Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer (raw, json)
Hash identifier:          19aHiJFMT16hh0SEfDkS2jyrpDhsJ22N4e9GWfifnGk=
Subject key identifier:   55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424456FF2C58320B6CA77ED28751881FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209271
                          IP: 176.119.220.0/24
                          IP: 2a0a:ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:6f:f2:c5:83:20:b6:ca:77:ed:28:75:18:81:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:69:cf:9c:23:cc:70:ce:25:b3:d6:c4:c0:
                    58:57:0a:0a:f9:95:a9:51:db:d7:ee:52:73:f9:65:
                    9f:c1:ed:05:26:bb:8e:79:1c:a2:35:f8:49:a0:5f:
                    ea:0b:a1:ef:43:5d:67:84:70:0f:f0:82:8e:4a:ab:
                    1c:9b:75:8d:22:95:aa:d7:6d:4e:2c:46:1a:b8:38:
                    c4:c7:6a:1c:6c:ca:52:eb:93:a4:c6:c4:94:5f:7c:
                    de:76:4a:6d:99:6a:da:f2:c5:18:14:c0:ec:d5:0f:
                    de:4b:57:fc:49:f0:56:74:cf:61:d0:fb:d4:6f:2f:
                    64:68:16:c1:f5:85:b9:b4:54:fd:ff:65:c3:ac:f0:
                    2b:04:f0:99:ad:58:cd:92:51:d9:32:92:7f:09:87:
                    09:31:da:60:46:4b:79:3e:e9:14:61:9c:14:73:d8:
                    23:2e:80:dc:5a:56:ab:f5:7b:f4:e3:fe:1d:67:58:
                    56:40:26:97:ae:98:e3:82:7e:1f:97:da:c7:1d:13:
                    4d:17:f4:0e:c4:ea:3a:91:e3:16:54:dd:94:e6:67:
                    cb:b2:e5:cc:e7:db:aa:bb:10:23:82:c5:e3:3a:cf:
                    6b:15:93:33:cc:9b:a0:5d:aa:a7:1b:6f:5b:25:12:
                    e6:90:bc:a3:a1:cc:22:d5:28:7d:67:0a:44:f2:c0:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.220.0/24
                IPv6:
                  2a0a:ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209271

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:76:c2:9a:bd:84:99:ce:5d:7f:51:26:11:12:74:35:ae:
         4b:21:90:b2:31:87:d1:1a:fb:de:79:ac:47:a8:e0:fc:14:d0:
         4e:72:97:4c:f9:87:15:3f:e8:50:e6:ab:48:f7:5a:95:40:26:
         3f:22:fc:e4:ef:32:02:d9:f1:25:d7:c2:1e:d6:25:f0:63:75:
         5b:3c:97:e1:cf:51:bd:4d:39:dc:3a:d0:d7:da:e1:3e:4d:c0:
         c9:ee:c8:98:91:5f:55:84:61:bf:b5:97:57:bf:f2:18:81:74:
         97:f1:ad:8b:e3:de:5d:27:af:86:4d:ca:85:1d:7b:7c:10:6d:
         5d:ec:86:44:2d:96:e0:42:e1:e3:6b:4c:c0:bd:a8:43:0e:5c:
         44:c7:bb:4d:99:43:94:e4:7f:8d:ab:56:9e:8c:7a:75:88:88:
         c7:4a:6e:51:0e:05:c3:dd:ba:1d:46:70:98:23:67:91:d7:76:
         81:51:d4:af:3c:56:f3:00:ac:7d:d6:3a:2b:05:08:da:1f:2d:
         ce:dc:7a:09:21:e3:b7:94:d2:c1:70:4c:b1:92:a8:29:47:98:
         94:dd:9c:eb:8c:19:ea:fc:36:9b:98:87:21:f3:14:66:63:36:
         f1:3f:7f:08:fc:d5:a2:fb:a9:32:c2:45:df:e5:67:59:f1:35:
         12:30:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----