Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
File:                     Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer (raw, json)
Hash identifier:          scAA2s8h0L2/D4jC/y7V1LrjZzpn2fQKs46Sw62EjFE=
Subject key identifier:   42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA15318E0D67D622EC3A9BFBEEAE30
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210461
                          AS: 210925
                          AS: 211509
                          IP: 185.1.225.0/24
                          IP: 2001:678:3f4::/48
                          IP: 2001:7f8:11f::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:15:31:8e:0d:67:d6:22:ec:3a:9b:fb:ee:ae:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:73:d2:0b:f1:0b:69:73:13:d9:be:33:89:
                    1f:56:80:38:96:70:eb:be:98:c3:58:4e:c9:df:c2:
                    ea:88:d1:50:f9:e2:84:5d:64:f6:ef:d6:b5:bc:25:
                    1e:71:c6:7b:30:b8:72:5d:1d:38:c8:40:62:04:a2:
                    84:22:f5:33:75:dc:2b:b0:c1:7d:e9:57:ff:52:c1:
                    60:61:2d:37:a2:a7:8e:43:d3:45:62:17:80:e9:13:
                    4e:03:98:85:dd:45:d1:d3:d9:43:dd:fb:1c:61:98:
                    81:f1:fe:2a:88:1e:1a:82:2e:4e:dd:50:c1:de:42:
                    82:46:ff:f5:ba:83:f0:90:88:27:cb:4b:29:b1:bc:
                    2a:e4:5b:8b:1f:1b:f8:78:77:6e:18:4a:32:ff:9b:
                    3b:d0:d1:1b:b6:16:a5:c1:8c:63:a9:fb:6c:ac:8e:
                    d9:13:42:c3:cd:a3:15:7f:1e:ac:c6:f1:cf:d9:6a:
                    01:ea:58:bd:58:ff:0d:9f:78:e7:0b:f9:49:89:fd:
                    d5:ae:9a:57:2b:fc:fb:3e:18:80:28:28:2f:25:50:
                    14:e0:d7:34:41:1c:a3:a9:8d:0f:f7:b9:e0:de:b7:
                    e3:d2:66:09:cc:2e:38:ec:27:08:00:9a:c0:fc:3a:
                    db:67:61:a1:39:bc:d6:06:ec:f5:a6:3f:9f:05:8d:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.225.0/24
                IPv6:
                  2001:678:3f4::/48
                  2001:7f8:11f::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210461
                  210925
                  211509

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:f0:22:31:f2:37:ac:34:43:66:ec:55:cf:72:67:73:62:
         b1:be:f8:3b:fe:c2:52:4c:a6:3d:40:2f:0a:14:53:95:7e:db:
         6a:20:82:2b:23:7a:2b:e6:fa:33:9e:9e:46:9d:0d:a0:d4:01:
         c8:1a:a1:8f:df:84:5a:05:e3:b5:46:c1:cf:95:de:f3:f3:0a:
         ee:ef:76:07:ee:72:39:8c:50:7a:6a:2f:e2:36:17:51:81:9c:
         b4:82:f5:f3:2b:8d:87:1f:21:51:8e:02:15:2d:6e:f9:1d:4c:
         33:1b:a3:62:03:e8:ce:f3:93:a6:90:b2:c8:68:51:27:a4:de:
         ad:ab:81:1c:5d:7d:47:fd:ff:a4:4e:ed:35:a2:9b:e9:42:d6:
         d0:fc:77:ab:b5:48:1c:0b:c1:fe:af:b4:2a:d9:cd:e3:7e:03:
         1f:f4:7b:62:a3:36:c4:c9:f3:3c:da:01:81:de:22:19:73:78:
         f9:e5:51:4d:ee:fa:84:09:a9:36:e6:6b:9a:5b:e0:8f:d6:bf:
         29:cc:8e:f0:30:9b:7d:d6:fc:78:fd:26:3a:9f:d4:43:10:13:
         8f:7e:35:e0:1d:75:7d:6e:6d:79:95:cb:bc:9d:9f:ed:0e:08:
         71:92:11:a4:bd:84:e9:37:42:9f:43:46:aa:fd:e7:db:89:46:
         75:55:cd:17
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZQf+hUxjg1n1iLsOpv77q4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmU3ZmM2Yjc0YjJiODYzMjgxMWZkZmQ4MTZkMDNlOTM5YWZkNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ulz0gvxC2lzE9m+M4kfVoA4lnDr
vpjDWE7J38LqiNFQ+eKEXWT279a1vCUeccZ7MLhyXR04yEBiBKKEIvUzddwrsMF9
6Vf/UsFgYS03oqeOQ9NFYheA6RNOA5iF3UXR09lD3fscYZiB8f4qiB4agi5O3VDB
3kKCRv/1uoPwkIgny0spsbwq5FuLHxv4eHduGEoy/5s70NEbthalwYxjqftsrI7Z
E0LDzaMVfx6sxvHP2WoB6li9WP8Nn3jnC/lJif3VrppXK/z7PhiAKCgvJVAU4Nc0
QRyjqY0P97ng3rfj0mYJzC447CcIAJrA/DrbZ2GhObzWBuz1pj+fBY1CvwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFELn/Gt0srhjKBH9/YFtA+k5r9cSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2E3Y2Nl
ZC1kYTU0LTQwMzctYmM5YS0yZjkwNmRhMmVmMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYTdjY2Vk
LWRhNTQtNDAzNy1iYzlhLTJmOTA2ZGEyZWYyMC8xL1F1ZjhhM1N5dUdNb0VmMzln
VzBENlRtdjF4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAMBAIAATAGAwQAuQHhMBgEAgACMBIDBwAgAQZ4A/QDBwAgAQf4
AR8wJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAzYdAgMDN+0CAwM6NTANBgkqhkiG
9w0BAQsFAAOCAQEAM7fwIjHyN6w0Q2bsVc9yZ3Nisb74O/7CUkymPUAvChRTlX7b
aiCCKyN6K+b6M56eRp0NoNQByBqhj9+EWgXjtUbBz5Xe8/MK7u92B+5yOYxQemov
4jYXUYGctIL18yuNhx8hUY4CFS1u+R1MMxujYgPozvOTppCyyGhRJ6TerauBHF19
R/3/pE7tNaKb6ULW0Px3q7VIHAvB/q+0KtnN434DH/R7YqM2xMnzPNoBgd4iGXN4
+eVRTe76hAmpNuZrmlvgj9a/KcyO8DCbfdb8eP0mOp/UQxATj3414B11fW5teZXL
vJ2f7Q4IcZIRpL2E6TdCn0NGqv3n24lGdVXNFw==
-----END CERTIFICATE-----