Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
File:                     QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer (raw, json)
Hash identifier:          H9xHLHU8X0CsdGWwus9czOjmnKdeT4h3sbVIWSRxoWU=
Subject key identifier:   40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D8B12D78B59FAF12B274A267BC4945
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12985
                          IP: 31.41.136.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:b1:2d:78:b5:9f:af:12:b2:74:a2:67:bc:49:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:74:b8:59:f9:67:c9:ce:80:8d:e7:08:9b:
                    9e:b6:e6:a1:c1:48:cb:e7:a4:cf:79:d2:01:44:ff:
                    24:36:19:0c:dd:91:fd:ca:96:b7:6a:e0:ca:50:8c:
                    2f:d2:15:b4:3a:1f:25:1a:73:56:b6:df:9a:7b:51:
                    65:2d:c8:64:0a:5c:8e:2f:49:d6:a1:1d:2c:43:14:
                    69:d1:03:87:72:c9:7a:22:83:0b:15:a7:3d:c2:16:
                    44:a2:44:ac:8e:91:35:d0:f4:2e:68:99:5d:bb:5d:
                    88:f0:25:09:b6:d3:df:bb:b8:15:79:3a:c5:63:a2:
                    98:a0:16:8a:41:a0:5f:fb:33:f7:f4:94:78:ad:eb:
                    f2:a3:d8:ee:ed:15:fa:56:0e:83:50:7a:cd:08:c0:
                    7c:97:78:41:31:8e:3b:ba:fa:23:2c:c4:68:c4:37:
                    69:57:7a:c4:fe:5f:f2:ae:f2:a8:69:df:14:2a:07:
                    70:1f:57:56:de:d8:82:10:8a:9f:ef:dc:09:78:57:
                    00:49:02:a7:4d:52:32:c9:02:4e:d3:3e:ea:1e:7a:
                    26:10:af:da:c0:8e:c1:b9:c8:29:b7:57:ba:e5:c6:
                    a9:ad:8d:29:91:da:96:47:f1:23:87:7a:0d:76:7d:
                    86:84:7a:f7:17:b7:5b:9d:aa:5a:0a:5b:2f:06:1a:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.136.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12985

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:a0:94:b7:cc:65:8c:9f:31:72:a8:c5:09:ac:a6:a4:79:
         11:fc:75:54:60:52:74:d6:bd:96:80:4c:f8:1f:95:58:c8:23:
         03:69:8d:0e:47:e2:ec:00:31:1d:de:ef:f4:29:aa:ab:55:52:
         7e:d5:d6:86:68:d9:78:d4:29:fd:55:06:18:93:e5:6b:fa:f4:
         ad:59:13:a1:6d:78:22:f7:94:90:be:71:73:e7:a8:9d:ba:97:
         bd:7e:17:e6:d0:7b:d3:6f:26:b6:1f:9d:66:66:2b:9e:13:a2:
         04:a9:91:a3:6b:bd:a2:d8:04:ca:a1:40:42:dc:20:3f:da:99:
         7b:d6:99:03:a0:e7:a4:81:a5:fa:ca:b6:3f:04:18:2e:30:fe:
         fa:14:1c:1c:5c:c1:ca:61:f9:6e:4b:1b:4c:b1:29:b0:ad:d5:
         8c:dd:a6:c0:d2:9f:10:26:91:31:4b:ea:99:4d:ee:a8:21:20:
         43:71:ce:af:bc:92:2d:3b:eb:12:89:b7:78:10:5f:88:f8:44:
         09:54:73:47:2a:5d:17:ae:88:30:a1:ba:60:17:ef:c4:72:d0:
         c4:60:18:df:42:67:6e:86:1a:5b:a2:09:71:cb:5d:56:a6:f1:
         f0:42:9c:0a:a9:58:e5:6a:2f:4e:85:cf:be:87:73:91:b6:76:
         45:20:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----