Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
File:                     t5im6ZG5VaKTURGf9312hksNOEo.cer (raw, json)
Hash identifier:          k0CjM5qFRygfs23DLqGnlXnwZNS3S3O+2dzAHdMH2qw=
Subject key identifier:   B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FA06D6E64EB351B7EC098BD3D137E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209603

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:a0:6d:6e:64:eb:35:1b:7e:c0:98:bd:3d:13:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b798a6e991b955a29351119ff77d76864b0d384a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:93:dc:22:c8:bc:f4:7a:9d:a4:89:a1:14:
                    77:b3:3c:de:57:fe:ae:af:0f:9b:04:0a:62:f0:0f:
                    63:ed:f6:eb:7a:74:b4:34:e4:79:d6:af:33:4e:d1:
                    ee:26:33:74:bd:ca:fc:43:1c:55:69:c4:f9:ba:28:
                    c5:a3:4d:5a:ec:ff:8e:52:19:33:1d:c8:0d:85:38:
                    95:4c:4b:0b:da:a7:69:8a:9e:34:80:3c:98:03:c7:
                    2a:92:92:fc:a8:4e:3c:03:81:e9:17:59:37:c4:4b:
                    f3:be:0f:2c:95:f4:c5:66:a5:d5:3e:d0:d7:ae:02:
                    4e:e7:60:99:62:fd:5f:81:ef:6f:98:5a:a3:a1:c5:
                    ad:e9:57:96:f1:06:db:54:96:a7:28:66:65:d1:e3:
                    ac:ef:7a:f8:21:18:4e:a2:4a:f2:a1:e8:76:09:3e:
                    e4:91:c2:33:dc:fc:3f:de:f1:11:43:d5:a8:67:35:
                    a9:b5:2c:94:0b:52:e5:43:12:f4:c6:e2:2c:22:32:
                    52:70:3b:26:6a:68:85:84:db:08:c5:c0:f2:e1:40:
                    99:71:90:03:5b:16:4c:71:20:5a:4c:5b:3d:fe:6f:
                    d9:dd:c6:8f:22:e2:53:45:a6:25:10:eb:19:a5:0f:
                    8c:14:8d:48:4e:1b:4e:5a:fa:e6:3b:1c:8a:f8:ed:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209603

    Signature Algorithm: sha256WithRSAEncryption
         9d:ab:78:d0:46:2a:97:98:d7:08:35:6e:7b:32:7d:2d:5c:98:
         a7:e0:dc:2f:d6:5f:68:f3:c2:6d:84:45:b7:4a:5b:a0:13:5a:
         6b:55:76:2b:1e:f9:a6:6e:bf:08:5d:85:36:50:5b:1b:32:a8:
         19:0b:91:00:ce:fd:44:46:5a:90:72:c4:8f:88:ae:23:21:bc:
         2a:93:6b:64:b5:ca:5f:10:c6:c9:c3:0b:53:d8:a8:4a:2e:95:
         c6:7f:4c:be:13:ed:2a:38:f1:0d:ca:ae:04:e6:6d:df:5e:b8:
         79:e4:45:55:45:5f:f5:4b:1b:22:34:4a:a6:a4:b1:b7:e1:28:
         ca:d5:3f:63:fc:13:43:2b:ce:7d:f6:8d:0a:6f:b0:fa:2b:d4:
         2e:56:a2:79:86:a0:a3:94:cf:b1:c3:2f:1c:fc:f1:7b:64:c7:
         85:5e:26:3e:1f:17:ef:ee:4c:52:23:d7:4d:fc:d3:af:6e:bd:
         73:10:dd:9b:39:47:cc:b9:6f:fc:30:09:a8:22:96:39:d8:15:
         92:a7:0a:97:f5:96:30:87:1d:d6:22:50:19:88:b2:8a:8d:a0:
         0b:09:12:8d:87:29:fe:9d:38:be:0b:e4:a5:95:1c:34:19:66:
         bf:9d:b9:82:22:b4:ab:75:8d:91:dc:db:52:68:87:ec:83:06:
         da:8a:52:c5
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQiH6BtbmTrNRt+wJi9PRN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzk4YTZlOTkxYjk1NWEyOTM1MTExOWZmNzdkNzY4NjRiMGQzODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZqT3CLIvPR6naSJoRR3szzeV/6u
rw+bBApi8A9j7fbrenS0NOR51q8zTtHuJjN0vcr8QxxVacT5uijFo01a7P+OUhkz
HcgNhTiVTEsL2qdpip40gDyYA8cqkpL8qE48A4HpF1k3xEvzvg8slfTFZqXVPtDX
rgJO52CZYv1fge9vmFqjocWt6VeW8QbbVJanKGZl0eOs73r4IRhOokryoeh2CT7k
kcIz3Pw/3vERQ9WoZzWptSyUC1LlQxL0xuIsIjJScDsmamiFhNsIxcDy4UCZcZAD
WxZMcSBaTFs9/m/Z3caPIuJTRaYlEOsZpQ+MFI1IThtOWvrmOxyK+O2tkQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLeYpumRuVWik1ERn/d9doZLDThKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzUzOTJi
OS03ZjIzLTQ3NDAtOTEyMy02OWM3MmYxNjg2ODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNTM5MmI5
LTdmMjMtNDc0MC05MTIzLTY5YzcyZjE2ODY4OS8xL3Q1aW02Wkc1VmFLVFVSR2Y5
MzEyaGtzTk9Fby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMywzANBgkqhkiG9w0BAQsFAAOCAQEAnat40EYql5jX
CDVuezJ9LVyYp+DcL9ZfaPPCbYRFt0pboBNaa1V2Kx75pm6/CF2FNlBbGzKoGQuR
AM79REZakHLEj4iuIyG8KpNrZLXKXxDGycMLU9ioSi6Vxn9MvhPtKjjxDcquBOZt
3164eeRFVUVf9UsbIjRKpqSxt+EoytU/Y/wTQyvOffaNCm+w+ivULlaieYago5TP
scMvHPzxe2THhV4mPh8X7+5MUiPXTfzTr269cxDdmzlHzLlv/DAJqCKWOdgVkqcK
l/WWMIcd1iJQGYiyio2gCwkSjYcp/p04vgvkpZUcNBlmv525giK0q3WNkdzbUmiH
7IMG2opSxQ==
-----END CERTIFICATE-----