Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
File:                     WqZ_80-Urvw6VNVIfAtItN-6DII.cer (raw, json)
Hash identifier:          PQYItwbpfSu3ZF4aGQ5RvJW1q9kjph84AXff3Mevvvk=
Subject key identifier:   5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB099F28BF26B74671EC43586B3DE7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210833
                          IP: 2001:67c:828::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:09:9f:28:bf:26:b7:46:71:ec:43:58:6b:3d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:ea:07:17:18:cf:92:7b:f4:bd:95:d7:e8:
                    4e:55:20:5d:57:00:19:37:55:4f:4e:00:7a:7b:03:
                    e8:07:90:29:50:29:1b:9f:e6:46:b5:b0:43:9f:e6:
                    11:10:1f:18:8c:b1:77:cb:ac:f5:a3:b3:b1:5c:df:
                    9b:53:00:20:17:fa:41:65:b7:f4:c8:fc:95:ef:be:
                    cf:b7:5a:dd:c3:ff:e3:66:60:b0:d3:ce:8d:59:a2:
                    b1:b5:68:ee:29:e2:7d:0c:9b:0f:c9:5b:b1:fa:11:
                    05:7f:0a:8d:41:02:f0:82:00:6a:eb:7e:95:69:f5:
                    f9:78:e5:59:83:4f:08:69:8e:ba:8b:af:84:66:60:
                    f8:36:ea:83:04:de:04:e3:17:ba:7a:ba:47:8e:c4:
                    29:3e:09:7f:46:6c:ba:e5:9f:db:88:2f:29:20:a2:
                    18:8e:69:fb:52:dc:8d:08:e4:f4:ba:f7:f8:9d:1d:
                    21:4b:26:b4:4c:69:d0:64:5a:e2:3a:97:83:55:c5:
                    b1:92:82:8f:52:c8:0d:d6:0e:e2:eb:a8:90:69:30:
                    c4:39:ae:54:91:17:8b:a1:a0:97:53:7b:21:65:b5:
                    35:e9:61:98:55:7c:af:0b:c7:71:04:6e:6d:21:0d:
                    92:a9:91:3b:97:28:af:2b:ee:8b:80:f6:64:f6:79:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:828::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210833

    Signature Algorithm: sha256WithRSAEncryption
         53:26:c9:37:75:4f:57:5c:be:eb:74:de:9f:8c:95:4e:88:a1:
         7f:e7:44:c1:52:be:1b:93:7a:94:d0:18:1d:2a:76:ca:78:3b:
         47:33:f6:bd:f6:0c:28:7e:d5:21:be:35:0c:06:e1:f4:4e:3a:
         fc:c6:f8:53:f1:8a:21:41:0e:c8:b0:60:30:26:c7:e5:79:a0:
         04:bf:9d:14:2d:b6:2f:71:82:fb:73:dd:7e:2c:2a:3a:3a:ce:
         52:f1:74:3f:2e:b6:74:7a:98:85:bc:25:b0:78:43:6f:6d:b9:
         3b:4a:2d:6d:23:1a:cb:43:8e:a9:2b:69:4a:c2:ef:f5:49:31:
         0a:7c:94:bb:0e:7a:0e:49:fe:1c:c9:0a:fd:3a:dd:83:2e:63:
         cc:db:77:ba:eb:be:9e:e8:3e:f0:fb:d0:6c:cc:64:6a:2d:a3:
         bc:d2:e6:7f:92:e4:42:94:cb:44:16:10:08:24:ba:8b:ac:e0:
         41:07:e2:06:aa:94:15:c3:23:79:ef:14:c1:dd:88:02:1e:c3:
         a7:0d:7d:9f:5a:ad:d3:2e:4e:bb:05:0d:3d:ec:41:45:69:48:
         d6:e9:75:65:12:75:0e:8f:b1:53:01:05:e4:47:58:5b:9d:7c:
         0b:9d:cc:0c:26:39:3a:aa:67:5e:9c:6a:26:7e:12:71:74:19:
         b8:0d:2d:67
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQi+wmfKL8mt0Zx7ENYaz3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWE2N2ZmMzRmOTRhZWZjM2E1NGQ1NDg3YzBiNDhiNGRmYmEwYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXHqBxcYz5J79L2V1+hOVSBdVwAZ
N1VPTgB6ewPoB5ApUCkbn+ZGtbBDn+YREB8YjLF3y6z1o7OxXN+bUwAgF/pBZbf0
yPyV777Pt1rdw//jZmCw086NWaKxtWjuKeJ9DJsPyVux+hEFfwqNQQLwggBq636V
afX5eOVZg08IaY66i6+EZmD4NuqDBN4E4xe6erpHjsQpPgl/Rmy65Z/biC8pIKIY
jmn7UtyNCOT0uvf4nR0hSya0TGnQZFriOpeDVcWxkoKPUsgN1g7i66iQaTDEOa5U
kReLoaCXU3shZbU16WGYVXyvC8dxBG5tIQ2SqZE7lyivK+6LgPZk9nnKOQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFFqmf/NPlK78OlTVSHwLSLTfugyCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2ZhYmJh
OS1lZWFhLTQyZTMtODc3Ni04NTFhMWY4YmYxODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvZmFiYmE5
LWVlYWEtNDJlMy04Nzc2LTg1MWExZjhiZjE4MC8xL1dxWl84MC1VcnZ3NlZOVklm
QXRJdE4tNkRJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAgoMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM3kTANBgkqhkiG9w0BAQsFAAOCAQEAUybJN3VPV1y+63Ten4yVToihf+dE
wVK+G5N6lNAYHSp2yng7RzP2vfYMKH7VIb41DAbh9E46/Mb4U/GKIUEOyLBgMCbH
5XmgBL+dFC22L3GC+3PdfiwqOjrOUvF0Py62dHqYhbwlsHhDb225O0otbSMay0OO
qStpSsLv9UkxCnyUuw56Dkn+HMkK/Trdgy5jzNt3uuu+nug+8PvQbMxkai2jvNLm
f5LkQpTLRBYQCCS6i6zgQQfiBqqUFcMjee8Uwd2IAh7Dpw19n1qt0y5OuwUNPexB
RWlI1ul1ZRJ1Do+xUwEF5EdYW518C53MDCY5OqpnXpxqJn4ScXQZuA0tZw==
-----END CERTIFICATE-----