Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
File:                     ws_pT97DCaxVMFrJDnw9Yo39QGo.cer (raw, json)
Hash identifier:          IoQPmBGAroD61zbs1NbZ51gzgu9vWVtkWEqcQIBAk/I=
Subject key identifier:   C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019562283F27BF1CDB85DB9F03C0D91D15C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 17:15:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214049

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:62:28:3f:27:bf:1c:db:85:db:9f:03:c0:d9:1d:15:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  4 17:15:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:f1:a8:ff:11:96:25:e5:11:53:66:2d:6d:
                    b4:13:67:47:ab:af:3b:46:55:37:4b:d0:b0:43:ac:
                    ad:90:5a:3e:54:eb:3c:f2:8f:e9:49:aa:b2:96:b8:
                    73:a7:c7:f0:c6:90:7a:58:d3:73:c0:91:e0:13:b9:
                    fd:d8:a2:10:01:79:ff:28:03:de:7d:09:67:71:8e:
                    8d:85:90:85:d0:95:0c:71:18:b5:c9:73:59:85:48:
                    40:ec:27:ae:52:d0:78:3c:e1:58:22:cb:75:51:83:
                    d8:0c:5d:56:43:36:d6:c9:7e:fd:7a:2a:79:08:7b:
                    c4:c8:e7:c5:20:3e:be:75:0b:bc:c4:be:b4:00:21:
                    78:fe:a3:84:ec:67:f6:7a:05:c7:8f:69:81:58:c7:
                    c7:e6:74:1a:05:24:62:20:75:e3:52:e6:ec:6a:a8:
                    b2:18:64:2d:37:57:45:64:4d:a4:df:a2:20:24:00:
                    e5:14:20:7f:bc:8b:99:de:66:4c:ed:7a:0d:7e:33:
                    51:84:f4:9c:af:b1:8a:e8:45:52:d6:24:96:6d:67:
                    de:39:5d:14:4d:2d:a1:48:f8:fd:49:bb:3a:2f:64:
                    7c:4c:58:ba:fb:6a:02:71:96:57:6e:b3:0b:84:da:
                    54:05:56:f2:fd:d6:5e:a0:ac:9a:72:d5:84:a8:a2:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214049

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:38:8d:4c:83:0d:4c:4d:34:10:9d:93:d9:76:57:67:86:
         61:b0:41:4e:39:b6:90:f3:b4:b2:ff:66:65:d0:26:68:e2:e0:
         d8:99:c5:a6:1a:93:4e:78:b0:35:67:52:17:ae:df:1c:09:c2:
         5f:07:8c:25:c6:9a:95:a7:02:d5:c6:f2:8f:31:5b:b0:05:85:
         de:ce:4d:2e:bd:10:68:23:0d:ec:d9:d5:a5:85:65:0a:f5:17:
         66:3d:aa:e4:c0:df:d9:3b:bd:66:cc:59:b8:fd:c3:3d:5c:1f:
         47:93:40:32:c3:2a:3a:1a:80:50:34:dc:0d:e3:ff:fe:47:0c:
         a3:7e:ac:22:8f:c1:5d:bb:ae:f3:6b:ba:30:95:3a:31:b6:c5:
         c5:78:61:f5:5b:18:40:55:bd:ee:e6:c3:41:d6:51:67:76:7d:
         bc:5e:27:26:17:ce:86:78:94:78:c2:c2:ec:ae:72:e4:ba:96:
         21:f8:ac:7f:f6:9b:2e:b5:bd:50:e5:83:d6:fd:3c:f5:a7:d5:
         a2:29:4d:75:64:9a:77:f9:0a:b9:f3:20:39:86:d5:89:6b:3d:
         5a:04:96:86:c9:45:d2:22:db:e6:b9:30:a9:b1:17:ba:ad:7c:
         46:b6:d8:43:38:20:83:01:9f:7a:89:01:38:44:90:15:be:95:
         59:34:e9:c9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZViKD8nvxzbhdufA8DZHRXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzA0MTcxNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmNmZTk0ZmRlYzMwOWFjNTUzMDVhYzkwZTdjM2Q2MjhkZmQ0MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODxqP8RliXlEVNmLW20E2dHq687
RlU3S9CwQ6ytkFo+VOs88o/pSaqylrhzp8fwxpB6WNNzwJHgE7n92KIQAXn/KAPe
fQlncY6NhZCF0JUMcRi1yXNZhUhA7CeuUtB4POFYIst1UYPYDF1WQzbWyX79eip5
CHvEyOfFID6+dQu8xL60ACF4/qOE7Gf2egXHj2mBWMfH5nQaBSRiIHXjUubsaqiy
GGQtN1dFZE2k36IgJADlFCB/vIuZ3mZM7XoNfjNRhPScr7GK6EVS1iSWbWfeOV0U
TS2hSPj9Sbs6L2R8TFi6+2oCcZZXbrMLhNpUBVby/dZeoKyactWEqKIZBwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMLP6U/ewwmsVTBayQ58PWKN/UBqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzM5OTBj
Mi01MWJlLTRiODctYWY2Mi1lMGUwOTk2NDBlYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMzk5MGMy
LTUxYmUtNGI4Ny1hZjYyLWUwZTA5OTY0MGVhYy8xL3dzX3BUOTdEQ2F4Vk1GckpE
bnc5WW8zOVFHby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEITANBgkqhkiG9w0BAQsFAAOCAQEArbQ4jUyDDUxN
NBCdk9l2V2eGYbBBTjm2kPO0sv9mZdAmaOLg2JnFphqTTniwNWdSF67fHAnCXweM
JcaalacC1cbyjzFbsAWF3s5NLr0QaCMN7NnVpYVlCvUXZj2q5MDf2Tu9ZsxZuP3D
PVwfR5NAMsMqOhqAUDTcDeP//kcMo36sIo/BXbuu82u6MJU6MbbFxXhh9VsYQFW9
7ubDQdZRZ3Z9vF4nJhfOhniUeMLC7K5y5LqWIfisf/abLrW9UOWD1v089afVoilN
dWSad/kKufMgOYbViWs9WgSWhslF0iLb5rkwqbEXuq18RrbYQzgggwGfeokBOESQ
Fb6VWTTpyQ==
-----END CERTIFICATE-----