Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer
File:                     kgm43V6nJYkIN4Zh8rqe-JrToLE.cer (raw, json)
Hash identifier:          /K/gbMXJSD/MQouKwSKO4+fx1aesQdsN2XegKKIvEJA=
Subject key identifier:   92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01957F25A17B9906AEE6CA30641309CD9CF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 08:22:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211939
                          IP: 2001:678:1050::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:25:a1:7b:99:06:ae:e6:ca:30:64:13:09:cd:9c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 10 08:22:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:e0:a1:e8:73:04:76:b0:e8:d9:8a:64:b1:
                    29:29:e6:02:f0:cd:a6:5d:8c:b7:c8:45:72:a4:05:
                    cc:f6:45:89:9e:8b:28:df:21:e1:d8:c0:d5:5c:85:
                    4e:b3:d0:a3:fc:d8:f1:a5:b0:87:03:cb:39:d2:ab:
                    6e:a8:4b:44:b4:85:ff:69:b6:7f:c7:6d:3b:68:8b:
                    86:01:4d:16:78:ba:b4:ba:4b:b8:3d:12:a3:5a:78:
                    b8:bb:62:cf:e7:55:ae:84:8a:9b:42:21:75:84:2b:
                    78:95:45:0e:49:2c:5a:1d:77:6b:61:51:70:24:c7:
                    19:d6:f9:8b:0c:9b:e8:25:94:41:79:3c:c9:38:5d:
                    69:ff:3d:ca:c8:ef:d9:4e:c1:76:5b:40:69:63:32:
                    95:7f:15:1a:e5:9d:1b:07:39:dd:94:3b:9f:96:46:
                    76:3d:d1:34:86:ef:fd:41:39:4f:5b:da:b7:0b:89:
                    94:f1:ca:9c:53:6e:83:1b:67:df:33:19:9d:1f:9e:
                    8e:6d:00:68:58:63:43:e4:d7:31:a7:b3:54:62:74:
                    d6:c0:12:ec:ae:ee:4c:bd:e5:4b:99:c5:53:e3:c5:
                    3a:0d:c5:a7:6e:c3:2e:fc:45:c2:71:f4:78:2a:e9:
                    a5:05:7e:b6:be:96:f3:d4:00:a7:bf:73:1a:49:13:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1050::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211939

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:b0:65:e5:4f:c0:ed:e5:1c:aa:56:2b:93:c3:70:bb:47:
         1c:19:5c:d2:85:e8:99:19:45:85:6c:67:89:a5:de:64:b2:92:
         4e:5d:46:99:67:ad:f0:75:aa:f9:1c:d6:2e:25:e9:f8:33:a3:
         a7:47:fb:0b:d0:52:a4:dd:d7:66:fd:f5:82:97:32:35:d9:4e:
         ae:30:d9:54:d4:c1:53:db:7a:aa:02:5a:27:e9:bb:3b:db:50:
         2d:fa:07:d0:78:a2:07:ce:3f:ab:ce:ac:5c:7d:db:01:31:79:
         ba:a2:3b:fb:4f:9c:12:06:f0:5c:cc:a0:ac:e1:7f:09:9a:f3:
         f5:59:2e:d6:a1:b5:3f:df:24:7e:75:65:70:8e:84:58:ca:f2:
         0f:99:57:73:36:8e:05:d1:0c:eb:c3:37:77:f8:6e:4c:e3:cb:
         fa:c0:a8:37:ea:ab:f5:31:c5:27:95:94:37:8a:31:ec:e5:82:
         8f:48:4f:3f:de:e5:ab:ec:dc:dc:ae:57:74:d3:0a:61:e3:b5:
         34:50:8f:69:67:59:a5:be:12:e3:49:66:53:89:0c:5e:2f:7b:
         72:e2:b8:33:83:b5:93:6c:25:52:aa:39:8d:a2:06:04:74:73:
         cb:76:b8:55:ed:b7:4c:15:77:7c:ba:49:53:d3:f7:b5:54:a0:
         87:3f:2d:1b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZV/JaF7mQau5sowZBMJzZzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEwMDgyMjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjA5YjhkZDVlYTcyNTg5MDgzNzg2NjFmMmJhOWVmODlhZDNhMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7/goehzBHaw6NmKZLEpKeYC8M2m
XYy3yEVypAXM9kWJnoso3yHh2MDVXIVOs9Cj/NjxpbCHA8s50qtuqEtEtIX/abZ/
x207aIuGAU0WeLq0uku4PRKjWni4u2LP51WuhIqbQiF1hCt4lUUOSSxaHXdrYVFw
JMcZ1vmLDJvoJZRBeTzJOF1p/z3KyO/ZTsF2W0BpYzKVfxUa5Z0bBzndlDuflkZ2
PdE0hu/9QTlPW9q3C4mU8cqcU26DG2ffMxmdH56ObQBoWGND5Ncxp7NUYnTWwBLs
ru5MveVLmcVT48U6DcWnbsMu/EXCcfR4KumlBX62vpbz1ACnv3MaSRMX1wIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFJIJuN1epyWJCDeGYfK6nvia06CxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzY4OGRh
NS1kMjM4LTQ3Y2UtYjJlOC04OTBmZmVhOGQwYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNjg4ZGE1
LWQyMzgtNDdjZS1iMmU4LTg5MGZmZWE4ZDBiYy8xL2tnbTQzVjZuSllrSU40Wmg4
cnFlLUpyVG9MRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBQMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM74zANBgkqhkiG9w0BAQsFAAOCAQEAb2ywZeVPwO3lHKpWK5PDcLtHHBlc
0oXomRlFhWxniaXeZLKSTl1GmWet8HWq+RzWLiXp+DOjp0f7C9BSpN3XZv31gpcy
NdlOrjDZVNTBU9t6qgJaJ+m7O9tQLfoH0HiiB84/q86sXH3bATF5uqI7+0+cEgbw
XMygrOF/CZrz9Vku1qG1P98kfnVlcI6EWMryD5lXczaOBdEM68M3d/huTOPL+sCo
N+qr9THFJ5WUN4ox7OWCj0hPP97lq+zc3K5XdNMKYeO1NFCPaWdZpb4S40lmU4kM
Xi97cuK4M4O1k2wlUqo5jaIGBHRzy3a4Ve23TBV3fLpJU9P3tVSghz8tGw==
-----END CERTIFICATE-----