Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
File:                     BQJMtECm3Xana1aUwOL07jMOCnw.cer (raw, json)
Hash identifier:          xXQXYZ+adfI5c6Dx/TYRRpV57Y7E+5ZRn8l++iRNEA8=
Subject key identifier:   05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D0C62DD1DD9C53E1CECF89F758227
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214139

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:0c:62:dd:1d:d9:c5:3e:1c:ec:f8:9f:75:82:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5d:8d:63:2b:05:cf:2b:12:f8:81:09:4b:b8:
                    d7:f8:52:74:e3:a4:89:7f:cc:e1:63:26:e5:64:3f:
                    19:d3:c8:e4:b4:e9:a1:82:c6:c8:7c:ec:eb:37:14:
                    83:0f:2a:0b:60:73:43:a6:33:08:be:13:16:62:14:
                    e3:aa:ab:c6:c2:af:58:00:25:4b:d8:9a:64:00:bc:
                    4c:d1:76:19:81:ce:07:65:36:76:77:a1:54:a3:2b:
                    cd:bf:46:75:10:b2:7b:77:f6:7e:d8:2b:7c:e1:7e:
                    73:e1:3e:4b:ce:cb:3a:9b:1d:0a:9c:26:4d:4b:f0:
                    be:5e:bf:5a:62:98:de:81:2d:20:b5:af:ac:90:71:
                    5c:af:dc:c4:a3:2a:18:4f:b5:87:ca:27:33:4b:79:
                    7f:69:45:24:f0:77:07:70:e1:e1:cf:50:b0:56:c1:
                    51:f5:e2:1d:68:f1:b5:eb:dc:26:2d:9a:81:87:b1:
                    e2:e9:49:16:3b:09:f1:5e:9e:db:45:c8:0c:26:66:
                    69:46:ee:f1:3a:3d:71:2f:fc:5f:64:75:54:73:f9:
                    b1:b7:32:ca:0c:e4:ba:f6:9a:a4:0c:80:60:38:55:
                    94:2b:93:e0:e3:8f:4f:45:33:f3:e5:d0:39:c5:6d:
                    a8:c8:a6:1c:8f:cc:17:9e:79:45:bc:23:4a:80:60:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214139

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:26:a9:dd:0d:5a:a4:b9:53:0a:e2:4c:a2:9c:b8:aa:ba:
         17:7c:cd:e8:39:7d:e4:fa:a9:b4:af:df:38:dc:57:96:d9:d0:
         48:37:62:c2:0a:64:36:5d:80:22:76:27:72:af:2e:4a:7b:d9:
         df:12:45:04:d5:b6:2d:34:d1:9c:49:43:f7:d5:c8:56:9b:54:
         ce:e4:fa:50:4c:e1:12:19:12:93:47:5b:fb:ff:8e:dd:80:f1:
         9b:48:dd:16:4b:3c:ab:16:ce:78:c3:86:50:9e:b7:e2:16:2f:
         10:e7:10:c9:d8:45:54:f2:07:e4:17:f0:7d:a8:ca:ac:bd:78:
         08:f0:20:e5:60:27:ae:36:14:e6:01:83:98:14:7e:ae:6f:be:
         3a:92:b9:d6:ae:22:89:28:f9:5c:d3:90:bb:4e:d8:15:2d:88:
         13:ce:77:51:15:4f:e5:15:01:23:2a:ea:ea:97:21:8d:69:a5:
         e6:55:18:31:d3:0e:45:f2:ca:af:d4:de:1f:8c:14:e6:28:ff:
         f1:13:e2:d0:9d:d6:91:c0:5e:ea:2a:b6:49:fe:0c:ab:ba:28:
         4e:03:16:3c:2e:c2:24:85:76:b6:85:20:f8:a1:55:23:b0:25:
         b5:2e:ef:1b:90:47:cc:b1:03:44:8c:94:b5:8e:26:0e:f3:79:
         26:00:be:d8
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQijQxi3R3ZxT4c7PifdYInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAyNGNiNDQwYTZkZDc2YTc2YjU2OTRjMGUyZjRlZTMzMGUwYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F2NYysFzysS+IEJS7jX+FJ046SJ
f8zhYyblZD8Z08jktOmhgsbIfOzrNxSDDyoLYHNDpjMIvhMWYhTjqqvGwq9YACVL
2JpkALxM0XYZgc4HZTZ2d6FUoyvNv0Z1ELJ7d/Z+2Ct84X5z4T5Lzss6mx0KnCZN
S/C+Xr9aYpjegS0gta+skHFcr9zEoyoYT7WHyiczS3l/aUUk8HcHcOHhz1CwVsFR
9eIdaPG169wmLZqBh7Hi6UkWOwnxXp7bRcgMJmZpRu7xOj1xL/xfZHVUc/mxtzLK
DOS69pqkDIBgOFWUK5Pg449PRTPz5dA5xW2oyKYcj8wXnnlFvCNKgGCc3QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAUCTLRApt12p2tWlMDi9O4zDgp8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlL2E2MGIx
YS0yN2JiLTQ2MDQtOTM0MC1hODIyNjIyMDRlMzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvYTYwYjFh
LTI3YmItNDYwNC05MzQwLWE4MjI2MjIwNGUzOC8xL0JRSk10RUNtM1hhbmExYVV3
T0wwN2pNT0Nudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNEezANBgkqhkiG9w0BAQsFAAOCAQEAfeEmqd0NWqS5
UwriTKKcuKq6F3zN6Dl95PqptK/fONxXltnQSDdiwgpkNl2AInYncq8uSnvZ3xJF
BNW2LTTRnElD99XIVptUzuT6UEzhEhkSk0db+/+O3YDxm0jdFks8qxbOeMOGUJ63
4hYvEOcQydhFVPIH5BfwfajKrL14CPAg5WAnrjYU5gGDmBR+rm++OpK51q4iiSj5
XNOQu07YFS2IE853URVP5RUBIyrq6pchjWml5lUYMdMORfLKr9TeH4wU5ij/8RPi
0J3WkcBe6iq2Sf4Mq7ooTgMWPC7CJIV2toUg+KFVI7AltS7vG5BHzLEDRIyUtY4m
DvN5JgC+2A==
-----END CERTIFICATE-----