Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
File:                     NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer (raw, json)
Hash identifier:          /mWkWiRwS3UmoKrL6MySpPhHAmSiVbNwyPhcjowWiO0=
Subject key identifier:   35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425215F77CCAE1E342179A4156A182D74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200911
                          IP: 185.88.120.0/22
                          IP: 2a03:7de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:5f:77:cc:ae:1e:34:21:79:a4:15:6a:18:2d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3501772457e0f827b9e920b00cd114824a5fa621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:10:27:03:9d:30:19:9b:01:fa:04:4c:b3:
                    e5:60:f2:ca:b0:0d:aa:a7:d5:28:38:bf:26:4d:66:
                    f5:1d:92:61:92:e0:2e:93:a1:f6:fe:8f:7e:d6:9f:
                    c9:ec:b1:d7:82:8a:4c:50:b6:93:24:4f:c2:1a:d9:
                    ee:22:7d:65:ce:fc:b8:25:e4:2a:2a:33:97:88:de:
                    f7:c6:6a:8e:8c:42:83:eb:1f:1e:a4:8d:69:c9:c4:
                    44:d4:11:d8:c4:b2:ff:4d:9a:3a:d4:c7:27:df:34:
                    59:c8:23:48:da:c7:05:7d:61:1f:f3:bc:d4:26:ed:
                    99:6b:13:9f:33:31:8b:02:06:04:75:4b:df:cb:97:
                    6c:9d:8d:88:84:7c:7e:fa:07:e1:98:91:89:9a:a4:
                    b7:17:e5:8d:d1:54:a9:3d:f5:83:5b:92:07:b6:28:
                    a9:11:16:6f:51:6a:2a:46:b0:45:f6:41:d9:f4:a4:
                    15:8c:c5:8e:03:b2:26:ba:1c:4e:f7:2b:fb:95:ea:
                    ef:2e:75:3a:06:aa:61:b5:70:5d:2d:be:1c:93:40:
                    2d:97:03:c2:99:9f:ad:a0:fa:e0:36:f7:c2:4c:01:
                    ef:c7:3f:d0:93:e0:ce:2d:c8:ae:f0:d2:82:48:3e:
                    ca:a7:0d:9b:5d:50:d9:21:4e:b8:53:da:ce:59:71:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.120.0/22
                IPv6:
                  2a03:7de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200911

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:41:67:10:fc:41:e1:e0:14:3d:7c:b0:15:a1:e4:f8:30:
         58:1e:1c:5b:da:18:8a:ff:4c:8b:bf:e4:30:6e:22:eb:08:3c:
         e6:fa:6a:ff:28:86:d7:b1:b2:6e:13:35:67:c6:ce:20:83:18:
         71:e6:6c:75:3c:ad:f4:ec:0c:12:7d:e0:7f:06:bf:5b:02:95:
         fb:0c:ea:c6:39:1d:1b:5e:3d:a3:18:d0:d1:4a:c4:34:e8:d6:
         10:f5:75:61:eb:a2:5b:75:cd:e8:0b:94:8d:17:f4:14:13:02:
         85:a2:47:88:3e:1b:5c:ae:c4:08:9d:22:cd:52:64:4a:c2:5a:
         41:62:ae:f4:92:ed:2d:9f:4f:5c:25:05:6b:13:19:56:b2:cd:
         05:75:d3:30:22:76:84:ee:41:68:09:c1:50:7d:2f:b8:d1:cf:
         c5:2d:07:f9:55:3c:4f:14:39:2a:4f:56:f4:2b:17:0d:27:6c:
         94:7f:2c:67:be:1f:41:5e:57:b2:a5:c0:42:af:c4:07:d5:51:
         bd:bf:f7:7e:b2:53:34:b6:89:bd:20:71:63:f1:ce:97:ec:fe:
         fa:3f:36:13:08:fa:97:ae:58:fd:e1:42:a1:8b:60:cd:4e:95:
         03:2b:35:1b:77:97:d1:f1:76:1e:54:c4:b6:dc:36:9c:8f:a3:
         d7:ed:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----