Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.cer (raw, json)
Hash identifier:          Uw3nSQVkOUR0EQbRrGbpUcJOQrUq0mzXEL7kM6pyfB4=
Subject key identifier:   B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252145533A80709831CEF842104311F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 40964
                          IP: 89.107.128.0/21
                          IP: 185.173.156.0/22
                          IP: 2a01:afc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:45:53:3a:80:70:98:31:ce:f8:42:10:43:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:bf:df:96:85:71:c0:c9:9f:7f:bd:ca:63:
                    b4:f9:38:e1:4d:29:02:d3:07:7f:1e:8a:32:31:12:
                    19:fa:4f:88:dc:67:2b:98:be:f7:b9:75:64:57:ae:
                    b3:7f:99:c1:41:fb:f8:ca:40:b8:10:20:f7:b4:b2:
                    4d:38:e2:9e:f5:f8:2e:80:8c:08:b5:26:db:85:25:
                    82:ce:ab:da:7a:89:3d:35:14:b1:af:2d:8f:0a:2d:
                    18:5b:63:a9:f8:a9:ec:38:28:ad:11:1f:4d:51:f2:
                    6b:f4:21:ad:86:9f:4e:34:49:ef:d2:2e:37:66:e4:
                    05:60:38:8d:61:9c:c5:59:d6:99:04:3f:4f:da:9d:
                    58:c8:5c:a0:37:e9:c6:f9:f5:57:7f:5e:0b:65:dd:
                    9b:31:92:0b:8e:3b:ee:44:1c:0d:5e:ca:2e:19:e2:
                    0b:a2:64:e2:f0:dd:28:bd:55:58:32:93:d3:a3:66:
                    00:a7:8c:1a:0c:83:4d:d4:72:f8:d5:15:e5:d4:0c:
                    fc:d8:ae:40:83:1b:a0:6c:bd:17:87:35:14:ab:9b:
                    1d:14:03:3c:00:2f:d4:f2:d3:5d:1e:51:3c:5a:42:
                    08:b9:19:63:cc:91:1c:55:5b:c1:cc:99:a0:cb:a2:
                    04:ae:d1:c6:a7:95:02:07:dd:dd:9d:c6:ea:3f:8b:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.128.0/21
                  185.173.156.0/22
                IPv6:
                  2a01:afc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40964

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:3b:72:76:8d:51:e9:28:5f:9b:fc:ca:bd:82:ba:0d:1a:
         df:a6:d4:ff:2f:77:cd:a5:d7:ce:a0:8b:23:82:9d:5f:c0:6b:
         eb:13:72:ac:e8:f6:b0:9c:ae:45:32:8a:39:c7:9d:9d:b0:d8:
         a7:8d:f5:6d:a7:ad:b7:d4:e1:3c:a6:f7:10:3a:c7:c4:10:fc:
         72:c0:1e:eb:84:47:c2:f6:52:49:12:4c:a6:37:68:00:42:d1:
         e4:f2:52:f6:9d:6f:09:8d:4b:82:65:2d:05:3e:e7:9c:1f:f3:
         96:4a:ca:d8:d4:32:3e:0e:a4:81:a1:fe:29:bb:13:32:d0:57:
         a7:7d:4d:a0:aa:93:a4:bb:b1:89:84:dd:81:31:66:92:2d:2b:
         6b:df:b6:ea:9b:a2:bf:9c:8e:dc:c2:99:04:9a:12:cc:f8:99:
         aa:23:bc:18:07:cb:f1:cb:7c:0a:bb:a9:29:ad:e2:2e:a4:63:
         e9:b7:9d:5e:9e:70:97:5f:76:50:5e:ef:41:43:be:e0:a7:69:
         bc:59:8e:29:e7:71:df:df:31:ea:7b:54:0b:81:47:70:a2:f8:
         ba:57:db:e8:30:cc:41:1d:02:a9:ad:c4:64:75:18:2e:1c:15:
         8c:33:ce:eb:cd:d0:bd:15:52:27:93:df:d8:ba:07:25:69:ea:
         73:8d:32:87
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQlIUVTOoBwmDHO+EIQQxH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2RkMzVjY2ZmNmMyYjg2YTFmYWQ4ZjEwM2JjMjAwNzBkMDllNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxG/35aFccDJn3+9ymO0+TjhTSkC
0wd/HooyMRIZ+k+I3GcrmL73uXVkV66zf5nBQfv4ykC4ECD3tLJNOOKe9fgugIwI
tSbbhSWCzqvaeok9NRSxry2PCi0YW2Op+KnsOCitER9NUfJr9CGthp9ONEnv0i43
ZuQFYDiNYZzFWdaZBD9P2p1YyFygN+nG+fVXf14LZd2bMZILjjvuRBwNXsouGeIL
omTi8N0ovVVYMpPTo2YAp4waDINN1HL41RXl1Az82K5AgxugbL0XhzUUq5sdFAM8
AC/U8tNdHlE8WkIIuRljzJEcVVvBzJmgy6IErtHGp5UCB93dncbqP4t2zwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFLPdNcz/bCuGofrY8QO8IAcNCeUNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzQ0ZDRh
My03YTg0LTQ0OTktOGI3MS0yYjEwNTA1MWJhNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNDRkNGEz
LTdhODQtNDQ5OS04YjcxLTJiMTA1MDUxYmE1OS8xL3M5MDF6UDlzSzRhaC10anhB
N3dnQncwSjVRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDWWuAAwQCua2cMA0EAgACMAcDBQAqAa/AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCgBDANBgkqhkiG9w0BAQsFAAOCAQEANqo7
cnaNUekoX5v8yr2Cug0a36bU/y93zaXXzqCLI4KdX8Br6xNyrOj2sJyuRTKKOced
nbDYp431baett9ThPKb3EDrHxBD8csAe64RHwvZSSRJMpjdoAELR5PJS9p1vCY1L
gmUtBT7nnB/zlkrK2NQyPg6kgaH+KbsTMtBXp31NoKqTpLuxiYTdgTFmki0ra9+2
6puiv5yO3MKZBJoSzPiZqiO8GAfL8ct8CrupKa3iLqRj6bedXp5wl192UF7vQUO+
4KdpvFmOKedx398x6ntUC4FHcKL4ulfb6DDMQR0Cqa3EZHUYLhwVjDPO683QvRVS
J5Pf2LoHJWnqc40yhw==
-----END CERTIFICATE-----