Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.cer (raw, json)
Hash identifier:          DHqBcGYOCsEEFwSs+/vLzqg87BbT6qFBWrzCrJTFwD0=
Subject key identifier:   40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D98F65EB49C1365AF86A2D8B872FB2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211993
                          IP: 185.233.34.0/24
                          IP: 2a10:de80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:8f:65:eb:49:c1:36:5a:f8:6a:2d:8b:87:2f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:e8:f8:6e:05:f5:ea:f1:fd:4e:c9:a8:6f:
                    c3:6f:be:1d:f3:d0:1a:61:85:10:6b:0c:ac:81:f9:
                    69:bf:1e:2e:ed:19:b9:17:b9:82:39:f4:ff:c1:f5:
                    cb:a7:30:83:69:44:1c:23:4a:d7:c3:23:38:bf:56:
                    08:5e:c3:61:5e:57:30:c8:db:ab:e4:f6:05:5a:1f:
                    05:01:5e:24:b3:9a:85:8d:56:04:fb:0c:33:5c:d5:
                    ab:a3:e2:f4:4c:92:d2:16:7f:bc:43:43:9b:2b:b9:
                    f7:c3:0c:54:a2:02:f5:d0:3f:c7:ce:97:35:19:0f:
                    9e:bb:99:2e:1e:38:79:82:c1:a9:f4:67:9c:4f:36:
                    57:79:ac:b8:e4:8e:bd:20:6e:6d:ee:21:a7:73:46:
                    50:a9:cc:05:6e:9e:48:ea:83:9f:ac:50:1a:4a:8f:
                    7c:26:7e:b2:07:4f:64:8d:54:5a:0e:bd:7d:a0:0d:
                    b3:d9:a7:1a:9c:9f:d2:dd:e2:c0:d3:61:cf:79:34:
                    6f:e0:85:55:0a:08:20:8e:11:d2:b5:54:9e:c6:86:
                    23:22:7e:f2:4e:4b:fc:5c:17:1a:f7:28:fe:6e:1a:
                    44:97:55:be:2b:0d:89:17:d1:79:d5:1a:a6:c8:85:
                    fc:eb:61:d0:cb:63:1e:ce:4e:61:38:fd:8f:04:d4:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.34.0/24
                IPv6:
                  2a10:de80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211993

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:52:4e:4f:be:99:44:41:0c:24:fd:c5:a8:a2:50:c8:5a:
         b0:f4:f8:10:06:63:78:0f:2d:89:d4:8a:1f:c7:8a:d6:ab:0e:
         a2:64:58:53:8f:73:e1:ea:43:a7:4f:29:a7:3b:d0:ba:86:64:
         4a:bd:d4:75:75:9e:29:d5:c7:2f:98:d7:cc:c6:6a:c4:2e:4d:
         bf:aa:09:a5:d9:7f:f2:8c:e9:67:10:85:23:6c:1d:cd:04:6f:
         ba:79:89:b6:1f:54:2e:c3:b3:36:70:38:6f:e7:c0:e3:cd:d6:
         82:c9:1e:cf:3e:e4:8e:ac:ab:d6:5d:96:9d:c5:ff:7e:75:bd:
         64:d0:13:22:fe:af:42:e1:1c:04:bf:0d:fd:cc:9c:bc:f6:e2:
         ab:27:9f:9f:a5:06:a9:bd:6e:6b:1d:89:68:e8:d7:35:37:1f:
         69:ae:42:e9:32:52:2f:01:fb:96:29:10:d9:20:e6:c4:0f:52:
         6b:56:14:e0:69:fc:81:04:f6:7a:99:58:dc:e3:3a:16:f9:00:
         31:d4:0f:a2:cd:93:3f:bf:93:cd:ae:1b:68:ef:51:9b:68:6a:
         e6:6d:10:80:11:9c:f2:b0:4c:01:06:35:47:f1:13:e0:18:4c:
         40:27:df:16:e4:c9:90:46:09:cb:b8:2e:a4:4f:de:1f:0e:0d:
         16:e4:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----