Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
File:                     QGYnM7yHPRPh-fZujf91yCDV0vc.cer (raw, json)
Hash identifier:          W1j+KGp0pHu8Dlfm/YUJN8EHQUNTlWfXivJ2pkc5QZg=
Subject key identifier:   40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E30FF4269ED5AE36DD98D09DE7343
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56488
                          IP: 217.28.136.0/24
                          IP: 2a12:2540::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:30:ff:42:69:ed:5a:e3:6d:d9:8d:09:de:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:07:07:69:e1:cc:a2:d0:d8:dd:db:f3:95:
                    af:b8:06:fe:ca:0b:7f:5d:44:ab:5a:3a:c4:12:81:
                    bf:a0:02:5f:eb:00:1d:c1:2f:24:32:3a:16:ea:2f:
                    28:2c:af:cd:f5:5c:42:f1:0c:5e:7d:3a:53:84:af:
                    16:5c:c0:23:2f:d5:8a:8d:31:58:9f:2f:7d:92:02:
                    8b:d9:a9:f3:8d:c0:af:e1:03:5f:be:5a:05:d5:c6:
                    70:d4:06:3b:30:59:e4:fe:1d:c2:b1:8c:6e:a4:6d:
                    eb:37:53:3e:46:c7:07:48:f0:5a:0f:bf:23:a6:9a:
                    ef:4a:85:ad:f5:8a:74:09:60:75:ad:1c:7e:ec:9f:
                    6f:57:b3:06:81:cf:b6:6f:f1:f5:21:0e:ea:e9:6b:
                    8b:f9:27:df:06:c4:b3:ec:3a:44:e0:59:a0:51:3c:
                    6c:f6:64:62:1e:24:57:fe:9e:ce:aa:70:91:11:6a:
                    7e:3a:a6:bf:2f:25:31:b9:8d:8d:b8:b0:c6:bf:6c:
                    ad:98:4a:59:76:65:3f:62:b4:e1:a4:92:0f:4a:b7:
                    19:27:fb:7a:a3:3a:3a:c5:22:85:b7:f9:db:8e:07:
                    03:1e:fa:7f:42:33:7e:8d:f4:94:5f:13:82:9c:50:
                    dd:68:f4:92:d2:83:5d:5d:93:ba:e7:ac:a1:02:46:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.28.136.0/24
                IPv6:
                  2a12:2540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56488

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:3b:26:a5:c8:d7:03:d1:82:8a:8e:f2:e8:66:14:f2:5d:
         76:8e:06:10:b7:9e:30:9f:dd:31:85:d5:91:49:e7:78:10:53:
         36:f7:fe:e4:13:fa:6e:a4:d9:d2:46:bc:50:c4:9e:d5:c0:69:
         95:73:06:01:10:b9:dd:d6:6f:28:3f:da:e9:9f:7b:44:fb:7d:
         9e:a9:b4:33:50:5c:c9:ef:31:86:ea:66:39:b8:8a:b8:5f:07:
         99:5b:c0:5d:c8:9e:ee:5e:21:93:8e:aa:92:8b:0e:67:25:4f:
         d9:c2:ed:99:49:1a:e6:aa:57:bb:d3:0c:19:b6:f2:49:38:a4:
         5f:81:fb:5b:91:f5:37:da:02:0d:fb:1f:50:0d:0e:f3:93:63:
         c1:b1:86:9a:f6:38:b0:09:02:76:2b:76:af:f8:25:c2:70:77:
         16:f0:23:ab:a8:21:cd:ef:1f:4c:6b:45:54:85:41:cb:06:af:
         69:d4:59:00:59:45:5e:70:80:c5:14:0d:30:73:e0:8e:48:9d:
         44:2a:af:d1:61:bb:b0:89:f7:d2:6f:c7:b3:f0:7c:8a:fb:55:
         ec:c5:af:ec:f1:00:af:f1:e5:ce:42:fc:7d:c1:86:d4:21:ed:
         42:42:8f:53:75:07:67:7d:5e:85:aa:9a:d9:15:69:5a:13:97:
         a0:39:10:e8
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQijjD/QmntWuNt2Y0J3nNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDY2MjczM2JjODczZDEzZTFmOWY2NmU4ZGZmNzVjODIwZDVkMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN8HB2nhzKLQ2N3b85WvuAb+ygt/
XUSrWjrEEoG/oAJf6wAdwS8kMjoW6i8oLK/N9VxC8QxefTpThK8WXMAjL9WKjTFY
ny99kgKL2anzjcCv4QNfvloF1cZw1AY7MFnk/h3CsYxupG3rN1M+RscHSPBaD78j
pprvSoWt9Yp0CWB1rRx+7J9vV7MGgc+2b/H1IQ7q6WuL+SffBsSz7DpE4FmgUTxs
9mRiHiRX/p7OqnCREWp+Oqa/LyUxuY2NuLDGv2ytmEpZdmU/YrThpJIPSrcZJ/t6
ozo6xSKFt/nbjgcDHvp/QjN+jfSUXxOCnFDdaPSS0oNdXZO656yhAkZAPwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEBmJzO8hz0T4fn2bo3/dcgg1dL3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2Q5MTBk
MS05NGM2LTQ0MTItODUwNi05Y2I1MWU1MWZmNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZDkxMGQx
LTk0YzYtNDQxMi04NTA2LTljYjUxZTUxZmY3Ny8xL1FHWW5NN3lIUFJQaC1mWnVq
ZjkxeUNEVjB2Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA2RyIMA0EAgACMAcDBQMqEiVAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDcqDANBgkqhkiG9w0BAQsFAAOCAQEAp347JqXI1wPR
goqO8uhmFPJddo4GELeeMJ/dMYXVkUnneBBTNvf+5BP6bqTZ0ka8UMSe1cBplXMG
ARC53dZvKD/a6Z97RPt9nqm0M1Bcye8xhupmObiKuF8HmVvAXcie7l4hk46qkosO
ZyVP2cLtmUka5qpXu9MMGbbySTikX4H7W5H1N9oCDfsfUA0O85NjwbGGmvY4sAkC
dit2r/glwnB3FvAjq6ghze8fTGtFVIVBywavadRZAFlFXnCAxRQNMHPgjkidRCqv
0WG7sIn30m/Hs/B8ivtV7MWv7PEAr/HlzkL8fcGG1CHtQkKPU3UHZ31ehaqa2RVp
WhOXoDkQ6A==
-----END CERTIFICATE-----