Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer (raw, json)
Hash identifier:          UrdvPdH2WVcdSbdjfOGGWlRbWm15mJ2caA/apTOAfaI=
Subject key identifier:   49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DC3FBDEBBBF699E7ED5EB2EF285EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34666
                          IP: 81.16.240.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:c3:fb:de:bb:bf:69:9e:7e:d5:eb:2e:f2:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:2d:c4:a4:b3:3d:d9:4d:6e:ef:f7:c3:e3:
                    53:30:44:f5:27:08:50:20:89:07:1c:30:55:80:b5:
                    1f:4d:9f:04:bc:2b:4b:61:cd:e9:e6:71:72:21:37:
                    62:66:2d:62:ad:e3:f6:f7:92:b3:63:2c:67:c7:00:
                    11:b6:19:c6:75:ad:83:b9:42:30:06:73:ad:b7:71:
                    ef:92:69:d2:47:50:28:cc:a1:67:78:7b:97:4a:6c:
                    63:a2:e8:49:b4:db:4d:ee:4a:70:ed:96:a8:fe:19:
                    d7:89:66:17:53:73:05:f0:0d:97:fc:31:09:0d:f3:
                    28:d2:1a:f2:46:6e:93:1a:fb:0c:8c:67:1f:35:ff:
                    2c:22:b6:7f:9a:ce:b0:dd:c9:55:ec:c1:70:af:12:
                    8b:03:0f:3c:be:5c:77:e6:f5:24:13:e0:41:9b:7c:
                    81:03:ca:a0:96:49:b5:ac:a3:66:3d:39:59:0c:0c:
                    cb:f4:c9:55:ad:01:c9:33:9f:50:be:91:ef:15:eb:
                    22:35:57:d8:21:83:ac:44:46:7b:44:da:0e:50:bd:
                    98:fd:e4:d0:e4:28:37:37:55:fb:5b:18:e8:92:4f:
                    e9:d3:eb:b4:f1:34:b9:9d:9e:c3:e7:8d:13:d3:3a:
                    5a:ff:f8:14:87:bf:f1:cb:24:5e:d1:bb:d9:57:51:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.16.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34666

    Signature Algorithm: sha256WithRSAEncryption
         1e:b7:53:19:41:a8:62:6e:53:6d:07:a4:29:5a:2b:cc:c2:5a:
         33:3d:c8:a8:80:06:92:c7:06:a4:4d:00:fa:62:09:22:fd:68:
         81:e9:51:f9:e0:99:54:0e:56:0b:0a:a2:37:82:c7:63:71:4f:
         24:c2:d9:7d:de:6b:40:49:9f:93:60:6d:51:4f:33:1c:32:6e:
         2f:bb:a1:b8:f7:2f:b0:0a:be:a4:a4:f9:7b:99:54:fb:bf:8b:
         c4:df:01:ae:89:2d:04:72:f3:8b:2b:30:3f:49:f7:27:ae:49:
         17:81:15:9a:f1:e8:ed:e5:2b:d9:bd:ff:7b:e5:47:d8:fc:3f:
         83:7e:26:36:88:7c:c1:74:1a:5e:0a:06:67:16:10:b0:0b:99:
         82:f4:dc:02:9e:b2:6e:1e:ea:d3:c4:fa:34:77:e0:c3:47:31:
         a8:6c:2a:3a:bf:3a:14:94:00:2d:34:3a:3c:1f:75:7d:7e:c6:
         52:e5:2a:0b:88:63:cd:ce:2c:c6:43:85:29:00:11:37:4f:b9:
         88:82:39:95:43:46:5d:68:a9:a0:28:ac:89:ce:79:a9:24:c7:
         4a:cb:26:87:16:48:b4:f4:25:1c:45:a1:39:f1:ff:1f:8f:c3:
         21:25:a4:34:ac:98:82:36:1a:ca:d3:0a:cd:90:a2:f2:f1:44:
         bb:7d:5f:13
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQijcP73ru/aZ5+1esu8oXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTBkYjk5OWNhNGNlMjg3YzVjOTJhYjE2N2E1MDA5MDIyNTliYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDwtxKSzPdlNbu/3w+NTMET1JwhQ
IIkHHDBVgLUfTZ8EvCtLYc3p5nFyITdiZi1ireP295KzYyxnxwARthnGda2DuUIw
BnOtt3HvkmnSR1AozKFneHuXSmxjouhJtNtN7kpw7Zao/hnXiWYXU3MF8A2X/DEJ
DfMo0hryRm6TGvsMjGcfNf8sIrZ/ms6w3clV7MFwrxKLAw88vlx35vUkE+BBm3yB
A8qglkm1rKNmPTlZDAzL9MlVrQHJM59QvpHvFesiNVfYIYOsREZ7RNoOUL2Y/eTQ
5Cg3N1X7Wxjokk/p0+u08TS5nZ7D540T0zpa//gUh7/xyyRe0bvZV1EbdQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFEkNuZnKTOKHxckqsWelAJAiWbsFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzZmNzFm
My02Mzk5LTQ5MTMtYjk4ZS05OGUyNWUwNDY5MDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvNmY3MWYz
LTYzOTktNDkxMy1iOThlLTk4ZTI1ZTA0NjkwOC8xL1NRMjVtY3BNNG9mRnlTcXha
NlVBa0NKWnV3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEURDwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCHajANBgkqhkiG9w0BAQsFAAOCAQEAHrdTGUGoYm5TbQekKVorzMJaMz3IqIAG
kscGpE0A+mIJIv1ogelR+eCZVA5WCwqiN4LHY3FPJMLZfd5rQEmfk2BtUU8zHDJu
L7uhuPcvsAq+pKT5e5lU+7+LxN8BroktBHLziyswP0n3J65JF4EVmvHo7eUr2b3/
e+VH2Pw/g34mNoh8wXQaXgoGZxYQsAuZgvTcAp6ybh7q08T6NHfgw0cxqGwqOr86
FJQALTQ6PB91fX7GUuUqC4hjzc4sxkOFKQARN0+5iII5lUNGXWipoCisic55qSTH
SssmhxZItPQlHEWhOfH/H4/DISWkNKyYgjYaytMKzZCi8vFEu31fEw==
-----END CERTIFICATE-----