQnumm2pm/Gt9i+MXzTcBo8/TZr1dMxLF5QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJHNTGwSYPyafIlL9qvnem7s/sBuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2U1YjMw
MS0wYzMzLTQ4YjQtODQ3Yi1lOThlZTIzODExNDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvZTViMzAx
LTBjMzMtNDhiNC04NDdiLWU5OGVlMjM4MTE0Ni8xL2tjMU1iQkpnX0pwOGlVdjJx
LWQ2YnV6LXdHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTr8MA0EAgACMAcDBQAqAmZgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpXDANBgkqhkiG9w0BAQsFAAOCAQEAbwvY/b2ClG2z
JkBtLEnnDMA2fof6UFzgyw2hl8YE5n0abeWp6Yl5pMdi7G2Em+6CbnV1DggKdEK+
q7gg+SOViiQCLFtAaSNAQPtNsAdz3fUPdhYzd3gPpk/3QxUJ9e4lBWtSlrSu1t8A
cobF12d4YK9Q9pfB3WSVS2yr8AN2FqZWl+xQw7B3r0II2tUIpmdpeFptkfX6V5fT
VO+rBZICbQ+5RYISgkY3g2U97IPebDdoprkgVRi7e2pTCBegwpr7uRXGi9WMUIH9
bgg/+BEwQRxo8ehXD9exZM2qeTiYoDPDhcqbIKVH5amlkR9Ry8596TzZj1n2goqU
L+6NcMdp2w==
-----END CERTIFICATE-----