Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
File:                     lfdgXoUMnb8X2vC6OONvzGPCy_o.cer (raw, json)
Hash identifier:          blKZTPQ7hXIwQSpb+zEJsARRUSPwmAmw/Ltb412nU4I=
Subject key identifier:   95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420685A07AE20362C2CBF73881DE97DB4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44637
                          IP: 93.93.24.0/21
                          IP: 2a03:9100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:5a:07:ae:20:36:2c:2c:bf:73:88:1d:e9:7d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:cd:20:17:98:35:d2:18:f2:12:04:b1:e8:
                    15:d8:12:f9:a6:af:16:ff:34:7a:d0:e8:7a:04:7b:
                    41:0c:9b:bb:9f:3b:5f:d7:37:e3:82:2a:0a:f3:a4:
                    f8:de:03:65:da:13:89:6b:f3:24:a1:d7:de:32:dc:
                    38:e2:b4:ce:27:ab:76:21:cc:5e:d1:29:74:55:bc:
                    35:cc:db:c8:7f:87:0f:dd:ed:36:fe:70:d6:a0:91:
                    05:d3:32:6a:76:4a:9b:57:4b:51:6e:63:87:89:f1:
                    18:9b:8f:bd:f3:a3:9c:7f:36:4e:a7:73:7e:6b:9c:
                    34:0b:9b:f4:08:c7:06:68:e4:68:44:af:8c:cd:99:
                    72:00:53:09:9b:5d:b7:53:16:4e:3f:91:06:fa:ae:
                    31:55:a3:b2:dc:6a:2c:99:03:73:46:f2:74:c0:f9:
                    43:02:ad:87:87:d6:9c:0d:fd:e4:ca:20:45:0c:b9:
                    be:f3:fc:9a:13:05:4f:00:d0:c1:af:64:1d:82:da:
                    8f:bb:3b:66:fa:1d:27:02:55:72:57:fb:34:ba:41:
                    de:ef:55:4a:8a:84:6f:93:28:98:49:b2:4d:66:1c:
                    d6:43:be:d7:bd:4d:49:07:2b:d6:60:65:8c:0d:46:
                    ba:26:02:8c:75:a2:89:93:d9:bf:02:86:e4:3f:4c:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.24.0/21
                IPv6:
                  2a03:9100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44637

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:11:0f:01:d4:00:4b:8e:45:66:f0:10:be:5a:b9:3a:fd:
         40:ce:09:5e:b3:61:ae:53:d1:b1:6f:d3:47:89:75:86:ba:8c:
         3c:12:de:96:dd:b2:87:cd:4a:36:5b:ea:7d:4f:17:c4:64:57:
         aa:ab:4e:2f:1e:ac:59:22:2e:8e:ad:82:7b:d8:61:69:35:e4:
         80:62:e9:97:52:a2:c4:d3:64:77:31:14:fa:83:ee:12:62:d2:
         75:e7:05:30:82:11:ef:e0:ba:5b:c0:35:c8:ba:52:f5:10:91:
         0a:4f:48:7e:46:61:73:c4:e2:bd:f3:54:30:ef:58:48:54:65:
         29:77:08:06:37:ec:19:fb:64:d2:47:6a:3b:83:1e:4e:24:e6:
         a2:7e:ff:f6:e5:0a:3b:84:09:fb:45:69:45:00:c7:9c:73:2b:
         5a:ae:07:6e:fb:d0:77:09:73:59:d8:9f:80:b6:9a:55:ae:ea:
         80:d1:5a:67:72:30:69:7d:3e:fa:a0:8e:71:bd:4a:6b:26:23:
         df:35:b7:3b:ea:d7:3c:89:31:83:7f:c4:2c:07:a6:36:32:f1:
         3a:7d:f5:e9:0f:15:0f:25:08:7e:b5:d8:7c:02:aa:f9:34:98:
         82:df:ca:2c:85:55:79:b9:78:a0:04:ca:1d:17:46:fe:9c:c8:
         fd:e2:a4:c2
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgaFoHriA2LCy/c4gd6X20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWY3NjA1ZTg1MGM5ZGJmMTdkYWYwYmEzOGUzNmZjYzYzYzJjYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTNIBeYNdIY8hIEsegV2BL5pq8W
/zR60Oh6BHtBDJu7nztf1zfjgioK86T43gNl2hOJa/MkodfeMtw44rTOJ6t2Icxe
0Sl0Vbw1zNvIf4cP3e02/nDWoJEF0zJqdkqbV0tRbmOHifEYm4+986OcfzZOp3N+
a5w0C5v0CMcGaORoRK+MzZlyAFMJm123UxZOP5EG+q4xVaOy3GosmQNzRvJ0wPlD
Aq2Hh9acDf3kyiBFDLm+8/yaEwVPANDBr2QdgtqPuztm+h0nAlVyV/s0ukHe71VK
ioRvkyiYSbJNZhzWQ77XvU1JByvWYGWMDUa6JgKMdaKJk9m/AobkP0wciQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJX3YF6FDJ2/F9rwujjjb8xjwsv6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzlmM2Jm
YS1lZjNiLTQzNjEtYjMxMS02NzA1ZGMyZTNhYWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOWYzYmZh
LWVmM2ItNDM2MS1iMzExLTY3MDVkYzJlM2FhYS8xL2xmZGdYb1VNbmI4WDJ2QzZP
T052ekdQQ3lfby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXV0YMA0EAgACMAcDBQAqA5EAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCuXTANBgkqhkiG9w0BAQsFAAOCAQEAaicRDwHUAEuO
RWbwEL5auTr9QM4JXrNhrlPRsW/TR4l1hrqMPBLelt2yh81KNlvqfU8XxGRXqqtO
Lx6sWSIujq2Ce9hhaTXkgGLpl1KixNNkdzEU+oPuEmLSdecFMIIR7+C6W8A1yLpS
9RCRCk9IfkZhc8TivfNUMO9YSFRlKXcIBjfsGftk0kdqO4MeTiTmon7/9uUKO4QJ
+0VpRQDHnHMrWq4HbvvQdwlzWdifgLaaVa7qgNFaZ3IwaX0++qCOcb1KayYj3zW3
O+rXPIkxg3/ELAemNjLxOn316Q8VDyUIfrXYfAKq+TSYgt/KLIVVebl4oATKHRdG
/pzI/eKkwg==
-----END CERTIFICATE-----