Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
File:                     rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer (raw, json)
Hash identifier:          bXmQbdF2Iipa+OROiTltx18gsESGrLpxwnm8hqwOFyM=
Subject key identifier:   AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9C1A7B0227BF1DD26866A810C15D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48102
                          IP: 91.210.4.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:c1:a7:b0:22:7b:f1:dd:26:86:6a:81:0c:15:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:49:0a:ca:47:9b:e0:4a:9e:85:a7:13:c1:
                    80:1f:e1:97:64:26:88:c5:b4:f2:9d:0a:d1:99:a8:
                    ec:b4:f9:ba:36:d7:04:63:fb:d4:d3:b1:62:f7:f0:
                    e9:b9:73:29:58:53:f3:1a:63:ae:c8:c7:07:b0:4f:
                    de:d7:db:8d:22:91:dc:6c:8c:c8:74:0b:c2:0d:e3:
                    7a:d0:88:b2:52:29:a0:d9:50:29:df:44:f4:00:9f:
                    a6:9c:f9:10:e4:ef:0c:f5:9d:30:e6:d5:5d:46:b4:
                    48:97:63:62:97:ea:5b:69:af:6a:0c:71:ce:5c:bb:
                    f8:68:bc:97:5a:c6:9b:f2:ba:37:48:b6:0b:be:fa:
                    bf:ca:ef:c0:9d:49:a5:88:c3:f5:7f:84:dd:89:17:
                    ad:e2:47:b5:9b:5c:84:f6:a0:f8:29:30:c0:29:7c:
                    e0:5c:29:9f:27:f9:93:15:8a:d7:15:14:d8:0a:f4:
                    6d:44:54:b7:9e:f7:3e:9a:06:e9:6a:d3:11:7c:13:
                    5e:68:78:e5:88:35:2d:dd:69:a1:ed:f4:f6:cb:dd:
                    5a:e6:c9:a8:db:e8:23:67:de:09:ec:cc:42:52:c9:
                    ce:53:61:a4:75:19:bc:2e:e2:15:c5:7a:3b:b3:6e:
                    e8:56:b3:47:7d:16:2d:2f:82:46:ce:c7:af:cd:c2:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.4.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48102

    Signature Algorithm: sha256WithRSAEncryption
         03:15:57:c5:7c:67:c6:8e:eb:a2:08:49:dd:cb:72:89:12:10:
         04:ba:a5:20:67:c7:35:a7:a4:c8:00:80:ce:f2:1b:aa:43:b4:
         c1:c2:88:4d:31:aa:31:9c:0f:e8:1d:c1:ef:91:93:7b:c7:61:
         be:1e:e1:94:0f:47:ba:a8:43:e0:f5:7d:7f:20:e8:b7:c7:48:
         d7:38:49:d6:23:b0:2e:d3:da:3d:cb:d2:8b:14:a6:b7:66:34:
         a4:74:c2:21:91:4c:67:ad:0b:87:ab:92:7b:b5:01:c1:3f:2d:
         91:e7:b5:57:1e:61:11:98:c4:63:3d:0f:e4:86:7c:26:32:f8:
         93:7b:b4:11:42:14:5e:8f:37:46:00:a3:ac:89:19:20:a6:de:
         69:71:94:7a:7a:ec:3c:2e:ec:3b:00:3b:b0:5e:be:10:c4:cb:
         00:44:28:5a:9e:a8:b6:3e:7b:a1:b0:df:95:92:3e:20:e7:76:
         5b:27:f4:0e:8a:20:58:26:5b:66:8d:8e:42:3a:d5:b4:b0:8e:
         c2:95:2a:08:92:b2:e1:40:b4:2c:32:1a:22:75:d7:23:4c:e0:
         26:e0:57:d0:64:94:8b:7c:4f:32:70:15:33:07:6a:61:bc:26:
         81:96:e3:c8:a7:19:da:06:41:a8:2e:a7:48:38:80:d4:ac:e2:
         8b:7b:63:28
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2cGnsCJ78d0mhmqBDBXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWYyMGVmYzBhZTQwMTNlNmY0ODY3YzE1ZjIzNzdiMjM1MDk1Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJlJCspHm+BKnoWnE8GAH+GXZCaI
xbTynQrRmajstPm6NtcEY/vU07Fi9/DpuXMpWFPzGmOuyMcHsE/e19uNIpHcbIzI
dAvCDeN60IiyUimg2VAp30T0AJ+mnPkQ5O8M9Z0w5tVdRrRIl2Nil+pbaa9qDHHO
XLv4aLyXWsab8ro3SLYLvvq/yu/AnUmliMP1f4TdiRet4ke1m1yE9qD4KTDAKXzg
XCmfJ/mTFYrXFRTYCvRtRFS3nvc+mgbpatMRfBNeaHjliDUt3Wmh7fT2y91a5smo
2+gjZ94J7MxCUsnOU2GkdRm8LuIVxXo7s27oVrNHfRYtL4JGzsevzcJKTwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFK7yDvwK5AE+b0hnwV8jd7I1CVuGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzEzNmZh
Zi1jZjIwLTQyNjUtOThhMy1kOWI4MmQ5ZWNjNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMTM2ZmFm
LWNmMjAtNDI2NS05OGEzLWQ5YjgyZDllY2M0NS8xL3J2SU9fQXJrQVQ1dlNHZkJY
eU4zc2pVSlc0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW9IEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC75jANBgkqhkiG9w0BAQsFAAOCAQEAAxVXxXxnxo7roghJ3ctyiRIQBLqlIGfH
NaekyACAzvIbqkO0wcKITTGqMZwP6B3B75GTe8dhvh7hlA9HuqhD4PV9fyDot8dI
1zhJ1iOwLtPaPcvSixSmt2Y0pHTCIZFMZ60Lh6uSe7UBwT8tkee1Vx5hEZjEYz0P
5IZ8JjL4k3u0EUIUXo83RgCjrIkZIKbeaXGUenrsPC7sOwA7sF6+EMTLAEQoWp6o
tj57obDflZI+IOd2Wyf0DoogWCZbZo2OQjrVtLCOwpUqCJKy4UC0LDIaInXXI0zg
JuBX0GSUi3xPMnAVMwdqYbwmgZbjyKcZ2gZBqC6nSDiA1Kzii3tjKA==
-----END CERTIFICATE-----