Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.cer (raw, json)
Hash identifier:          zIZgYpVUKL/vgDDQHi8nrjQnE1qcO/il7bvrsf21pxw=
Subject key identifier:   F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F400315B72301A8850B79E2795BC8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215578
                          IP: 2001:67c:dc8::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:40:03:15:b7:23:01:a8:85:0b:79:e2:79:5b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:c2:cb:2a:b7:ce:84:14:46:ca:74:16:9c:
                    ec:fc:ae:6b:55:f2:52:a3:c0:6e:dd:81:de:6f:82:
                    a1:ad:b2:89:c6:3d:70:3a:80:a9:1c:ef:78:f2:6b:
                    03:4e:29:d4:33:ee:7e:e4:62:bb:87:41:c9:d5:a9:
                    72:ba:d2:e1:86:53:bb:8f:48:a1:30:3d:20:79:72:
                    65:b2:4c:61:d8:7d:ae:13:0c:f2:10:7f:91:a9:b3:
                    c1:de:f1:a0:59:72:76:21:87:70:e2:e0:b4:24:5e:
                    e8:60:1a:22:97:51:3f:a8:8f:c9:83:35:0f:16:37:
                    aa:aa:6f:a5:96:24:f2:e3:ba:2b:c5:ae:c5:6a:1d:
                    38:94:f2:5f:3d:25:de:fe:45:0f:f8:32:27:e2:24:
                    97:ff:27:f3:e0:b3:c8:5d:37:5e:93:14:86:55:12:
                    bb:47:11:41:34:26:a2:92:b2:9c:3a:9d:17:84:6a:
                    2a:08:95:47:dd:8d:fc:ee:9f:35:ed:82:f7:2e:fc:
                    b3:52:8b:3d:b4:03:39:21:1a:dd:7b:d9:08:98:bb:
                    74:e1:95:35:b4:65:b5:1d:c5:24:00:71:e8:15:3e:
                    02:75:aa:0f:f5:2e:ff:6f:02:34:78:d9:c9:2b:b1:
                    3e:1a:0f:22:42:28:be:7d:75:f6:aa:4b:bd:3c:fb:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:dc8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215578

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:fe:84:58:0a:3b:f7:91:15:4a:4b:44:bd:22:d3:4b:68:
         0d:1d:37:bd:94:30:78:2e:0b:78:f4:d2:ee:05:7b:f2:aa:2e:
         40:22:64:9e:16:37:f6:0a:59:74:4a:9b:68:ea:0e:9c:bb:50:
         33:29:29:6f:f5:a3:33:1e:e7:e7:9a:5f:7a:1e:f8:8e:3f:96:
         54:d2:75:43:db:0f:d9:a2:9f:0f:b1:40:98:e8:99:c9:1f:b4:
         9c:dc:29:32:ee:13:5d:2b:1a:3e:c6:24:c7:8b:88:cd:a4:f1:
         ff:4f:f7:62:79:c9:38:25:b4:46:d0:81:41:4f:61:96:1b:66:
         83:cf:a2:73:24:55:83:12:d7:92:7e:cc:1e:55:7f:8c:0d:10:
         b2:58:39:74:46:3f:23:28:21:2b:d2:58:3d:8c:12:b6:3f:cb:
         3f:32:66:3c:cc:47:19:c5:07:3c:0e:59:e4:94:a7:87:24:ea:
         0c:92:37:12:4c:b5:f0:1c:40:2c:60:a3:83:8d:60:e9:52:17:
         cc:7f:75:6c:b1:ac:fb:44:8b:2d:3f:ca:f5:63:33:32:fe:f4:
         4b:c6:ee:9c:b2:72:9e:24:4d:c3:c6:a6:94:f1:a4:1f:90:fe:
         1a:c0:df:93:11:e5:ea:83:d1:23:d4:6d:be:fa:08:d7:d6:83:
         7b:13:ee:97
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZQlj0ADFbcjAaiFC3nieVvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWMxOGNiMWE1MDI3ZmExNzI2ZjExNGIzZWZlNjJhM2E5NzljZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3LCyyq3zoQURsp0Fpzs/K5rVfJS
o8Bu3YHeb4KhrbKJxj1wOoCpHO948msDTinUM+5+5GK7h0HJ1alyutLhhlO7j0ih
MD0geXJlskxh2H2uEwzyEH+RqbPB3vGgWXJ2IYdw4uC0JF7oYBoil1E/qI/JgzUP
Fjeqqm+lliTy47orxa7Fah04lPJfPSXe/kUP+DIn4iSX/yfz4LPIXTdekxSGVRK7
RxFBNCaikrKcOp0XhGoqCJVH3Y387p817YL3LvyzUos9tAM5IRrde9kImLt04ZU1
tGW1HcUkAHHoFT4CdaoP9S7/bwI0eNnJK7E+Gg8iQii+fXX2qku9PPvbRwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFPnBjLGlAn+hcm8RSz7+YqOpec4bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzI2Y2E5
Mi02ZmI4LTRkZDItOTc5NS05YmM1YzI2ZDRiZTgvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMjZjYTky
LTZmYjgtNGRkMi05Nzk1LTliYzVjMjZkNGJlOC8xLzEtY0dNc2FVQ2Y2RnlieEZM
UHY1aW82bDV6aHMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwNyDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMDShowDQYJKoZIhvcNAQELBQADggEBAEbD/oRYCjv3kRVKS0S9ItNLaA0d
N72UMHguC3j00u4Fe/KqLkAiZJ4WN/YKWXRKm2jqDpy7UDMpKW/1ozMe5+eaX3oe
+I4/llTSdUPbD9minw+xQJjomckftJzcKTLuE10rGj7GJMeLiM2k8f9P92J5yTgl
tEbQgUFPYZYbZoPPonMkVYMS15J+zB5Vf4wNELJYOXRGPyMoISvSWD2MErY/yz8y
ZjzMRxnFBzwOWeSUp4ck6gySNxJMtfAcQCxgo4ONYOlSF8x/dWyxrPtEiy0/yvVj
MzL+9EvG7pyycp4kTcPGppTxpB+Q/hrA35MR5eqD0SPUbb76CNfWg3sT7pc=
-----END CERTIFICATE-----