Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
File:                     Q5i1d7IjtadjUSGadP2kRnBIkPc.cer (raw, json)
Hash identifier:          JZKuStAWKmowMYSkd/Ld7zu9Luu6GnMxwdK+g4aV+CI=
Subject key identifier:   43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194222005F638A293C18108EBB2D7993DB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212323
                          IP: 185.209.12.0/24
                          IP: 2a10:d200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:05:f6:38:a2:93:c1:81:08:eb:b2:d7:99:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4398b577b223b5a76351219a74fda446704890f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:3d:5e:49:15:0c:7a:61:56:93:85:f0:db:
                    d3:fd:cb:94:71:fe:86:07:78:0a:7b:24:4c:29:fd:
                    72:d6:08:44:07:99:ec:2a:5f:c2:08:f1:15:32:a7:
                    86:89:48:75:49:7d:51:0e:8d:fb:93:53:d4:4e:23:
                    c8:38:0e:6a:bd:b0:65:66:97:5a:f1:fe:4e:75:a6:
                    cb:c2:8d:44:fb:ea:68:f1:9e:dd:48:03:5b:17:e5:
                    3d:26:dc:e7:2a:a3:bf:7f:41:a4:b9:71:6e:66:b5:
                    f5:a9:e4:0b:28:d6:a8:8c:6a:62:64:83:1e:d1:44:
                    23:bc:47:5a:4a:32:20:a1:81:08:d1:38:bc:e7:6a:
                    28:79:e8:81:93:f9:3e:dd:15:06:0b:5c:11:b0:88:
                    96:71:1d:ea:53:b1:4e:89:df:68:25:c0:25:7f:f0:
                    7e:3d:b8:28:3c:5d:41:9b:d5:04:fa:70:d1:b2:1d:
                    b4:95:f9:11:e0:bd:6b:fd:15:19:9a:ab:ca:8f:d8:
                    a1:a5:ac:29:70:af:3b:42:99:a3:3d:a4:5f:3c:81:
                    ac:2a:53:19:72:f5:5b:0f:0d:a1:54:f0:3c:eb:e2:
                    e8:3c:e8:b7:aa:f9:d3:39:90:5b:c9:13:78:60:98:
                    4f:41:14:6c:85:a9:b9:c6:82:53:f1:3a:24:55:26:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.12.0/24
                IPv6:
                  2a10:d200::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212323

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:fc:df:62:39:94:a1:b8:19:9e:64:0b:d0:05:4b:cc:4a:
         13:78:f6:e9:50:d2:84:76:46:82:6c:cf:f6:97:a8:d0:7c:36:
         49:d3:55:a2:74:e0:ba:b5:b0:91:de:11:c3:f7:5e:c6:43:39:
         37:15:c9:29:d1:77:72:15:4c:20:a0:2d:76:80:af:2e:77:2c:
         9b:ef:16:b4:3e:0f:33:2c:56:f9:8a:a2:cc:32:89:18:05:b0:
         66:3d:c5:2e:dd:c2:e0:35:2c:5d:9f:b0:cb:6c:b0:73:6e:82:
         30:bc:ff:ed:a7:96:c4:ee:93:01:3f:a9:45:59:bf:73:4c:47:
         3d:bf:98:e0:bb:7d:70:d9:ee:41:eb:9b:e7:7c:b2:0b:b6:b9:
         c6:fc:9c:6c:37:7b:b4:95:42:56:bc:9e:48:7e:31:0e:a0:1c:
         b7:4b:d8:38:e4:6a:69:64:6b:47:2b:e5:a9:3d:b1:a5:c2:56:
         62:50:28:c3:ce:69:42:d8:69:47:a4:86:59:09:d6:0f:65:ff:
         84:af:6c:98:0b:5b:c7:84:8a:76:cd:4f:cd:3a:b3:72:17:1e:
         69:69:25:19:1d:55:37:36:79:39:86:97:8b:cd:2d:01:04:37:
         ff:3c:68:11:ab:c5:a0:cd:c2:ee:07:5e:3c:29:f7:46:1c:c6:
         a9:9c:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----