Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer (raw, json)
Hash identifier:          KQlJzjAYZGL28AsQiSY4+RdCwEHE5N84IAVfeyiT/Lo=
Subject key identifier:   19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3F367002DC28CA2E5F526FA7349F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.250.192.0/19
                          IP: 37.114.128.0/18
                          IP: 185.91.208.0/22
                          IP: 2a01:9240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:f3:67:00:2d:c2:8c:a2:e5:f5:26:fa:73:49:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:57:fc:be:b4:bf:e6:1f:c1:51:f2:6c:0c:
                    76:29:f7:c8:96:51:34:b4:7a:48:8e:90:f0:60:21:
                    75:27:dd:a4:f3:de:ae:ee:7c:75:c3:82:4e:34:42:
                    0e:4b:17:81:65:a7:d7:25:71:b4:07:89:21:4a:72:
                    54:8c:98:5c:f9:f4:d6:d1:b9:46:53:cb:c7:72:e7:
                    38:6b:6d:2e:a3:08:37:41:06:ee:c9:89:e9:cf:cd:
                    8b:ac:6a:46:cd:e9:ef:43:0e:be:fb:55:78:cc:90:
                    a7:31:cd:b7:b9:61:1b:01:d3:e8:1b:9a:47:31:60:
                    b2:0b:bf:d0:a5:37:27:08:e9:53:ef:e9:38:b9:72:
                    c7:b4:8a:92:39:5c:d3:6d:6e:f8:8a:32:51:65:d7:
                    b7:6e:43:a8:1e:67:d4:bc:88:0d:2c:79:23:dc:15:
                    9e:a6:b3:50:26:dd:da:ba:c3:38:c1:16:e4:8c:0c:
                    99:7d:0c:4d:5a:30:74:aa:bc:bd:42:80:c8:a0:ee:
                    7e:f9:8a:2a:70:01:ad:11:83:f4:63:77:2d:29:81:
                    15:28:9a:02:89:c8:9b:cc:73:ee:fd:9e:35:e4:14:
                    78:ae:49:46:2e:fc:cd:b5:4d:dd:46:30:29:61:12:
                    4c:13:ae:be:e7:a4:eb:c7:94:f2:99:ad:52:b4:dc:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.250.192.0/19
                  37.114.128.0/18
                  185.91.208.0/22
                IPv6:
                  2a01:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:43:7e:f1:da:7e:ba:c3:53:c4:66:38:a7:f2:76:e0:84:8c:
         f2:cd:07:a2:50:49:d3:5a:21:cc:5c:98:77:33:51:ef:84:a8:
         de:6f:12:e1:d4:4e:c3:e6:4e:2c:5d:15:bd:00:b8:90:87:23:
         5b:0b:a5:e9:99:00:c9:6c:1b:f1:9f:2a:ca:f0:05:26:83:3f:
         e2:90:c7:56:3e:98:65:9a:de:06:ba:a7:c1:cb:2f:28:ed:33:
         c2:88:a2:a9:2c:21:2e:6a:59:c0:38:25:e8:4b:84:7f:ad:88:
         1e:f5:bd:3d:b6:fc:bf:90:58:61:ed:23:12:bf:44:95:5c:c0:
         7d:b4:1b:77:9d:db:4e:cb:2e:20:a3:80:c1:82:2b:aa:26:58:
         17:da:32:cb:c3:84:94:fe:62:52:53:21:af:5f:4d:e2:b9:0f:
         4a:64:cf:d6:7a:eb:48:29:3d:e2:6e:a4:c7:92:fd:79:12:dd:
         78:1c:96:34:9b:ec:2e:5a:38:8b:c3:42:9e:b3:0c:cb:fa:37:
         9f:02:0b:0b:20:8a:cf:02:97:07:e5:55:a9:c1:3e:d2:52:82:
         c8:e4:e4:7c:eb:96:71:e5:3a:da:22:00:27:8c:f1:1e:34:0b:
         f0:fe:31:d6:02:36:30:3d:60:65:e0:2a:92:ca:ba:f4:84:a0:
         8c:b8:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----