Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
File:                     QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer (raw, json)
Hash identifier:          3QjxILKkTiRz2Id/VBrILI2LvPXMNfL+1aobTLBGWZ4=
Subject key identifier:   43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5C7D568FDA1BD812B3CBCAA0F68F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49020
                          IP: 185.139.12.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5c:7d:56:8f:da:1b:d8:12:b3:cb:ca:a0:f6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4309599380c5c59dc06684920b694c3ea6d308a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:33:9b:68:47:ca:c8:5b:a4:6f:66:3e:42:2a:
                    1e:d9:ee:88:d4:94:7c:56:04:bf:3f:fd:65:8c:1a:
                    56:da:55:c1:28:12:97:50:33:a7:47:02:3f:24:0f:
                    4f:eb:68:a8:74:78:c6:85:c0:60:16:1f:91:0a:7e:
                    96:a6:82:07:1c:4e:d5:9a:aa:22:9d:3d:d2:e6:f4:
                    26:53:d1:76:1b:81:49:a3:fa:34:7a:84:d5:90:fc:
                    77:39:f3:34:1f:37:91:51:e6:c1:67:b0:02:73:1f:
                    86:6f:4a:65:a6:2f:6d:61:50:63:5d:6e:f7:1a:58:
                    a2:d3:fc:b0:f2:f1:aa:48:1e:29:c2:86:ab:e9:ed:
                    11:f1:57:50:07:2d:b1:f6:2a:3e:8c:43:fa:d0:c5:
                    1e:95:8a:07:13:e7:d2:41:24:92:29:7e:69:a6:c8:
                    53:ee:5c:6c:46:83:fb:df:c0:95:22:e0:f9:c1:88:
                    7c:45:ba:38:31:f4:d7:5e:3a:d3:0a:81:2d:75:ed:
                    e3:6e:6a:42:40:0a:ce:9e:57:5c:d6:60:fb:c1:b6:
                    3b:93:80:2d:aa:c6:27:70:d8:86:af:ff:ba:9d:09:
                    ff:03:10:fc:66:dd:85:72:48:bb:3c:dc:d1:e4:ce:
                    a1:a1:ce:e8:a6:16:c6:f8:fd:f7:59:7a:5f:72:5b:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.12.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49020

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:38:01:66:39:16:4a:8b:36:99:a6:c0:fa:ce:be:43:30:
         1d:83:67:13:09:98:15:dd:ca:8c:9f:60:13:a3:28:c8:43:4b:
         08:b7:72:f3:95:26:3b:aa:1e:e4:b9:96:59:af:1c:f6:8e:10:
         78:67:db:ea:21:2e:34:f9:94:59:2a:c4:2e:b9:4f:6b:56:4b:
         00:70:0c:53:9d:45:1c:cd:25:92:e4:0c:43:d0:78:97:4d:40:
         f7:ad:85:6a:b3:ca:e7:7a:c0:69:82:64:4d:76:ed:13:c3:70:
         98:3a:b1:97:c8:e1:45:8a:c0:2d:63:67:af:93:42:e1:d5:3c:
         16:47:42:13:4f:48:94:07:0c:d9:d7:17:4e:96:cd:51:3f:f4:
         3c:8b:1e:b9:e0:df:28:05:eb:09:59:0a:ed:a2:c2:42:c8:b4:
         6e:23:5d:f5:ce:24:b1:47:7e:ae:0c:d2:d4:59:91:23:f5:89:
         bc:b7:f9:d8:3e:8a:38:5d:8a:66:22:a9:01:c1:e0:0d:81:61:
         3b:d1:e1:d4:ab:cb:cb:f3:75:7a:09:21:2e:08:d6:98:4d:96:
         d7:48:2f:3c:a3:f4:d7:1a:de:f9:49:0a:ea:42:51:f5:59:63:
         ae:1b:cc:03:84:73:72:a3:34:25:d7:29:16:2a:9d:5d:71:a8:
         8d:4d:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----