Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
File:                     ux1P6zEebC28c9UE_ISQzCFUY4k.cer (raw, json)
Hash identifier:          9oK9gGI1huwOwIndzLioG38yhTBJ89LGAl6V5U/d8kI=
Subject key identifier:   BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA96A998E52CC55AA5D3A17C7AA8A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210987

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:96:a9:98:e5:2c:c5:5a:a5:d3:a1:7c:7a:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:07:84:bd:46:65:3c:da:c4:e8:17:b8:04:
                    fd:03:c6:6e:b0:55:60:ec:f9:00:d8:9b:02:dd:fc:
                    6a:b2:55:8f:81:7a:38:d8:7f:25:67:cf:76:c6:1f:
                    79:41:3d:9e:0f:17:23:22:97:19:77:d8:fd:d1:e6:
                    c0:c4:45:2d:58:55:5f:60:e4:6c:12:4c:a2:93:bf:
                    13:8c:c6:cd:50:b6:dc:7c:e1:0b:d1:f9:fa:c2:81:
                    69:cf:8c:71:82:4b:21:59:18:f4:75:b5:3a:45:9c:
                    a5:15:08:c4:38:a7:07:0b:9b:8f:05:d0:d0:c8:f7:
                    3f:69:c6:4a:c1:b6:84:82:20:09:1b:6b:03:20:82:
                    b7:ae:b8:bd:5f:40:da:cc:3e:b4:22:ee:7a:43:31:
                    95:33:89:0d:f3:56:72:39:86:19:b5:d7:24:b0:8d:
                    55:ad:f6:e6:71:a4:8b:ef:42:07:57:d2:d3:0d:1a:
                    0e:33:4b:27:90:20:c3:68:a4:1d:95:ee:78:a6:1c:
                    fa:9d:69:71:b4:a0:75:2e:3a:c0:9d:44:25:93:3a:
                    b3:47:ab:30:e1:f3:87:f6:d2:6f:8c:0a:61:42:e0:
                    cf:26:c5:25:6d:07:dc:2d:cf:66:68:39:a9:b2:83:
                    67:68:a0:c6:f0:d0:97:a9:8e:60:2f:95:73:73:ad:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210987

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:b8:bb:07:03:04:0d:0b:0c:ff:e4:ee:e8:4b:58:3f:b2:
         cb:51:13:10:35:7d:e8:71:a3:5c:04:d9:7b:c7:63:24:6e:e4:
         cd:aa:22:32:19:75:22:62:53:29:b7:e2:ef:8a:3a:fe:88:fb:
         14:28:d8:2c:d2:75:4e:36:dc:f1:4e:7b:19:4b:3d:88:b3:12:
         80:29:81:2f:0e:63:b5:33:1f:cf:a8:cb:e2:79:fe:2c:81:e1:
         93:b5:33:04:c5:2b:64:a0:fd:51:6b:ec:b4:fb:b0:cd:d8:0c:
         82:38:e7:01:fd:bf:4f:e7:a8:af:f4:ba:47:38:e6:df:da:b2:
         f9:54:19:00:a8:4b:8f:56:dc:cc:ad:11:ab:de:34:a3:0d:31:
         12:35:93:40:d8:13:85:c8:57:ea:85:43:11:68:90:eb:aa:4b:
         71:95:6b:b4:2b:95:a0:7a:08:80:6a:74:9e:c0:16:3a:2e:30:
         8e:8b:8d:f0:ba:5c:57:65:84:b2:3b:76:f7:58:d4:03:e4:93:
         fc:33:8e:fd:4c:81:7e:56:61:6e:78:ac:2a:27:ef:87:66:f8:
         04:31:05:c1:96:e3:7f:19:b8:29:43:5e:f0:ef:11:e5:43:da:
         38:1f:6e:7f:1a:94:ec:1a:b1:dd:8c:39:79:bb:28:2b:c9:ec:
         31:64:35:db
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQf+papmOUsxVql06F8eqikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjFkNGZlYjMxMWU2YzJkYmM3M2Q1MDRmYzg0OTBjYzIxNTQ2Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQIHhL1GZTzaxOgXuAT9A8ZusFVg
7PkA2JsC3fxqslWPgXo42H8lZ892xh95QT2eDxcjIpcZd9j90ebAxEUtWFVfYORs
Ekyik78TjMbNULbcfOEL0fn6woFpz4xxgkshWRj0dbU6RZylFQjEOKcHC5uPBdDQ
yPc/acZKwbaEgiAJG2sDIIK3rri9X0DazD60Iu56QzGVM4kN81ZyOYYZtdcksI1V
rfbmcaSL70IHV9LTDRoOM0snkCDDaKQdle54phz6nWlxtKB1LjrAnUQlkzqzR6sw
4fOH9tJvjAphQuDPJsUlbQfcLc9maDmpsoNnaKDG8NCXqY5gL5Vzc61npQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLsdT+sxHmwtvHPVBPyEkMwhVGOJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzNlMmYx
My01MjUwLTQ5ZjItYTQ3Mi03NzFhYjlmYWRmN2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvM2UyZjEz
LTUyNTAtNDlmMi1hNDcyLTc3MWFiOWZhZGY3Zi8xL3V4MVA2ekVlYkMyOGM5VUVf
SVNRekNGVVk0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4KzANBgkqhkiG9w0BAQsFAAOCAQEAT9O4uwcDBA0L
DP/k7uhLWD+yy1ETEDV96HGjXATZe8djJG7kzaoiMhl1ImJTKbfi74o6/oj7FCjY
LNJ1Tjbc8U57GUs9iLMSgCmBLw5jtTMfz6jL4nn+LIHhk7UzBMUrZKD9UWvstPuw
zdgMgjjnAf2/T+eor/S6Rzjm39qy+VQZAKhLj1bczK0Rq940ow0xEjWTQNgThchX
6oVDEWiQ66pLcZVrtCuVoHoIgGp0nsAWOi4wjouN8LpcV2WEsjt291jUA+ST/DOO
/UyBflZhbnisKifvh2b4BDEFwZbjfxm4KUNe8O8R5UPaOB9ufxqU7Bqx3Yw5ebso
K8nsMWQ12w==
-----END CERTIFICATE-----