Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
File:                     ulwqMT590aRJ4sH7JsWrA-UmgY0.cer (raw, json)
Hash identifier:          bWdk1AZ4jLgVPly6UYppN/CjFhpbENwUxf1o1Rt3N9A=
Subject key identifier:   BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDEA008470C01512304F35FACDCB57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214164

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:ea:00:84:70:c0:15:12:30:4f:35:fa:cd:cb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ba5c2a313e7dd1a449e2c1fb26c5ab03e526818d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:8e:77:85:18:71:87:a9:eb:4a:a9:65:e9:
                    ee:e6:ec:ea:1b:c9:4e:3c:d8:a5:c4:4d:d3:63:06:
                    84:c7:4f:4a:bf:16:36:65:ed:17:45:1b:27:51:01:
                    8e:2c:09:89:4c:5a:1e:2a:95:09:ac:c2:35:aa:7b:
                    db:f0:bc:42:e5:21:5d:2d:75:6b:87:6a:17:cc:aa:
                    cb:b3:2d:e9:df:4f:53:4d:70:30:47:4e:99:d9:a7:
                    3e:b1:e6:48:97:1d:1f:13:47:b5:04:3d:db:80:b4:
                    61:29:80:8d:38:28:72:80:39:0c:69:2c:0b:e9:de:
                    ac:60:8a:10:f9:55:8f:a1:13:c9:2a:dc:3f:61:db:
                    ab:77:68:3e:76:9b:b9:4e:cb:19:81:b1:a1:a5:c3:
                    26:2e:94:a4:86:1f:60:20:ff:e8:66:09:67:e9:58:
                    ba:3a:8f:ba:7f:18:40:60:ee:b6:a0:8f:64:63:08:
                    4c:01:2a:6f:2b:d1:dc:7e:73:22:e2:cc:ba:da:68:
                    20:00:88:cf:c8:00:d5:e3:43:03:6e:de:6b:42:6a:
                    d5:38:02:a4:81:94:de:2e:a1:e7:2e:3f:18:05:38:
                    e2:7a:47:8a:25:88:26:05:e6:e7:75:7d:67:81:9b:
                    83:9f:76:bb:ab:2b:71:88:6c:df:d4:e5:f3:73:ee:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214164

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:8c:ce:ec:46:2b:a8:c0:ac:7f:c6:87:76:24:95:f6:f2:
         a1:54:f0:70:08:2b:ba:34:67:da:5e:be:e6:39:2e:b6:07:83:
         66:dc:3f:fd:f6:9d:aa:8e:62:bf:7c:e0:57:55:79:da:ad:d9:
         bd:3b:c5:97:2b:77:18:05:51:3e:a1:72:ca:b6:d2:71:25:44:
         31:d0:91:5c:0c:07:35:e2:9a:b1:12:b3:66:70:56:a2:03:34:
         15:94:31:21:50:38:95:21:40:22:62:b4:24:9f:9e:d8:f2:84:
         1b:86:5a:58:ea:84:e1:2a:96:11:29:26:59:38:6c:7c:57:5f:
         3f:42:4d:e7:a4:10:2f:3c:3d:f8:c9:82:46:f9:ad:4e:af:a0:
         90:05:61:92:95:11:66:1d:07:58:9b:db:1f:d8:bd:3f:4a:88:
         73:99:f8:5e:29:32:72:af:f2:2c:33:ef:b4:b0:b8:67:b4:69:
         dc:e7:c2:78:ab:24:16:a6:39:9b:53:c1:c0:29:6d:ea:0a:2a:
         d3:f8:60:4a:90:4a:be:d8:6e:64:fe:c0:4a:fb:75:fc:02:c3:
         06:0c:94:67:59:e7:4a:79:bf:9f:af:8a:ef:6d:fd:af:5d:61:
         3e:59:de:5a:42:41:10:86:96:88:9f:67:19:1b:73:57:47:f7:
         ed:48:48:7e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQl/eoAhHDAFRIwTzX6zctXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTVjMmEzMTNlN2RkMWE0NDllMmMxZmIyNmM1YWIwM2U1MjY4MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmuOd4UYcYep60qpZenu5uzqG8lO
PNilxE3TYwaEx09KvxY2Ze0XRRsnUQGOLAmJTFoeKpUJrMI1qnvb8LxC5SFdLXVr
h2oXzKrLsy3p309TTXAwR06Z2ac+seZIlx0fE0e1BD3bgLRhKYCNOChygDkMaSwL
6d6sYIoQ+VWPoRPJKtw/Ydurd2g+dpu5TssZgbGhpcMmLpSkhh9gIP/oZgln6Vi6
Oo+6fxhAYO62oI9kYwhMASpvK9HcfnMi4sy62mggAIjPyADV40MDbt5rQmrVOAKk
gZTeLqHnLj8YBTjiekeKJYgmBebndX1ngZuDn3a7qytxiGzf1OXzc+4GXQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLpcKjE+fdGkSeLB+ybFqwPlJoGNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2Y4ZWE5
OC00ZmJjLTRmM2UtYjY1OC1lMGE3YWUyMTZjYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZjhlYTk4
LTRmYmMtNGYzZS1iNjU4LWUwYTdhZTIxNmNiNy8xL3Vsd3FNVDU5MGFSSjRzSDdK
c1dyQS1VbWdZMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNElDANBgkqhkiG9w0BAQsFAAOCAQEAPHOMzuxGK6jA
rH/Gh3YklfbyoVTwcAgrujRn2l6+5jkutgeDZtw//fadqo5iv3zgV1V52q3ZvTvF
lyt3GAVRPqFyyrbScSVEMdCRXAwHNeKasRKzZnBWogM0FZQxIVA4lSFAImK0JJ+e
2PKEG4ZaWOqE4SqWESkmWThsfFdfP0JN56QQLzw9+MmCRvmtTq+gkAVhkpURZh0H
WJvbH9i9P0qIc5n4Xikycq/yLDPvtLC4Z7Rp3OfCeKskFqY5m1PBwClt6goq0/hg
SpBKvthuZP7ASvt1/ALDBgyUZ1nnSnm/n6+K7239r11hPlneWkJBEIaWiJ9nGRtz
V0f37UhIfg==
-----END CERTIFICATE-----