Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer (raw, json)
Hash identifier:          QWxCZiIg2BDDXhgnjrA+/tr+kGFXuUs5y/phvc4h84Q=
Subject key identifier:   40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB3C85401BCE7F1B618FDD7B3E1E76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206372
                          IP: 185.175.36.0/22
                          IP: 2a0b:cd00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:3c:85:40:1b:ce:7f:1b:61:8f:dd:7b:3e:1e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:36:5f:6a:25:31:f5:ef:38:0f:25:6e:a8:
                    53:25:49:0b:b6:e4:c6:df:9b:c6:a1:1f:d5:04:74:
                    db:ac:93:28:b9:72:77:3c:06:f4:01:61:d3:93:ed:
                    73:3f:4f:58:9a:25:3b:0d:f6:ca:51:2b:96:05:a2:
                    8c:d3:c3:c5:60:f1:98:4e:2b:0e:90:9e:3d:26:22:
                    99:eb:e4:7a:2d:31:f6:23:4c:fe:c9:0a:ad:3f:21:
                    0f:5c:f4:e3:70:a5:f5:0a:cd:2a:3b:1e:26:dc:bc:
                    f6:ab:70:bf:60:2a:06:c9:0a:fb:33:cb:40:b7:ed:
                    7d:b5:bb:74:e3:09:26:b3:be:93:c3:9c:bf:a0:1b:
                    30:52:d3:e6:b5:2b:c1:2a:47:ab:69:4c:05:ce:f3:
                    26:69:94:d6:2b:fe:f7:05:0a:58:95:25:0d:2a:b8:
                    cf:aa:dd:f0:6d:cf:08:58:24:7e:09:a6:bf:75:56:
                    0c:11:1c:63:3b:fa:3f:b1:17:e3:7d:a5:47:97:57:
                    11:c6:9a:48:65:d6:43:85:c6:2f:7e:4b:de:0a:b6:
                    17:42:d1:cb:e1:c1:c0:82:7a:c8:e8:f3:08:51:5b:
                    c5:ab:21:e0:12:58:f7:95:89:f5:7a:0c:d7:6c:0f:
                    e2:17:5f:d5:36:c6:4c:f2:db:d2:f9:22:21:26:46:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.36.0/22
                IPv6:
                  2a0b:cd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206372

    Signature Algorithm: sha256WithRSAEncryption
         b0:9b:d5:1e:8b:4b:8a:1d:d5:13:60:b1:36:dd:9f:d9:74:0d:
         31:81:21:55:d8:ee:41:8e:ad:47:6d:66:8b:52:fa:f8:6e:b0:
         88:ca:cf:b3:17:43:93:d2:61:fa:52:ed:3f:b7:bd:00:f0:cd:
         30:30:bf:81:8d:dd:7f:80:6f:5c:be:5f:7d:19:6a:7f:5c:e1:
         80:aa:ee:00:1c:61:ab:37:5a:e8:51:e7:6d:39:f4:f4:28:15:
         92:ea:76:45:82:d5:1b:31:66:a0:7c:9c:e6:0f:ac:bc:fd:fb:
         0c:c0:b8:16:f1:bd:d6:10:df:57:b1:5c:3f:5d:48:65:31:48:
         4d:78:ba:d0:d9:02:cb:34:46:2d:5b:bb:20:b6:8a:f3:1c:af:
         eb:70:6d:e0:a7:bf:f7:0d:a7:94:7b:7e:3f:b3:a7:16:38:eb:
         69:cc:44:d9:24:ff:f7:5e:96:d2:94:44:f3:c0:f3:90:cf:d5:
         1b:80:4b:57:41:57:17:4a:e9:81:1b:0f:1c:9e:a7:ad:8f:99:
         5d:0a:e5:11:35:b6:20:4f:54:73:e5:c4:3b:f4:0c:2f:07:fc:
         b1:a9:7a:b1:8d:e6:2c:07:7a:f0:de:ba:31:7f:bc:7b:db:ec:
         71:77:63:59:53:c2:e6:de:2d:b6:63:8f:8d:c8:6b:cd:3a:1b:
         65:a8:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----