Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
File:                     Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer (raw, json)
Hash identifier:          9jSgnx/WrKbO1wx/KFVO7UqoJtGCzjLzDGXPBnfqBOM=
Subject key identifier:   42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D73C860C96900864843F72D986F373
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41289
                          IP: 141.38.0.0/16
                          IP: 2001:67c:1364::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:3c:86:0c:96:90:08:64:84:3f:72:d9:86:f3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:a2:48:17:14:be:d5:2b:8b:bb:c1:3b:0d:
                    4b:91:39:32:bb:66:05:8e:5a:73:0f:59:c0:21:63:
                    58:fd:51:9f:58:72:a8:9e:8b:05:d2:39:22:d8:6d:
                    51:69:0e:e3:60:24:24:bb:bc:4f:31:00:4c:71:f4:
                    70:8f:2c:79:43:6b:d7:68:ab:ae:51:b5:55:7a:f4:
                    17:89:5e:a6:b7:3d:a5:3f:94:57:82:58:cd:e6:f9:
                    fb:59:ad:62:09:49:2d:f0:f3:46:8e:61:fc:13:0a:
                    82:8d:eb:f3:ae:fe:43:fb:60:4a:97:31:3b:e7:29:
                    2b:ac:d8:e8:c9:ec:ce:bb:7a:4d:da:c4:c1:6a:a9:
                    99:f0:53:a2:fc:16:43:4c:88:53:da:80:84:d3:27:
                    27:09:a6:21:8f:0b:96:0d:b5:ce:36:9a:d2:36:84:
                    2f:7f:b3:ea:a0:dd:91:88:98:f1:05:13:72:6b:88:
                    7b:ad:d4:ac:e7:71:0c:67:7e:36:8b:45:f1:ce:8c:
                    84:44:5c:de:b6:f0:3c:72:7f:d5:c9:5a:2a:41:b0:
                    cf:24:56:7a:35:ec:5a:25:e6:c1:c4:da:d7:c9:86:
                    1f:c7:a8:1f:9f:dd:f4:c5:05:18:0f:6d:51:7a:f1:
                    2e:fe:9a:ba:68:c0:b2:98:71:9c:f0:29:bb:c4:35:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.38.0.0/16
                IPv6:
                  2001:67c:1364::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41289

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:84:2b:e8:0e:2b:17:0b:56:6f:ca:00:5b:34:e9:de:e5:
         6d:7e:76:bc:51:2a:4e:8f:ac:84:ad:dd:b6:82:7b:fa:39:63:
         b8:83:8d:ce:c8:62:a6:6c:b7:ee:e2:a8:27:ab:54:5d:1d:2e:
         37:f5:ab:2e:7d:a2:a3:f0:5c:4e:6a:2b:76:82:2a:68:91:de:
         44:9a:ef:d4:94:fa:75:39:fe:3d:a1:4c:d3:0b:4f:64:ea:eb:
         b8:75:6b:b1:3e:b8:01:a1:59:28:6e:36:ba:fe:e8:09:56:42:
         e7:72:e5:79:15:a3:cb:00:e0:dc:a4:c6:dd:da:34:90:e6:c1:
         de:50:1c:97:09:b8:19:36:38:ce:30:06:da:d5:61:82:b7:6f:
         5f:06:f8:84:9b:e7:71:b8:ec:fe:64:56:95:96:f5:b5:71:0b:
         ac:66:fa:8f:b5:bd:41:df:ec:fc:24:76:05:d2:3e:1e:6c:6f:
         46:d9:b9:96:0a:96:df:30:c2:da:a0:3a:74:5c:b1:6f:58:de:
         b4:75:a3:ce:c0:a7:c4:5f:1f:d0:d5:41:fd:68:d3:01:37:7b:
         bc:a7:28:7d:34:ac:43:5d:00:a2:bc:64:ab:8b:12:90:5e:62:
         92:c5:1f:81:3e:f2:c7:a8:37:36:2f:a2:83:ab:56:4e:e6:5a:
         72:c9:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----