Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer (raw, json)
Hash identifier:          Wrk4yla84yjaCFa5C72K0XtlcmCVW40I2L9KEurBQhc=
Subject key identifier:   41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA04C1EAB50CE00E979FDDD46F5323
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208095
                          IP: 45.159.28.0/22
                          IP: 2a0f:67c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:04:c1:ea:b5:0c:e0:0e:97:9f:dd:d4:6f:53:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:cb:9b:e0:40:a3:2d:cd:b5:31:2e:03:f4:
                    ee:8a:04:9a:05:ae:9e:4a:48:a0:7f:19:ea:55:57:
                    37:07:55:50:12:e2:55:99:35:dd:f6:9d:fc:74:62:
                    99:c0:cb:c6:82:53:bb:94:ca:d5:80:01:84:a8:5f:
                    6b:7e:7d:7b:1a:a7:4d:07:7d:68:9a:a0:43:fa:a5:
                    8a:20:ed:32:eb:c8:a6:0b:f5:e7:de:97:92:2f:4d:
                    b6:6c:f0:f3:3c:b5:2e:81:db:94:66:9e:95:fb:04:
                    74:cc:13:75:d2:ec:7c:5e:7c:39:96:a7:40:c9:6a:
                    60:53:d1:0b:7d:d7:db:77:df:c0:d7:49:40:5b:05:
                    d6:e3:66:93:a6:f0:6c:e2:d0:6a:6c:ca:96:c0:fe:
                    82:e2:36:c3:d6:ad:b1:3e:e1:c2:78:a6:73:3d:af:
                    ad:d3:08:19:c6:08:57:a5:6d:74:e5:1a:32:2e:83:
                    ad:cd:a0:07:e0:18:78:38:d7:b6:80:66:92:6a:39:
                    fe:2b:ba:e9:7e:ed:6f:94:df:0c:f7:8d:0c:19:15:
                    25:ba:e8:72:d8:7f:a4:8c:15:c0:29:89:6c:38:eb:
                    76:11:eb:7b:53:0b:ef:05:e4:3e:69:bb:19:67:27:
                    e0:cf:05:80:9c:51:e6:ef:db:d1:a6:4f:ad:94:dc:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.28.0/22
                IPv6:
                  2a0f:67c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208095

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:5b:4c:26:0d:c2:47:a6:4d:17:90:5d:b1:5e:89:bc:6b:
         f4:f2:94:70:21:61:96:32:89:db:b6:31:fb:70:16:d3:df:87:
         ec:de:31:0a:d9:41:2f:b8:05:fe:5a:ff:53:ae:37:0f:20:70:
         5a:92:18:ab:de:f5:92:39:6c:1e:53:09:f2:af:b5:de:47:2a:
         2d:d1:74:02:0c:9f:84:6b:4c:36:f3:ed:ee:ed:c2:d6:5e:7d:
         76:9f:0b:8e:c3:5c:6a:46:2b:b6:79:fa:c3:1f:ef:ff:70:d9:
         26:78:48:12:94:86:ec:ab:b7:b6:2e:f3:14:8f:b8:ac:63:3c:
         80:21:84:ab:9e:7c:41:e3:08:0f:cf:28:dc:48:0c:fd:84:87:
         db:7a:1f:0c:e4:20:db:54:dd:20:71:25:50:f7:27:2f:43:fe:
         9b:60:0a:af:1f:56:35:69:ec:10:16:a8:36:de:9a:7a:31:b5:
         86:58:21:40:9e:04:bc:f1:a7:71:2f:7c:59:54:83:57:81:46:
         5a:a4:b2:bf:a1:b9:3e:75:1f:ec:6c:e1:2d:73:33:18:59:c9:
         1f:eb:03:df:a6:7b:2b:ed:5c:e3:81:75:d6:d9:0e:0a:6b:84:
         09:d3:5c:48:c6:ce:8e:9b:a3:8b:f0:12:fd:96:19:0f:09:a3:
         d3:33:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----