Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer (raw, json)
Hash identifier:          6gDIv6AC4SpLDS09Bmjn2lAN4f0ArfWZtc063TePK6k=
Subject key identifier:   15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6642380E5706354E4951E5BE67709
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200046
                          IP: 45.8.27.0/24
                          IP: 185.38.60.0/22
                          IP: 2a00:faa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:64:23:80:e5:70:63:54:e4:95:1e:5b:e6:77:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:24:9e:b5:64:22:f6:1e:3b:92:33:b6:97:
                    8a:46:9a:3d:9d:63:06:32:83:1b:3b:6b:59:15:e9:
                    25:ac:10:bc:74:64:18:72:6b:f0:64:2b:b0:c3:f5:
                    82:49:cc:af:16:4b:36:46:35:76:29:c4:e8:a4:92:
                    5f:88:25:99:29:10:d4:60:30:a4:65:f6:6d:06:a4:
                    03:ef:e9:2c:66:12:36:e2:86:cd:94:9a:cc:0f:1a:
                    4c:9c:a5:9e:20:53:ac:31:66:6f:9e:70:cf:03:3c:
                    4c:50:53:f1:25:89:9f:9e:f3:f4:eb:5c:9b:2b:41:
                    ee:4a:7d:46:ae:fb:fa:a5:4c:81:1c:81:f1:2b:ed:
                    e0:08:61:06:bc:2b:bf:aa:b0:0f:5f:eb:67:89:71:
                    85:a3:1c:2c:b1:13:36:ba:c1:71:1c:7f:e0:4a:c1:
                    a3:93:d3:c8:c5:31:38:fd:4c:b8:e9:4a:48:a0:58:
                    9d:63:9f:d7:eb:8e:b6:70:07:0e:e3:a8:38:cf:c5:
                    2f:1c:d6:ac:a8:a9:2a:ce:19:c5:65:4c:e1:92:1b:
                    a6:d0:e8:24:b7:17:05:af:68:98:4a:be:4a:cf:00:
                    68:b2:3e:b3:0d:10:2a:f6:ab:f0:7b:e0:61:6f:b7:
                    41:97:f9:0e:ed:9c:65:58:6a:73:1a:2f:39:8f:c7:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.27.0/24
                  185.38.60.0/22
                IPv6:
                  2a00:faa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200046

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:ca:1e:75:68:f0:ba:59:fa:f5:e9:39:24:46:d1:34:a2:
         60:f3:7a:bf:40:76:a6:22:86:cb:4a:2d:51:51:f1:3b:2f:b5:
         01:09:02:b6:16:4a:66:8c:b2:a3:61:fd:40:85:41:1d:98:26:
         57:22:b1:95:d6:52:95:5d:62:ef:94:b7:7a:db:65:b8:e3:3d:
         7b:81:92:98:21:ed:c3:ae:d6:24:66:da:67:f6:18:38:eb:80:
         1a:60:8e:26:84:53:2e:11:64:54:a4:2a:10:8c:61:77:43:5f:
         da:4e:85:ea:9a:2e:88:5d:df:b3:51:8e:83:00:a4:89:60:1c:
         3f:69:8c:a2:17:f3:db:2d:c4:9b:41:a1:fe:7a:be:e4:46:9f:
         48:1a:47:fe:fd:e7:f6:92:15:78:5d:be:9f:e2:27:7d:04:1f:
         3d:b6:5a:40:39:a3:9e:6f:99:38:7d:ec:49:47:ef:7b:57:5b:
         bc:22:e3:d7:c8:53:f7:c3:60:4a:1e:e9:27:91:b2:ff:2b:ee:
         49:8c:6a:f7:33:71:88:9d:f1:6b:19:80:ad:30:f6:2a:33:05:
         52:9d:b5:3f:88:bb:10:98:2c:cd:60:ef:e8:98:a9:ca:ca:01:
         2d:14:b2:71:5c:34:cb:a2:5b:99:c7:69:4a:f4:42:6b:b8:37:
         1d:8d:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----