Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
File:                     9qD_yrRKardihf2LFfuprgRywAo.cer (raw, json)
Hash identifier:          CaDGxhpindxOGuUu9DBx9qnL767/76YqxYqYk9tW1KQ=
Subject key identifier:   F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5D1482C61843E691E75BD4BA1D427
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61145
                          IP: 185.8.112.0/22
                          IP: 194.38.12.0/22
                          IP: 2a03:38c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:d1:48:2c:61:84:3e:69:1e:75:bd:4b:a1:d4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:a1:b0:6e:fb:88:74:17:d2:1c:8e:d2:5a:
                    80:63:b9:6a:91:da:34:6f:b5:70:11:8f:2e:e7:f0:
                    23:21:22:29:fc:9e:ea:bb:ed:c8:4d:fe:f6:e0:d5:
                    86:d9:f5:c1:fb:8c:65:68:c9:57:41:c5:5b:28:37:
                    c7:02:28:7c:32:f5:fe:b9:c8:29:d1:c7:a1:55:b0:
                    a4:59:22:96:7f:b1:ec:7e:69:14:56:a7:62:0e:f5:
                    3f:b6:74:59:38:26:5f:4f:e1:00:3c:8b:7e:91:d2:
                    78:d6:4b:82:4d:60:4f:1a:28:a1:92:aa:51:f7:bc:
                    58:87:2e:15:73:53:e2:c3:c7:fa:9d:5d:3e:2b:27:
                    8c:37:62:b5:5b:ff:dc:9d:20:e0:c7:8d:1e:58:eb:
                    a7:ee:59:20:06:b6:c3:11:86:9d:aa:58:12:e0:49:
                    1f:d5:3c:28:6c:cc:ea:cb:e9:fe:5d:57:c7:50:c8:
                    ff:e8:17:a2:2f:75:89:e3:3d:61:3d:98:8a:88:6b:
                    f9:55:fe:06:06:f7:da:3d:51:87:bb:5f:ee:63:01:
                    59:c3:e3:90:31:8c:76:8f:14:b2:e7:5e:d6:46:89:
                    a2:60:eb:c6:d0:be:32:94:11:86:20:92:da:b1:99:
                    97:9e:0b:d6:39:f6:97:3b:b2:fb:f1:64:ea:d0:27:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.8.112.0/22
                  194.38.12.0/22
                IPv6:
                  2a03:38c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61145

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:b8:73:35:bb:2d:e3:67:f9:54:2b:ef:2d:ce:ea:05:a4:
         5c:b7:00:61:e8:20:a4:6d:81:49:6a:0d:d9:62:e3:a9:b9:b7:
         fb:a2:a9:05:a6:2b:6e:ad:5f:a3:26:16:cd:71:a4:f7:29:26:
         82:c4:c3:97:ee:14:97:db:e5:a0:89:e8:71:57:5e:77:8b:bc:
         33:89:e9:f0:05:a9:d3:c1:7f:75:5c:da:16:a4:86:59:4f:50:
         4a:db:43:eb:5e:70:28:b5:ab:49:20:65:c5:a7:6e:51:d6:ba:
         1b:48:cd:14:41:f0:62:52:03:d9:d3:ca:67:e7:aa:c7:3a:50:
         04:84:5f:d9:85:17:dd:9a:5c:14:ac:e2:02:ff:fc:bb:48:53:
         16:3a:36:53:7e:fd:3b:e5:72:2b:d2:c9:fa:ea:72:3a:0c:4a:
         6a:59:00:20:13:92:e2:f2:ad:4a:97:b6:11:dd:c8:db:b1:ee:
         ed:52:2b:14:44:45:a1:aa:c9:83:95:c5:d9:fb:c4:c7:08:19:
         41:e3:40:5e:0b:6a:68:53:89:25:7e:4a:aa:5e:4a:d7:d1:ad:
         b9:af:4a:66:b1:d9:02:69:ce:f1:c8:ad:b8:98:2d:d1:28:fa:
         b7:28:3d:c6:99:52:13:27:7a:56:67:01:09:1d:82:8b:05:1d:
         9e:0a:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----