Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
File:                     2qUj1biTySXsOoJgH5J0WCzvxvA.cer (raw, json)
Hash identifier:          HuFxRJz52M/qURoTF5ObRUqx+pqVG0H2U1FyMpk+6s4=
Subject key identifier:   DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423691CACDCFC33D3741D3C64705411C8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216105
                          IP: 2001:67c:d4c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:1c:ac:dc:fc:33:d3:74:1d:3c:64:70:54:11:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:0f:41:e7:b8:88:5d:e7:39:25:ac:23:74:
                    f7:38:53:25:b1:e9:99:4e:97:12:50:fb:2f:66:d3:
                    c0:cb:69:79:4d:eb:7a:64:e3:03:82:55:55:04:2e:
                    68:18:10:f7:37:02:9e:e1:61:f3:d5:b6:de:20:8b:
                    b1:64:76:b4:c4:ff:ba:e4:f0:23:bb:a2:8e:a4:ae:
                    b0:9e:f2:cf:43:56:db:54:7c:b6:dd:9e:aa:b1:23:
                    01:c3:42:ef:c3:f5:9a:f2:2b:7f:ef:62:71:cc:7f:
                    64:97:23:f6:8c:23:eb:e9:d7:c7:cc:04:04:35:fe:
                    18:e4:44:0e:63:e5:62:84:ef:f8:09:f1:5b:3a:1e:
                    ea:7c:87:24:d1:a6:64:ee:ad:96:a7:b3:8c:f5:bd:
                    36:d7:f7:5b:8d:e6:90:ca:a9:b2:c6:6a:8b:23:c4:
                    62:1a:97:73:69:11:e3:7d:23:c6:1d:e3:ff:a3:86:
                    e2:20:40:46:55:a9:d1:0a:1f:b8:67:95:97:7a:d6:
                    ea:f7:31:40:a8:3e:f4:0d:ce:d9:af:b5:28:d6:88:
                    65:9f:a6:92:a4:2a:35:32:57:f2:db:72:6e:72:34:
                    80:06:c2:26:b1:2e:4c:b0:e6:11:99:d1:d6:6c:34:
                    a9:10:fb:cb:9f:f9:29:82:f6:87:c0:31:2f:6b:e5:
                    ec:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d4c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216105

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:bf:b8:0e:82:e7:35:ac:b0:8b:c5:84:b2:27:b0:b6:f6:
         04:ab:f9:5b:ba:c4:e8:aa:83:ba:fd:c2:db:72:72:6c:2b:82:
         dd:29:5b:43:b6:0a:b9:84:6b:85:ef:e6:be:73:3d:c1:25:e7:
         d5:a5:59:04:47:58:1a:98:f3:19:9e:20:f9:4e:c5:95:f1:23:
         eb:7d:d5:4b:07:42:45:ea:d5:d0:90:5b:47:99:cb:ad:92:d2:
         01:08:d0:e4:51:53:28:6b:55:86:5b:9f:4d:06:3e:fc:29:79:
         f7:3f:26:2f:4b:da:74:b7:94:f0:e7:ed:2d:3c:30:f0:75:48:
         c0:97:15:41:67:b7:ca:29:b0:87:93:a0:28:76:50:9d:e5:17:
         64:3d:60:e6:33:c2:2f:28:72:ca:b7:5a:12:cf:a8:09:ac:4c:
         21:90:c4:68:c0:bc:8d:4a:52:63:70:fc:03:00:ac:0e:97:6f:
         dd:62:57:79:ee:41:57:b1:00:aa:c7:e2:18:b2:b2:26:16:5d:
         f5:b5:0b:ca:4a:ef:dd:a4:6c:a0:9c:f8:a2:73:32:07:a0:76:
         87:98:22:f0:74:c1:dc:f2:48:84:2a:5b:10:69:dc:5d:aa:f4:
         00:41:5f:e1:3b:70:ad:54:a7:d4:89:45:88:f0:c8:b4:ef:8a:
         19:0a:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----