Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
File:                     QoWCG7eoRF779DPUwZiQp_qUn6g.cer (raw, json)
Hash identifier:          Do8VqngnvI8COxNLZZ7VFbKpIFG02cl3NIAOmGrxvgk=
Subject key identifier:   42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143F72CC4B85AFADEC6FDB7E55C1BB1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209383
                          IP: 139.28.192.0/22
                          IP: 2a09:1b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:f7:2c:c4:b8:5a:fa:de:c6:fd:b7:e5:5c:1b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:81:88:7b:26:59:49:68:ff:bb:fa:18:62:
                    f3:01:c5:df:8e:c8:9e:ae:81:e9:c2:e9:12:be:2d:
                    2f:b6:78:f5:b4:fc:f7:66:4b:57:63:8d:31:97:e5:
                    92:d0:ad:74:fe:47:ec:05:11:b2:90:be:81:fd:46:
                    07:8b:65:ae:9f:e7:58:52:47:d8:fa:3b:e5:5d:97:
                    74:86:8a:84:32:99:85:bc:05:6d:2c:07:d3:0a:65:
                    d7:cf:8f:a2:b7:52:8e:92:07:97:56:79:91:2c:73:
                    1f:f6:a5:b0:d7:9a:69:0d:5a:5c:92:37:c1:07:d2:
                    56:4b:2e:d8:9c:39:d8:b1:d6:06:4e:3c:6a:ba:53:
                    88:35:db:95:9b:6f:4b:21:69:30:8f:9b:a8:b2:d6:
                    b9:00:23:f0:89:2e:af:e8:27:f4:5e:b5:80:10:c8:
                    51:d8:2b:d3:0d:80:4a:56:79:0c:1d:27:8c:e3:e8:
                    73:0f:7f:33:06:76:46:2e:57:0d:a5:da:ad:3d:6f:
                    55:31:d1:03:95:34:bd:f4:19:af:3f:5d:21:59:52:
                    4e:6f:8f:ce:35:a3:39:d3:ca:8e:f1:2e:f2:29:3e:
                    97:cd:5a:67:5e:40:47:b9:66:5a:81:10:04:52:e4:
                    70:49:60:7a:79:85:db:18:f0:c1:7c:68:a2:19:63:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.192.0/22
                IPv6:
                  2a09:1b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209383

    Signature Algorithm: sha256WithRSAEncryption
         6e:7f:8c:8f:e0:e3:31:2e:90:99:90:da:a3:45:f9:39:55:de:
         9f:94:61:42:0e:96:47:8e:2a:6c:15:ad:da:45:b5:ef:01:28:
         8a:8e:81:04:80:14:ac:8f:f9:2d:d8:f0:2d:32:69:aa:3e:22:
         05:0c:e3:ed:47:a1:8b:a5:81:d0:5d:9f:c8:5e:7d:02:00:27:
         3e:82:ac:6a:06:10:12:fc:ca:a9:c0:af:05:c8:e4:22:88:84:
         0e:e8:fa:26:d3:bb:c8:74:cb:b7:aa:53:48:43:1d:07:01:93:
         47:e1:85:20:84:12:f0:ef:4f:fd:e1:e0:5b:d9:5b:48:99:73:
         ec:e5:77:fa:96:e2:5d:5f:d8:3c:b2:49:83:0d:59:b8:ea:a8:
         8f:5c:c7:88:b2:22:f9:84:2c:8b:f5:ee:35:3f:6d:3e:bf:4f:
         46:4f:4d:ca:c7:07:1a:38:49:05:8e:e4:bb:a4:22:d8:85:44:
         e5:b0:31:54:73:9e:24:a3:53:17:3f:01:c1:c8:c8:1c:0d:5a:
         b2:6a:9b:34:88:59:b4:62:34:fc:04:e6:1e:38:96:cc:bb:3b:
         ae:52:3e:20:e3:48:66:6c:61:6d:39:b0:d6:94:15:39:e0:c8:
         81:e6:c4:4c:09:ab:5e:92:f9:3e:74:f5:70:d5:9b:90:21:92:
         23:25:42:a4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhQ/csxLha+t7G/bflXBuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjg1ODIxYmI3YTg0NDVlZmJmNDMzZDRjMTk4OTBhN2ZhOTQ5ZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcWBiHsmWUlo/7v6GGLzAcXfjsie
roHpwukSvi0vtnj1tPz3ZktXY40xl+WS0K10/kfsBRGykL6B/UYHi2Wun+dYUkfY
+jvlXZd0hoqEMpmFvAVtLAfTCmXXz4+it1KOkgeXVnmRLHMf9qWw15ppDVpckjfB
B9JWSy7YnDnYsdYGTjxqulOINduVm29LIWkwj5uosta5ACPwiS6v6Cf0XrWAEMhR
2CvTDYBKVnkMHSeM4+hzD38zBnZGLlcNpdqtPW9VMdEDlTS99BmvP10hWVJOb4/O
NaM508qO8S7yKT6XzVpnXkBHuWZagRAEUuRwSWB6eYXbGPDBfGiiGWONlwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEKFghu3qERe+/Qz1MGYkKf6lJ+oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2Y5MzQy
Yy01N2E5LTQ4ZjMtOWU2Ny04YTNkOGRjMzU4ZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZjkzNDJj
LTU3YTktNDhmMy05ZTY3LThhM2Q4ZGMzNThlYi8xL1FvV0NHN2VvUkY3NzlEUFV3
WmlRcF9xVW42Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCixzAMA0EAgACMAcDBQAqCRtAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMx5zANBgkqhkiG9w0BAQsFAAOCAQEAbn+Mj+DjMS6Q
mZDao0X5OVXen5RhQg6WR44qbBWt2kW17wEoio6BBIAUrI/5LdjwLTJpqj4iBQzj
7Uehi6WB0F2fyF59AgAnPoKsagYQEvzKqcCvBcjkIoiEDuj6JtO7yHTLt6pTSEMd
BwGTR+GFIIQS8O9P/eHgW9lbSJlz7OV3+pbiXV/YPLJJgw1ZuOqoj1zHiLIi+YQs
i/XuNT9tPr9PRk9NyscHGjhJBY7ku6Qi2IVE5bAxVHOeJKNTFz8BwcjIHA1asmqb
NIhZtGI0/ATmHjiWzLs7rlI+IONIZmxhbTmw1pQVOeDIgebETAmrXpL5PnT1cNWb
kCGSIyVCpA==
-----END CERTIFICATE-----