Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
File:                     1QzaSMNeVOuAJXWqpAjM5XmSchY.cer (raw, json)
Hash identifier:          SlV6fxLbEkQRAWp6SwMAVYZ3b7QtQ1FLvJEVXJi9L0E=
Subject key identifier:   D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282527A4E354C1927783C025D13D44DD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:51:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48932
                          IP: 217.12.224.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:27:a4:e3:54:c1:92:77:83:c0:25:d1:3d:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:51:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d50cda48c35e54eb802575aaa408cce579927216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:7a:4d:cd:79:81:b2:7e:76:de:b9:5b:b1:
                    61:0f:22:06:a2:75:b6:fb:2c:77:e9:46:2d:b4:2f:
                    0b:24:af:cd:8c:03:02:d3:3c:93:c0:b2:b2:45:de:
                    f9:d9:da:63:03:d3:54:1e:16:f7:d0:ef:6d:a1:1e:
                    7e:df:14:0b:68:34:78:3c:f0:21:20:9f:28:29:e0:
                    57:c0:02:dd:ac:2e:af:3e:d2:56:ba:01:51:68:e8:
                    39:d6:29:71:30:9a:1f:59:6e:53:2e:a2:ca:2e:52:
                    e7:ef:e1:36:bb:f1:77:6a:d2:dc:cf:60:94:47:67:
                    bc:13:13:24:e7:a9:f8:58:c1:76:a5:e4:7b:60:88:
                    5b:04:8b:05:6e:c3:93:fe:a9:ee:5a:23:7c:b3:5c:
                    5c:58:7d:db:58:60:0d:13:c1:e5:77:33:fd:e8:fa:
                    92:5a:37:fe:29:b4:79:2b:bd:2a:7c:60:00:38:f4:
                    04:56:66:2e:48:b2:88:4a:c9:f1:b3:14:ff:82:7f:
                    e4:67:99:36:94:fe:b4:dc:fb:65:12:d7:81:cb:24:
                    2a:ac:e4:c2:37:cb:d5:f1:4b:45:c6:89:0d:45:ee:
                    96:ff:a0:5b:3c:71:74:08:ea:37:b6:28:db:93:f1:
                    17:63:0f:e9:bd:b6:10:58:c3:22:ae:86:a4:a4:5b:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.12.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48932

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:26:18:84:67:ef:fd:13:48:85:82:d6:15:ce:c3:08:32:
         99:9a:78:72:75:9d:c8:66:50:7c:10:ba:9b:aa:f7:80:63:54:
         de:aa:66:6c:b6:70:a3:c1:da:6a:35:54:a8:ad:9b:fe:7f:e7:
         27:eb:5c:0a:af:fe:69:77:a7:b4:77:10:68:fe:9d:3b:e4:2b:
         e8:6b:26:9e:62:a7:f9:f6:2f:78:59:a8:27:03:0b:c0:85:3f:
         c0:55:63:04:cf:0d:ed:3e:57:fd:a1:43:3b:7c:e4:6c:0e:26:
         48:01:c6:6f:ef:03:86:ef:16:10:26:1a:43:8a:56:f5:cf:38:
         be:91:38:08:2c:04:e8:99:8b:13:62:fd:54:ed:63:5e:bc:40:
         32:92:f1:58:61:a1:da:16:c3:43:47:14:19:46:c4:9e:9e:9d:
         1c:42:ee:e5:3f:e2:67:87:e0:0c:df:9a:74:a0:09:42:41:d6:
         52:a9:14:f7:51:67:59:d1:76:dc:09:3a:57:a6:14:83:53:b4:
         c4:14:10:fe:12:dd:e8:a7:8a:17:d4:09:73:3b:cb:b9:37:7e:
         34:3e:05:fc:ac:05:67:56:3c:f0:2f:c5:49:4b:e2:05:fd:81:
         8d:fd:fc:bd:b6:17:75:b0:63:af:81:3f:67:dd:0f:fd:fb:3a:
         64:03:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----