Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
File:                     QTJyL2byeskHL9x-kx9uGoUTz8Y.cer (raw, json)
Hash identifier:          eGYDQw9gB2lBEXcTo6mtQ7Sp4scQhwUb+6RHK/F4+GQ=
Subject key identifier:   41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01962AC59A748955B506D7E3145D6D381E61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 12 Apr 2025 16:11:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210572

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:c5:9a:74:89:55:b5:06:d7:e3:14:5d:6d:38:1e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 12 16:11:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1d:1a:e2:58:a0:44:01:f8:21:61:de:c8:7d:
                    06:b6:c9:5a:24:0a:df:c8:6b:05:a7:af:65:f2:8c:
                    a5:fe:7d:8b:30:15:7e:7d:d9:28:05:50:8a:bd:9e:
                    75:0f:3e:28:8a:e2:73:34:3a:ee:08:c1:80:60:42:
                    06:40:0a:8f:47:c8:e5:4f:2e:ae:8f:2c:a3:e1:f1:
                    e9:22:71:39:17:98:ac:3a:f2:22:8a:11:28:a8:53:
                    94:c7:55:c0:7f:fd:3d:3b:b9:47:b0:1d:ba:07:b1:
                    7d:6d:55:22:49:27:9e:66:55:71:58:9d:b5:54:dd:
                    4b:c5:88:da:f8:ec:e2:cc:3d:b2:56:c6:93:81:2f:
                    53:5a:1d:b3:3b:f5:b8:0c:22:8c:c3:89:e4:ea:18:
                    f1:99:64:44:ab:fc:ac:56:b9:3a:da:f1:29:8d:f9:
                    f0:5e:57:98:a0:e5:39:3f:e7:24:c5:aa:5e:ab:b6:
                    ca:ed:f2:0f:55:e0:dc:12:ef:e7:b1:5d:ad:ec:5a:
                    5c:41:b2:8b:1b:36:78:b9:7c:db:2a:31:48:bf:dc:
                    df:8a:d6:13:25:44:7d:80:ca:f1:55:72:1d:b8:33:
                    ff:7a:ef:63:84:52:89:0e:55:ba:e6:e1:77:87:b0:
                    64:f0:a0:a2:b1:9c:c6:f2:48:5c:52:59:1d:19:8a:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210572

    Signature Algorithm: sha256WithRSAEncryption
         01:99:9c:e7:c5:12:d5:cc:08:69:83:17:0a:1f:be:bd:27:f5:
         bb:1e:ba:be:c5:d9:f4:82:77:75:b5:68:26:50:e1:df:06:2a:
         d2:0d:55:32:ea:1e:45:2b:4b:66:e1:d0:b1:d6:b3:5d:d5:46:
         45:4c:70:5a:e0:88:7c:3f:83:61:ff:78:1a:ce:89:21:81:56:
         98:87:78:f7:a9:f3:2d:bd:2a:89:1d:66:a3:4a:dc:b8:ac:74:
         38:d3:f1:1e:0b:f6:d4:a8:41:7a:15:6a:70:56:b2:61:12:62:
         d3:52:e0:35:1a:d8:a0:c7:53:8f:a8:93:73:4d:88:17:f6:05:
         d3:cd:1b:97:3b:63:53:22:15:87:41:25:a2:e2:a4:a2:1b:cb:
         6e:d6:d5:7a:cb:8e:31:79:06:43:aa:6e:22:7e:71:14:37:d4:
         21:ed:6a:ab:19:50:64:87:63:28:09:43:01:35:47:f9:23:d7:
         c8:33:bd:46:a8:fc:48:4e:94:c6:99:f5:2e:ae:c6:a4:40:87:
         18:88:a0:f3:bd:17:e2:1d:1b:5f:26:80:c0:83:88:4c:92:e4:
         e9:1d:eb:c1:30:c7:5c:27:a9:44:92:fc:87:77:9e:9b:80:f6:
         2f:7b:23:4b:d4:13:cc:2a:f6:e5:4e:e5:5b:80:ac:e0:7c:c4:
         0a:89:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----