Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
File:                     Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer (raw, json)
Hash identifier:          QHNKLEELYvoIcc9osZBbLCKH4JIlD5TS2n9sm+Pn9wo=
Subject key identifier:   1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCF0F0E66E0AA158BAACD20DFF0E31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210991
                          IP: 195.66.96.0/24
                          IP: 2a12:7940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:f0:f0:e6:6e:0a:a1:58:ba:ac:d2:0d:ff:0e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:c2:35:97:4b:d3:fe:de:4a:bf:f8:e7:d1:
                    aa:2d:15:c8:04:8e:a8:ef:f9:86:35:8d:75:bc:2e:
                    1b:8b:12:a5:12:86:56:21:75:dd:70:fa:d2:b4:49:
                    00:3c:33:c6:21:36:15:cf:13:4f:ed:93:4f:70:c3:
                    ab:ce:01:42:a9:03:cf:1a:bc:ac:73:bb:77:7d:01:
                    e9:53:40:a6:a5:39:8b:68:8e:8e:db:4d:bb:40:1c:
                    e4:f3:f5:d1:25:46:89:61:cb:09:cf:81:01:41:5a:
                    15:ea:a6:28:fa:0a:ce:9e:89:8f:4d:0c:94:10:26:
                    83:ee:35:fa:d2:9a:9e:4e:72:bf:e1:3b:06:d6:d2:
                    af:18:fc:43:00:b0:cb:59:57:94:fa:ab:19:25:7a:
                    6f:29:d0:f4:82:0e:89:da:bc:9e:90:a4:28:20:cf:
                    22:53:0e:63:ef:d5:04:e7:39:9c:29:3b:e6:7d:c6:
                    b6:19:63:34:be:8f:72:1a:30:c2:0c:b8:f5:0b:5a:
                    6a:21:5c:11:b0:8a:c6:20:74:2b:96:d1:90:d7:bc:
                    0b:e4:38:9e:76:98:62:db:a1:31:56:ec:e1:27:43:
                    b6:e0:62:21:70:20:9e:1c:83:6b:3b:2e:13:b0:4e:
                    3e:4d:6b:2d:35:b0:6b:2d:64:24:f1:f3:65:ef:91:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.96.0/24
                IPv6:
                  2a12:7940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210991

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:23:01:c9:db:bf:11:e5:e0:64:eb:6a:72:b7:de:9e:cc:
         a9:14:1d:81:e5:38:23:e3:2c:aa:2c:93:73:d7:d5:1f:5d:74:
         d4:cc:64:fc:1a:ad:d2:e3:b5:99:97:13:08:8a:cc:94:1e:24:
         0b:9b:8d:62:0f:4b:c7:56:e6:65:35:67:db:24:41:74:ad:e4:
         d7:61:f5:6b:b3:d4:b1:57:c9:b2:62:09:89:87:7d:3a:d1:0a:
         11:55:30:5a:c2:c8:4d:05:75:8c:53:34:70:ea:a3:ad:db:c5:
         35:9a:ef:cc:66:49:96:28:58:28:a4:53:82:bd:19:9d:98:09:
         7d:d9:61:d1:3b:7b:97:7d:ba:ca:71:49:95:c9:05:a9:fa:aa:
         9c:f5:b4:e0:69:7e:7f:70:2a:d4:65:2b:b5:c4:bf:b5:ee:88:
         10:fb:a1:c6:bf:4b:68:1d:c8:93:8d:72:07:a0:0f:3b:a1:c6:
         b4:00:30:00:bf:c2:97:60:8a:a3:39:0e:cc:df:1e:a5:87:9d:
         da:96:a0:f7:86:61:2f:b6:88:22:29:cc:da:5a:44:47:74:3a:
         8d:62:7e:e4:f9:c1:96:f2:65:7a:3c:e1:8f:04:e3:17:23:c7:
         0f:7b:8a:b7:00:22:b6:90:34:c9:f2:61:62:2a:c5:cf:ef:55:
         ee:21:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----