Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
File:                     Qkq4x890A7ViChuBPmrR2g2stE0.cer (raw, json)
Hash identifier:          cCZYCfCqI0uDumIVE0Byx4lI35kk/DNjLLdx/GxpN8w=
Subject key identifier:   42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143950262760A4197E4584299409A78
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.188.108.0/22
                          IP: 2a0b:bf80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:95:02:62:76:0a:41:97:e4:58:42:99:40:9a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:c6:ba:15:1c:52:95:92:28:6f:7b:19:24:
                    63:36:41:da:d5:02:04:2a:c6:5e:6b:ce:1f:22:3e:
                    48:4a:7e:ae:df:ee:5c:ca:30:ba:24:a6:0f:fa:e5:
                    7c:51:a5:50:38:fb:bb:f3:78:4c:1b:f3:a0:d4:18:
                    00:80:94:69:ac:ce:0e:03:5f:a8:bf:ba:33:67:c0:
                    34:cc:3d:35:af:cd:3b:ec:45:53:2b:11:40:da:25:
                    e0:ad:cb:3e:93:50:2d:d9:83:f0:07:12:fa:b6:bf:
                    d3:e7:35:f0:c0:ae:48:00:70:b5:87:83:dd:3c:5d:
                    0f:10:cb:8c:bd:8f:74:e6:ed:c3:27:8e:43:40:f5:
                    3f:53:70:93:20:c1:b9:a1:07:94:a0:3f:5b:70:b1:
                    da:c5:dd:61:75:c2:11:be:ee:97:4a:11:28:3f:75:
                    b0:58:3e:10:c0:0f:d8:7b:68:f1:e5:2c:3f:3d:b2:
                    03:8e:b2:56:d1:af:a9:2d:f3:ec:3b:1b:f9:86:27:
                    4a:23:9e:04:b6:01:a1:55:00:a7:e1:64:f5:30:77:
                    63:2f:0d:14:e7:3a:48:a2:73:a3:a3:97:69:84:33:
                    70:2f:eb:2a:4f:4b:79:d0:3f:32:a8:90:ec:79:3d:
                    16:e5:8f:9b:45:b7:de:b4:69:7a:d3:e5:f3:d6:e6:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.108.0/22
                IPv6:
                  2a0b:bf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:2d:b7:09:d5:c2:ee:16:3c:9d:63:6b:0b:1a:33:df:7e:
         8a:a5:1d:ce:a9:51:d7:b6:4f:be:e1:8a:aa:b1:4f:51:c7:e9:
         2f:ec:96:98:2a:05:65:8d:ad:72:c6:34:70:e1:18:a6:71:00:
         34:a4:35:0f:ca:e8:18:a0:d2:f8:4c:5b:d2:0b:62:20:f3:85:
         3b:10:81:a2:96:c5:91:9a:3f:d1:08:b9:a9:39:c5:bb:d4:52:
         a0:d3:d0:ee:14:42:63:bb:e3:0e:77:30:94:f8:62:12:f8:2b:
         3a:58:14:37:a9:b9:44:7e:3f:e9:3a:e2:6e:8c:3f:ec:9c:89:
         03:27:76:52:32:52:86:c2:2d:eb:de:69:a1:fd:e7:aa:8a:f1:
         0e:54:da:76:d4:19:77:bd:9f:5e:93:40:4d:dd:20:b6:ec:a0:
         b0:8f:3e:1f:c5:2f:f1:76:14:19:de:49:4e:71:c7:59:36:60:
         4c:32:e2:7a:59:99:07:31:ac:a1:c6:19:8c:d7:0e:60:ce:47:
         bc:1b:e1:bb:43:49:c4:45:07:34:52:d2:83:31:1b:89:29:41:
         4d:3b:8d:85:87:b8:a7:7e:b2:84:ee:8f:70:38:c9:25:23:d3:
         39:96:f7:6c:f1:bb:7f:c4:2c:5b:78:52:7b:af:b7:61:c4:a6:
         da:68:12:ee
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ5UCYnYKQZfkWEKZQJp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjRhYjhjN2NmNzQwM2I1NjIwYTFiODEzZTZhZDFkYTBkYWNiNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD3GuhUcUpWSKG97GSRjNkHa1QIE
KsZea84fIj5ISn6u3+5cyjC6JKYP+uV8UaVQOPu783hMG/Og1BgAgJRprM4OA1+o
v7ozZ8A0zD01r8077EVTKxFA2iXgrcs+k1At2YPwBxL6tr/T5zXwwK5IAHC1h4Pd
PF0PEMuMvY905u3DJ45DQPU/U3CTIMG5oQeUoD9bcLHaxd1hdcIRvu6XShEoP3Ww
WD4QwA/Ye2jx5Sw/PbIDjrJW0a+pLfPsOxv5hidKI54EtgGhVQCn4WT1MHdjLw0U
5zpIonOjo5dphDNwL+sqT0t50D8yqJDseT0W5Y+bRbfetGl60+Xz1ubz4QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEJKuMfPdAO1YgobgT5q0doNrLRNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzNiMzIx
NS01NzIxLTQzNDUtODQxYi0yYWQ5MzA4ZjFmNmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvM2IzMjE1
LTU3MjEtNDM0NS04NDFiLTJhZDkzMDhmMWY2Yy8xL1FrcTR4ODkwQTdWaUNodUJQ
bXJSMmcyc3RFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubxsMA0EAgACMAcDBQAqC7+AMA0GCSqGSIb3
DQEBCwUAA4IBAQBgzi23CdXC7hY8nWNrCxoz336KpR3OqVHXtk++4YqqsU9Rx+kv
7JaYKgVlja1yxjRw4RimcQA0pDUPyugYoNL4TFvSC2Ig84U7EIGilsWRmj/RCLmp
OcW71FKg09DuFEJju+MOdzCU+GIS+Cs6WBQ3qblEfj/pOuJujD/snIkDJ3ZSMlKG
wi3r3mmh/eeqivEOVNp21Bl3vZ9ek0BN3SC27KCwjz4fxS/xdhQZ3klOccdZNmBM
MuJ6WZkHMayhxhmM1w5gzke8G+G7Q0nERQc0UtKDMRuJKUFNO42Fh7infrKE7o9w
OMklI9M5lvds8bt/xCxbeFJ7r7dhxKbaaBLu
-----END CERTIFICATE-----