Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.cer (raw, json)
Hash identifier:          QyDTE8FlTbHMk7yBl3j48SdXb8mJwPXiSiCEUsvd7t8=
Subject key identifier:   B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274870CCF88819F7FB99F7F8860EFE29
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204108
                          IP: 185.114.136.0/22
                          IP: 2a0d:2180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:70:cc:f8:88:19:f7:fb:99:f7:f8:86:0e:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:85:83:78:85:2d:d0:8d:76:5b:5b:4c:85:
                    b7:9c:a9:f0:91:49:8d:89:ca:3f:41:23:fb:55:60:
                    f4:3b:69:b2:b0:ee:b7:06:96:e4:f6:19:6c:6a:56:
                    96:08:36:99:26:8e:af:61:aa:7b:be:d9:81:99:6e:
                    80:c7:c3:ef:b0:7f:b7:84:e7:78:34:9a:21:44:7f:
                    a5:bc:e5:2f:5a:df:14:8c:e9:78:f2:1a:7d:dd:fc:
                    b6:5c:f0:21:65:a4:70:75:9f:fd:49:cb:b8:b2:bc:
                    50:d1:7f:13:b7:c6:d3:37:12:cd:ce:8f:95:9b:17:
                    4d:8b:a7:14:53:bc:3c:81:56:b0:1c:96:45:45:06:
                    c4:19:5a:31:f5:70:1f:e6:89:ef:0b:1f:44:6b:75:
                    36:7b:9a:33:73:b0:ae:cb:19:9e:79:e0:2a:16:46:
                    e7:6a:7a:81:26:0b:d8:8e:82:f3:fc:cd:72:b9:1e:
                    21:9f:17:f2:f1:46:8a:b0:a0:2d:2d:95:33:57:2c:
                    ca:b0:72:d7:6f:91:e8:a5:02:41:6b:d9:77:5a:4e:
                    64:9d:09:e1:dc:6a:cf:fb:37:3d:17:3b:df:bd:8f:
                    74:ca:b5:f3:5c:7f:58:73:8f:93:e7:33:28:fc:cd:
                    0d:f9:ea:2f:c1:a9:07:2a:40:0f:85:3d:d7:ef:88:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.136.0/22
                IPv6:
                  2a0d:2180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204108

    Signature Algorithm: sha256WithRSAEncryption
         57:93:f1:16:c2:57:19:f5:d1:56:87:a3:be:20:b5:b2:93:f9:
         a0:38:1f:2b:61:7a:65:55:b4:49:3d:e0:f1:4e:38:15:78:71:
         c4:29:e9:84:65:cd:80:c9:2f:81:7d:bb:0f:4f:9e:97:6c:67:
         91:8e:7a:fb:07:41:3e:86:f8:20:15:70:3f:58:33:d9:8d:59:
         f0:39:f1:3c:2f:87:5c:b2:7f:bf:38:4f:fd:8d:77:da:d8:16:
         91:f4:98:ce:ac:42:c4:60:9d:28:d0:f4:9c:fd:ec:f2:ff:91:
         78:d5:15:9c:c7:2e:2f:ae:2a:75:e6:cd:2a:20:6e:32:79:9d:
         91:90:07:5f:1b:0d:a6:4c:4a:40:b8:95:74:36:d5:01:7f:34:
         67:51:c1:49:5d:ee:cc:1d:46:64:68:91:a1:8f:1c:07:c0:46:
         7a:d9:fe:49:93:6b:74:7d:4d:32:de:ef:3e:20:90:e3:9e:cd:
         87:39:ad:33:df:06:38:49:ad:e7:4a:dc:02:7b:d3:09:b4:8d:
         c3:98:75:e8:a9:99:17:3f:5f:04:f6:8d:b9:13:d6:90:92:ff:
         51:e6:81:3f:9e:36:25:fc:bc:50:57:ac:b1:a3:14:8c:c3:4d:
         46:3e:df:7a:c0:26:a6:ec:27:e9:cb:b3:b9:0b:f7:5a:70:fe:
         b2:9c:30:60
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQnSHDM+IgZ9/uZ9/iGDv4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzRmNjNmZDBkYzE5N2U1MmFkMjcyMjc2YzQwZDNlZTRiYjFkNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudmFg3iFLdCNdltbTIW3nKnwkUmN
ico/QSP7VWD0O2mysO63Bpbk9hlsalaWCDaZJo6vYap7vtmBmW6Ax8PvsH+3hOd4
NJohRH+lvOUvWt8UjOl48hp93fy2XPAhZaRwdZ/9Scu4srxQ0X8Tt8bTNxLNzo+V
mxdNi6cUU7w8gVawHJZFRQbEGVox9XAf5onvCx9Ea3U2e5ozc7CuyxmeeeAqFkbn
anqBJgvYjoLz/M1yuR4hnxfy8UaKsKAtLZUzVyzKsHLXb5HopQJBa9l3Wk5knQnh
3GrP+zc9FzvfvY90yrXzXH9Yc4+T5zMo/M0N+eovwakHKkAPhT3X74jAXwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLdPY/0NwZflKtJyJ2xA0+5LsdeZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzk4MTE3
Ni00ZDEwLTQ4NTktYmEwZi0xZDIyYjAyYjliMWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvOTgxMTc2
LTRkMTAtNDg1OS1iYTBmLTFkMjJiMDJiOWIxYi8xL3QwOWpfUTNCbC1VcTBuSW5i
RURUN2t1eDE1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXKIMA0EAgACMAcDBQAqDSGAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMdTDANBgkqhkiG9w0BAQsFAAOCAQEAV5PxFsJXGfXR
VoejviC1spP5oDgfK2F6ZVW0ST3g8U44FXhxxCnphGXNgMkvgX27D0+el2xnkY56
+wdBPob4IBVwP1gz2Y1Z8DnxPC+HXLJ/vzhP/Y132tgWkfSYzqxCxGCdKND0nP3s
8v+ReNUVnMcuL64qdebNKiBuMnmdkZAHXxsNpkxKQLiVdDbVAX80Z1HBSV3uzB1G
ZGiRoY8cB8BGetn+SZNrdH1NMt7vPiCQ457NhzmtM98GOEmt50rcAnvTCbSNw5h1
6KmZFz9fBPaNuRPWkJL/UeaBP542Jfy8UFessaMUjMNNRj7fesAmpuwn6cuzuQv3
WnD+spwwYA==
-----END CERTIFICATE-----