Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
File:                     QlQ5sMp_FNqpthsRvRe9zBunOGw.cer (raw, json)
Hash identifier:          4yxOJTyduMaV5WUnTVl/uT55AeJsPE+pVUzih5xyggw=
Subject key identifier:   42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBAA1490F8287CBC38749B697C86B7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211986
                          IP: 185.234.103.0/24
                          IP: 2a10:dc80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:aa:14:90:f8:28:7c:bc:38:74:9b:69:7c:86:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:90:9b:99:49:73:50:3c:27:13:4e:fb:e7:
                    d7:1a:a7:64:76:0a:68:f7:a9:e9:f0:6c:9a:6b:f0:
                    0d:2b:06:f3:6f:78:14:f1:ff:11:4d:dc:0c:c2:57:
                    f9:24:17:4d:34:92:0d:fb:29:89:f2:5d:3e:78:f9:
                    cb:b2:6e:28:a5:f6:d6:58:9f:00:f7:1b:2b:80:d9:
                    ea:6f:ab:ac:9c:e9:37:71:1a:c0:2d:c1:a0:56:9d:
                    5a:2f:0c:3d:93:19:ce:98:4d:2d:1d:f3:dc:8e:4a:
                    3a:f8:f8:49:68:3f:92:1d:15:c9:40:2c:91:c4:bb:
                    78:bf:fe:7c:89:3a:96:e5:80:ae:a3:50:31:70:47:
                    59:d4:0c:d5:2b:b4:c5:f6:e6:f6:39:af:eb:d7:af:
                    29:cc:d3:32:16:5b:18:f5:f0:d7:4f:64:01:75:28:
                    9e:a9:32:e2:56:da:9d:f1:68:c4:df:07:0c:d9:15:
                    4a:54:2c:40:1a:3b:ee:b2:cc:e5:b7:77:1c:bd:f3:
                    d3:21:ec:d6:a0:b5:ce:8c:e5:cc:25:19:89:06:ab:
                    25:73:77:cb:f5:b4:97:1a:f2:ce:92:3f:a3:54:ae:
                    24:bf:eb:2b:2a:87:6f:43:d1:64:de:3e:b3:08:ea:
                    03:d1:2f:9b:bf:2a:11:c0:fc:35:b2:95:c6:90:e7:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.103.0/24
                IPv6:
                  2a10:dc80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211986

    Signature Algorithm: sha256WithRSAEncryption
         78:25:34:48:e4:c2:b2:b4:50:4b:86:2c:a3:0a:5d:4e:b0:c1:
         62:38:4e:13:5b:87:1d:a7:52:c0:3c:ea:a7:12:f7:e2:60:c6:
         48:98:e9:58:eb:12:cb:b4:27:ba:00:17:f3:c9:df:6e:07:c0:
         f4:2c:78:59:48:30:72:17:b1:bf:80:e7:ba:56:b0:c0:99:ee:
         f9:78:aa:68:84:80:94:ab:e6:8e:9a:cd:25:13:f1:b9:92:db:
         7a:47:b7:be:8b:14:6e:a1:94:b8:1a:74:f0:a8:19:fe:6d:d0:
         21:51:40:b8:b2:e8:fa:5f:f4:b0:d7:a2:91:1e:9a:84:50:f9:
         38:5b:c2:be:83:0f:f5:ce:a5:93:92:4d:3d:8c:fb:14:ab:f6:
         a2:f6:82:c5:53:ec:f0:70:1f:ab:f0:87:53:1d:e5:95:c8:13:
         94:94:51:ef:23:79:8b:ad:b8:bd:b2:35:f2:01:73:05:a4:5f:
         3e:b0:d9:27:a5:9b:6c:ca:8d:e4:c8:cc:9d:14:49:f6:a9:a4:
         d6:f1:f7:46:d3:30:06:ef:9f:6c:d1:41:2f:b6:c2:e7:fa:5f:
         a0:29:69:ba:f1:76:b1:16:30:21:f1:99:b2:bc:dd:59:6d:08:
         33:a2:b4:cf:f1:df:f0:87:06:50:6e:10:c0:36:90:08:58:46:
         3e:71:0d:4e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi+6oUkPgofLw4dJtpfIa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjU0MzliMGNhN2YxNGRhYTliNjFiMTFiZDE3YmRjYzFiYTczODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+SQm5lJc1A8JxNO++fXGqdkdgpo
96np8Gyaa/ANKwbzb3gU8f8RTdwMwlf5JBdNNJIN+ymJ8l0+ePnLsm4opfbWWJ8A
9xsrgNnqb6usnOk3cRrALcGgVp1aLww9kxnOmE0tHfPcjko6+PhJaD+SHRXJQCyR
xLt4v/58iTqW5YCuo1AxcEdZ1AzVK7TF9ub2Oa/r168pzNMyFlsY9fDXT2QBdSie
qTLiVtqd8WjE3wcM2RVKVCxAGjvusszlt3ccvfPTIezWoLXOjOXMJRmJBqslc3fL
9bSXGvLOkj+jVK4kv+srKodvQ9Fk3j6zCOoD0S+bvyoRwPw1spXGkOd9EQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEJUObDKfxTaqbYbEb0XvcwbpzhsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2M5Yzc3
MC05ZThmLTQwMDgtYjdmNy1jNTUwZmEyMTFmYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYzljNzcw
LTllOGYtNDAwOC1iN2Y3LWM1NTBmYTIxMWZiNy8xL1FsUTVzTXBfRk5xcHRoc1J2
UmU5ekJ1bk9Hdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuepnMA0EAgACMAcDBQMqENyAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8EjANBgkqhkiG9w0BAQsFAAOCAQEAeCU0SOTCsrRQ
S4YsowpdTrDBYjhOE1uHHadSwDzqpxL34mDGSJjpWOsSy7QnugAX88nfbgfA9Cx4
WUgwchexv4DnulawwJnu+XiqaISAlKvmjprNJRPxuZLbeke3vosUbqGUuBp08KgZ
/m3QIVFAuLLo+l/0sNeikR6ahFD5OFvCvoMP9c6lk5JNPYz7FKv2ovaCxVPs8HAf
q/CHUx3llcgTlJRR7yN5i624vbI18gFzBaRfPrDZJ6WbbMqN5MjMnRRJ9qmk1vH3
RtMwBu+fbNFBL7bC5/pfoClpuvF2sRYwIfGZsrzdWW0IM6K0z/Hf8IcGUG4QwDaQ
CFhGPnENTg==
-----END CERTIFICATE-----