Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
File:                     QN3nG0G_-xtRbgewxhORvfTTvxE.cer (raw, json)
Hash identifier:          oi+xPEqjiiHmST8MFw+MAymAz8kRL3+IhKOos2qrcCo=
Subject key identifier:   40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195FB31C8159C60122288AE2778F579577F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 03 Apr 2025 10:28:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.213.197.0/24
                          IP: 92.60.64.0/20
                          IP: 2a01:658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fb:31:c8:15:9c:60:12:22:88:ae:27:78:f5:79:57:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  3 10:28:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:3d:3e:d5:0f:b9:5f:df:d4:ad:de:03:42:
                    c7:ff:83:de:88:81:e6:2e:d3:36:53:b7:1b:a8:47:
                    b3:8a:37:c1:61:ff:1e:4d:f1:75:22:87:51:93:73:
                    d6:1b:a4:08:c5:22:da:bb:2f:67:b1:6d:c9:00:e1:
                    d4:59:87:56:d4:b1:53:c6:d9:2d:92:ac:2a:a5:56:
                    2d:a7:4c:e1:3f:58:77:de:a2:26:0e:c3:70:66:ea:
                    46:ec:48:f7:bd:aa:92:80:4a:55:02:69:51:93:f6:
                    b8:6d:37:52:01:f7:21:6c:f0:0b:ba:b8:16:76:f4:
                    b5:9f:ee:66:0c:8f:e4:10:44:31:16:69:dd:2e:d6:
                    8e:cb:30:04:8b:f9:1c:a0:d6:26:1c:0f:40:a9:ce:
                    be:a5:8d:e7:08:a2:8d:ed:b7:1b:1d:37:07:b0:8f:
                    4b:77:0b:60:db:79:49:57:d7:4e:34:8e:3c:73:ff:
                    b1:cc:8f:08:76:7a:d8:78:28:72:fb:24:8d:c9:85:
                    31:31:4f:39:00:7e:ec:9c:4f:9f:5d:72:2f:84:72:
                    78:4b:ee:36:26:ea:1b:09:7b:d5:c2:cd:c0:61:37:
                    bc:85:88:91:e9:97:64:2f:be:a2:c4:b5:e6:a1:04:
                    5b:89:8b:6e:62:60:4f:8e:75:9a:83:09:2d:ec:c6:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.197.0/24
                  92.60.64.0/20
                IPv6:
                  2a01:658::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:19:0c:2d:13:b8:86:43:81:41:9f:0b:fc:bc:c4:87:10:
         5f:e2:8e:65:cc:fb:b6:28:a9:20:2f:c0:13:55:01:09:95:29:
         eb:94:65:f3:00:4c:3c:8f:1c:bf:c5:22:c4:dc:dc:1c:f8:98:
         f6:49:14:78:3b:cf:94:a0:16:50:53:fe:a2:b3:60:52:a6:18:
         53:2a:a9:25:b1:20:5c:aa:96:43:fd:8d:d1:f2:ac:4c:1e:c6:
         36:cc:f1:56:51:b1:4d:ff:67:55:2b:ec:58:d4:1e:8e:9a:99:
         14:c0:49:1c:ad:1b:37:2a:c4:48:c5:4e:56:20:1c:4e:68:30:
         f3:da:0c:30:19:5d:e3:75:9f:50:06:04:0a:54:49:3a:79:0f:
         d3:5a:1f:a2:0d:be:25:84:1a:0b:48:a1:5c:39:57:0d:a5:6b:
         d7:0c:8a:70:3c:ab:70:8f:f9:db:a7:1c:21:98:64:66:fe:36:
         14:36:30:f6:90:3b:75:0b:5c:72:3a:ac:69:54:06:9f:a4:c4:
         b2:6f:29:56:92:bf:36:b5:a8:41:bd:15:29:50:c7:6a:f4:7e:
         cb:2f:a8:cb:08:10:d4:91:68:06:13:26:35:7b:b4:64:3a:c5:
         1b:c6:2c:af:bc:d2:d0:64:c5:be:af:ac:22:82:b8:46:7d:59:
         a7:59:2f:4e
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZX7McgVnGASIoiuJ3j1eVd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDAzMTAyODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGRkZTcxYjQxYmZmYjFiNTE2ZTA3YjBjNjEzOTFiZGY0ZDNiZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrc9PtUPuV/f1K3eA0LH/4PeiIHm
LtM2U7cbqEezijfBYf8eTfF1IodRk3PWG6QIxSLauy9nsW3JAOHUWYdW1LFTxtkt
kqwqpVYtp0zhP1h33qImDsNwZupG7Ej3vaqSgEpVAmlRk/a4bTdSAfchbPALurgW
dvS1n+5mDI/kEEQxFmndLtaOyzAEi/kcoNYmHA9Aqc6+pY3nCKKN7bcbHTcHsI9L
dwtg23lJV9dONI48c/+xzI8IdnrYeChy+ySNyYUxMU85AH7snE+fXXIvhHJ4S+42
JuobCXvVws3AYTe8hYiR6ZdkL76ixLXmoQRbiYtuYmBPjnWagwkt7Man+QIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFEDd5xtBv/sbUW4HsMYTkb30078RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzk1NjJi
Zi05MmJjLTQ2ZWItOWQxNi0yYmFkY2U0NjY4NTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOTU2MmJm
LTkyYmMtNDZlYi05ZDE2LTJiYWRjZTQ2Njg1My8xL1FOM25HMEdfLXh0UmJnZXd4
aE9SdmZUVHZ4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAW9XFAwQEXDxAMA0EAgACMAcDBQAqAQZYMA0G
CSqGSIb3DQEBCwUAA4IBAQB45hkMLRO4hkOBQZ8L/LzEhxBf4o5lzPu2KKkgL8AT
VQEJlSnrlGXzAEw8jxy/xSLE3Nwc+Jj2SRR4O8+UoBZQU/6is2BSphhTKqklsSBc
qpZD/Y3R8qxMHsY2zPFWUbFN/2dVK+xY1B6OmpkUwEkcrRs3KsRIxU5WIBxOaDDz
2gwwGV3jdZ9QBgQKVEk6eQ/TWh+iDb4lhBoLSKFcOVcNpWvXDIpwPKtwj/nbpxwh
mGRm/jYUNjD2kDt1C1xyOqxpVAafpMSybylWkr82tahBvRUpUMdq9H7LL6jLCBDU
kWgGEyY1e7RkOsUbxiyvvNLQZMW+r6wigrhGfVmnWS9O
-----END CERTIFICATE-----