Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
File:                     GQ1bBUO9hajs-WmruFA8nerQ35g.cer (raw, json)
Hash identifier:          T/xymCt2cfNA/I5emhCKCaHZ1fNKszMUIw+jQlpvzYA=
Subject key identifier:   19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C4551F36F687A45AC7479CAAE020D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42264
                          IP: 193.33.24.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:45:51:f3:6f:68:7a:45:ac:74:79:ca:ae:02:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:6f:1b:39:bf:9a:fe:35:97:21:76:65:3b:
                    19:c4:77:56:e1:ab:06:76:9e:f5:54:7c:00:64:f3:
                    65:c0:45:be:2b:3a:f4:f3:c8:74:8d:08:43:48:aa:
                    51:88:d1:3f:54:41:82:6e:1a:67:81:88:15:03:96:
                    36:67:87:d5:d9:5d:c1:81:f4:57:79:f0:2a:2b:5c:
                    ee:80:3c:e7:4d:8d:64:c9:e4:39:9f:52:8a:35:be:
                    4b:0d:be:af:c1:d3:7d:5a:f5:34:9c:d5:78:d5:97:
                    26:b7:44:28:d3:9b:91:78:95:10:34:6b:9f:bb:7d:
                    f4:11:28:ea:7e:33:df:b8:6f:b9:ec:25:78:e8:b4:
                    cf:8e:10:f5:fc:ce:96:c3:a4:e1:b7:6a:19:3c:f7:
                    ec:71:2c:f6:66:6b:bc:3e:7f:7f:8a:91:19:18:b9:
                    15:ea:34:e0:db:46:7e:af:da:78:d8:3a:75:e7:dd:
                    02:6a:8d:13:f0:d8:f1:a8:f9:88:f2:72:a8:14:a5:
                    fd:76:d6:73:c3:d6:20:14:9d:5d:ef:17:b0:ef:7b:
                    51:d4:05:47:e2:e3:c0:21:29:f4:5e:d0:3c:ae:45:
                    9f:13:ca:6c:e0:78:20:c0:30:84:a2:1a:f0:08:19:
                    c1:2c:c5:e7:8a:80:85:f3:d2:05:2d:60:b2:54:cb:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.24.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42264

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:36:52:f8:e4:03:ae:1b:d4:7a:51:cd:a6:3c:9a:86:f8:
         6f:08:f5:2f:81:00:b2:44:b0:57:c3:15:6d:74:7d:24:bf:65:
         fb:6e:5d:d5:32:98:77:aa:fa:72:2f:ca:21:39:12:84:12:9a:
         a7:a5:8b:47:16:bb:18:bc:57:8f:f4:0b:b7:06:be:c1:66:23:
         38:30:bd:2b:98:77:c8:2e:ac:52:e4:29:db:eb:6a:05:47:20:
         80:77:c8:d7:c0:34:7d:94:94:ad:52:61:a0:ec:ab:5b:e9:89:
         25:35:1b:8f:3c:2b:ca:9f:5a:9f:32:d8:78:d8:8c:b2:f0:44:
         97:f7:6d:e3:4a:fa:d3:15:f3:85:d9:17:0e:fe:7b:78:9f:9a:
         a7:84:c5:9d:77:29:e5:de:c1:98:9c:5c:20:2b:47:fe:81:97:
         01:47:4e:0b:42:5c:9d:63:92:5f:66:2f:fd:a9:83:96:64:bc:
         1f:81:9b:ec:00:97:6a:de:be:c3:3e:20:d7:61:76:2d:76:c5:
         5b:38:a2:41:c6:08:88:e3:39:34:78:4b:f9:79:27:09:a3:59:
         2b:ea:94:79:01:3c:37:88:a6:82:92:13:81:e9:1e:6d:72:22:
         1e:65:7a:c7:48:1a:32:22:33:c8:de:24:bf:25:1e:89:be:dd:
         bb:bd:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----