Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.cer (raw, json)
Hash identifier:          l5DDQYbzToaZigK5R4+Z/DwM2ioI1LvYGh0SmCfGOsM=
Subject key identifier:   19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5C16B8D06347782A5994B1DA8394F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25538
                          IP: 91.210.72.0/22
                          IP: 193.110.90.0/24
                          IP: 217.10.0.0/20
                          IP: 2001:1410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:c1:6b:8d:06:34:77:82:a5:99:4b:1d:a8:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:86:15:57:c6:57:5f:90:91:5c:52:55:35:
                    65:9b:25:a9:bf:75:e7:d3:d6:02:12:06:71:32:4f:
                    4d:fb:9e:52:09:14:ad:3d:5f:9b:63:ac:bb:6e:94:
                    1c:4d:51:7e:ba:ec:e0:07:0b:33:65:38:6e:4f:cc:
                    c7:a5:49:55:f0:f1:14:b0:ff:cd:c0:85:fb:84:30:
                    ac:8c:64:d0:f0:2b:1c:25:b9:82:04:05:56:b1:49:
                    6f:d9:1a:62:b7:c2:54:19:30:17:e0:11:cc:68:6d:
                    7c:71:d3:bb:e2:92:78:ee:a3:bf:53:54:4e:57:52:
                    ca:2f:35:fe:1a:9d:d4:11:72:00:1a:d9:b7:f0:bd:
                    9d:ab:cf:3e:4f:22:28:d5:5b:a5:cc:c8:ba:5b:0f:
                    74:a4:8d:cc:dc:83:b5:4f:2f:42:61:84:d4:85:16:
                    bf:29:e8:c3:9e:ff:d3:25:d4:35:5c:23:34:ee:18:
                    ed:6f:62:4a:a3:cc:d0:55:2d:66:48:18:16:fa:aa:
                    c8:7e:7c:81:59:91:cc:ea:eb:27:27:d6:81:c1:5e:
                    67:20:2d:42:04:04:87:4f:c2:d1:a9:55:40:e6:d3:
                    65:a2:e4:55:cd:f7:9f:51:6c:76:d6:e0:4c:d1:c8:
                    14:35:5b:a1:e1:b0:b0:ca:5b:fb:50:4e:a4:47:d1:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.72.0/22
                  193.110.90.0/24
                  217.10.0.0/20
                IPv6:
                  2001:1410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25538

    Signature Algorithm: sha256WithRSAEncryption
         af:96:75:d5:80:68:62:6f:4a:50:d1:08:bd:f9:34:1b:cc:af:
         4c:f5:d3:9b:0b:69:83:98:34:3b:91:fc:59:3b:5f:99:bf:0d:
         e8:1b:62:54:8b:e8:f8:7f:9f:fa:88:33:f4:71:4b:b5:eb:96:
         41:72:79:fd:b4:b5:00:c5:59:71:a1:b1:31:26:ec:2c:74:7f:
         21:ab:1d:d4:3a:6c:1a:ec:28:4a:bf:fb:d7:ad:ee:0e:dd:2d:
         e6:92:c7:d8:58:e6:5b:62:5e:67:ab:1f:36:a7:14:6a:60:2d:
         33:f4:a1:12:74:20:4b:a1:9f:83:95:3a:84:8f:b6:e6:97:18:
         2e:b5:52:71:a3:ba:96:b5:a3:ca:71:1a:7b:e9:f0:b7:9f:e1:
         b1:b9:af:ab:5a:07:12:96:82:d4:6f:59:91:05:f9:98:af:33:
         9b:78:5f:81:34:eb:e4:ee:6b:e7:f0:ac:1d:fd:88:17:e9:54:
         d3:5f:e6:e2:02:60:e8:76:1d:72:f2:6a:f7:43:78:1f:87:5e:
         2f:7d:4a:18:ce:e1:05:96:83:1e:68:99:54:56:57:a2:e7:12:
         3f:4b:ab:31:23:9a:16:88:a7:e0:a0:67:69:27:c6:d5:05:6a:
         5c:76:22:08:f5:de:c3:ed:7c:84:b1:10:cb:11:04:ab:ea:60:
         f8:f6:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----