Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
File:                     vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer (raw, json)
Hash identifier:          vaeU/ZncBnickTNUj5oZrXHjJLaZPEVhocJomY5gwF0=
Subject key identifier:   BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1D9FC12C5FFBA8E9593D49E4F28B1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213326

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d9:fc:12:c5:ff:ba:8e:95:93:d4:9e:4f:28:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:d1:0c:f5:de:50:6c:fe:b4:12:f0:6d:24:
                    49:55:04:21:fa:5d:a3:73:db:c3:bc:3a:11:6c:53:
                    e9:c7:ec:65:7e:51:1f:f5:47:19:dc:70:45:a1:1b:
                    c1:32:f6:0c:28:f1:fe:81:67:c8:82:ab:49:19:14:
                    96:d3:cd:16:1e:8b:ff:0b:c3:93:b3:63:ca:eb:35:
                    8c:06:8d:e3:49:0c:0b:5b:f1:f7:31:d1:21:5e:52:
                    99:52:71:8e:ec:10:90:42:36:3c:c2:1d:6b:bd:54:
                    ac:87:d3:a8:06:d1:e7:82:b0:7a:29:ec:78:9d:10:
                    e0:a3:4c:a8:f2:38:f0:05:81:1c:6b:ff:12:5c:ee:
                    3c:7d:7f:49:6e:3c:1d:2f:d2:e1:69:a1:b2:1b:59:
                    bb:db:ca:73:01:67:73:38:82:a9:50:11:65:40:35:
                    9d:96:0d:5a:a2:35:81:1e:8f:f5:2b:28:89:1c:8d:
                    ce:57:5d:df:35:a0:f3:4c:cb:53:ee:6b:ff:2f:f4:
                    d0:cf:85:75:12:18:91:69:28:5a:d3:db:86:5d:2c:
                    0c:71:98:4e:67:ad:84:9c:1f:01:d3:7d:57:63:f8:
                    0a:3d:11:f6:85:86:61:d1:06:b5:8e:ed:4e:f1:94:
                    51:b3:d8:94:07:ee:48:8a:ff:19:24:35:b0:76:2c:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213326

    Signature Algorithm: sha256WithRSAEncryption
         92:24:65:71:03:4b:16:b8:45:f9:54:c8:ff:b2:e9:bd:d0:43:
         6b:01:9d:35:bf:d1:bf:b7:5e:ec:c5:1d:3d:c6:57:7c:b7:ca:
         3c:80:6e:0b:95:66:40:34:e8:a1:c2:dd:2f:f4:8b:67:ed:5a:
         d2:37:38:81:78:d0:ac:09:e0:dc:a2:f3:c6:4b:12:2e:5d:af:
         b7:c7:94:dc:bf:55:8e:0d:97:3c:2a:c5:72:83:a4:9c:a0:ce:
         38:a3:d3:2d:41:19:9d:b1:ea:83:76:fa:45:65:44:03:85:f9:
         3b:ca:e1:d8:45:98:b1:a8:6f:d8:3d:c9:61:00:25:11:60:8b:
         ec:81:a2:73:cd:d7:7c:ad:a1:52:3c:fa:f9:9a:3e:e0:b1:73:
         b6:cd:c2:88:08:d9:6f:93:9e:e2:8e:ea:0c:2d:76:31:bd:a5:
         de:ee:b6:5f:13:b5:9d:38:9f:44:46:96:7c:f8:87:37:23:e3:
         17:07:27:7c:8a:db:54:d2:69:10:92:6e:85:e8:83:60:3d:2c:
         b3:2e:a7:46:18:02:98:ef:07:10:44:db:47:25:b2:66:ee:f9:
         47:f8:14:77:06:e2:c0:af:a7:96:31:7c:14:89:71:0e:52:2b:
         0a:15:85:41:1d:f1:1f:b0:e5:fb:ec:4a:00:8e:62:4d:c1:20:
         e6:64:43:c7
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQhsdn8EsX/uo6Vk9SeTyixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZjNGYxMjhjNGM1Njg1MWI5NzU1NGQyNGM2NmFkNWVlMjNmYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh/RDPXeUGz+tBLwbSRJVQQh+l2j
c9vDvDoRbFPpx+xlflEf9UcZ3HBFoRvBMvYMKPH+gWfIgqtJGRSW080WHov/C8OT
s2PK6zWMBo3jSQwLW/H3MdEhXlKZUnGO7BCQQjY8wh1rvVSsh9OoBtHngrB6Kex4
nRDgo0yo8jjwBYEca/8SXO48fX9JbjwdL9LhaaGyG1m728pzAWdzOIKpUBFlQDWd
lg1aojWBHo/1KyiJHI3OV13fNaDzTMtT7mv/L/TQz4V1EhiRaSha09uGXSwMcZhO
Z62EnB8B031XY/gKPRH2hYZh0Qa1ju1O8ZRRs9iUB+5Iiv8ZJDWwdixtWwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFLz8TxKMTFaFG5dVTSTGatXuI/ycMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzZmNmY3
OC0xZGU3LTQ0ZTktYmYzOS0xMjk4NGNhN2E3YTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNmY2Zjc4
LTFkZTctNDRlOS1iZjM5LTEyOTg0Y2E3YTdhMi8xL3ZQeFBFb3hNVm9VYmwxVk5K
TVpxMWU0al9Kdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBTjANBgkqhkiG9w0BAQsFAAOCAQEAkiRlcQNLFrhF
+VTI/7LpvdBDawGdNb/Rv7de7MUdPcZXfLfKPIBuC5VmQDToocLdL/SLZ+1a0jc4
gXjQrAng3KLzxksSLl2vt8eU3L9Vjg2XPCrFcoOknKDOOKPTLUEZnbHqg3b6RWVE
A4X5O8rh2EWYsahv2D3JYQAlEWCL7IGic83XfK2hUjz6+Zo+4LFzts3CiAjZb5Oe
4o7qDC12Mb2l3u62XxO1nTifREaWfPiHNyPjFwcnfIrbVNJpEJJuheiDYD0ssy6n
RhgCmO8HEETbRyWyZu75R/gUdwbiwK+nljF8FIlxDlIrChWFQR3xH7Dl++xKAI5i
TcEg5mRDxw==
-----END CERTIFICATE-----