Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/skFYMFfyBWPJOCuJTx_OrKVfvaM.cer
File:                     skFYMFfyBWPJOCuJTx_OrKVfvaM.cer (raw, json)
Hash identifier:          iPh9B3HOrvrLzQQuvDSPhGKFL7JgQ5HXV+JcZABqGu0=
Subject key identifier:   B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FAF103E1E03589321CCD8C0FB14985
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 45049

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fa:f1:03:e1:e0:35:89:32:1c:cd:8c:0f:b1:49:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b241583057f20563c9382b894f1fceaca55fbda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:96:02:9f:81:99:1b:73:a5:b5:cf:a2:29:
                    76:6a:73:78:4c:08:32:b5:eb:d8:13:b9:37:43:b9:
                    13:ff:57:42:09:5f:dd:b4:b9:5f:56:3d:1c:e3:eb:
                    c3:f6:4e:7a:36:9a:1f:56:12:b9:9b:06:23:86:09:
                    68:8b:94:e0:8c:f0:63:cc:04:1d:7c:54:b6:f2:02:
                    b6:37:9a:12:3a:6d:bf:1d:ef:2f:1d:0b:37:fa:35:
                    3e:1f:da:bc:0a:70:af:2d:da:9a:6c:d3:fa:e7:8f:
                    7d:25:70:33:5d:f4:4c:04:62:23:76:3d:f0:77:9b:
                    eb:33:bc:c7:19:ed:37:5e:2e:45:48:65:68:01:dd:
                    b0:49:b4:d5:27:ca:3d:32:54:c0:db:c7:55:6c:25:
                    05:b7:a4:d6:2d:0e:ca:bd:4c:0a:54:cd:6b:44:11:
                    4c:b0:db:1f:33:73:38:3a:4c:f2:5f:de:91:f5:2a:
                    13:b4:f6:f4:7a:9d:89:cb:28:f2:92:6c:d2:c0:a1:
                    56:70:f1:71:21:36:73:82:70:4f:2b:39:ef:12:9d:
                    6d:f9:fc:23:5e:99:df:22:e6:76:30:50:01:2c:94:
                    4b:66:22:01:9b:44:a8:74:0e:bb:35:85:82:b7:ed:
                    f1:46:35:e6:7a:76:45:78:54:bb:05:63:3a:9a:39:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:58:30:57:F2:05:63:C9:38:2B:89:4F:1F:CE:AC:A5:5F:BD:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d528d3-2a93-460c-926d-40d15f36ea43/1/skFYMFfyBWPJOCuJTx_OrKVfvaM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45049

    Signature Algorithm: sha256WithRSAEncryption
         15:63:15:d4:e9:96:10:af:db:fa:72:b3:ed:63:07:95:65:51:
         b3:2f:5a:84:83:05:5c:fa:3f:33:27:bb:f9:42:3b:66:2b:e1:
         79:b0:0b:42:75:08:47:47:a9:ca:de:ce:97:bb:61:64:5b:68:
         9b:c5:f0:82:ce:15:c1:fb:af:26:50:52:03:62:4e:ab:8e:50:
         72:12:a0:dc:2f:6c:a2:e6:80:ad:ca:9b:3f:14:e3:77:e2:19:
         3a:63:d0:d3:c4:44:1e:21:58:03:f5:32:b6:48:9a:0a:17:e6:
         5d:c1:48:07:cd:99:f1:0a:c6:65:8f:50:46:94:c4:a6:f1:1a:
         66:5c:57:7a:43:28:d2:8a:13:66:d6:0f:80:95:70:3e:99:3d:
         66:3b:b2:97:6d:d6:78:50:50:ea:64:ae:0c:bb:01:d5:5e:e3:
         99:8e:c3:ed:d8:22:48:45:63:41:1f:ae:87:dd:11:8e:a4:24:
         13:9e:fb:84:76:e7:8c:b9:25:9a:c6:a9:a0:43:90:38:84:ac:
         62:e9:ed:f3:51:48:65:d9:07:59:1b:94:8f:95:b6:3c:a5:6b:
         74:71:d8:48:bb:c4:35:d3:54:95:f0:66:0f:3f:96:a6:26:e0:
         24:ee:c9:a8:37:18:c6:44:cb:78:b3:11:97:c3:24:2a:e2:4c:
         e0:da:34:fc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQi+vED4eA1iTIczYwPsUmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjQxNTgzMDU3ZjIwNTYzYzkzODJiODk0ZjFmY2VhY2E1NWZiZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxSWAp+BmRtzpbXPoil2anN4TAgy
tevYE7k3Q7kT/1dCCV/dtLlfVj0c4+vD9k56NpofVhK5mwYjhgloi5TgjPBjzAQd
fFS28gK2N5oSOm2/He8vHQs3+jU+H9q8CnCvLdqabNP65499JXAzXfRMBGIjdj3w
d5vrM7zHGe03Xi5FSGVoAd2wSbTVJ8o9MlTA28dVbCUFt6TWLQ7KvUwKVM1rRBFM
sNsfM3M4OkzyX96R9SoTtPb0ep2JyyjykmzSwKFWcPFxITZzgnBPKznvEp1t+fwj
XpnfIuZ2MFABLJRLZiIBm0SodA67NYWCt+3xRjXmenZFeFS7BWM6mjn/fwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLJBWDBX8gVjyTgriU8fzqylX72jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2Q1Mjhk
My0yYTkzLTQ2MGMtOTI2ZC00MGQxNWYzNmVhNDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvZDUyOGQz
LTJhOTMtNDYwYy05MjZkLTQwZDE1ZjM2ZWE0My8xL3NrRllNRmZ5QldQSk9DdUpU
eF9PcktWZnZhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCv+TANBgkqhkiG9w0BAQsFAAOCAQEAFWMV1OmWEK/b
+nKz7WMHlWVRsy9ahIMFXPo/Mye7+UI7ZivhebALQnUIR0epyt7Ol7thZFtom8Xw
gs4VwfuvJlBSA2JOq45QchKg3C9souaArcqbPxTjd+IZOmPQ08REHiFYA/Uytkia
ChfmXcFIB82Z8QrGZY9QRpTEpvEaZlxXekMo0ooTZtYPgJVwPpk9Zjuyl23WeFBQ
6mSuDLsB1V7jmY7D7dgiSEVjQR+uh90RjqQkE577hHbnjLklmsapoEOQOISsYunt
81FIZdkHWRuUj5W2PKVrdHHYSLvENdNUlfBmDz+WpibgJO7JqDcYxkTLeLMRl8Mk
KuJM4No0/A==
-----END CERTIFICATE-----