Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
File:                     bqGhD32UTazB3sBBqqVZ1SK_uus.cer (raw, json)
Hash identifier:          CYo7w1vaWExBzSX2PhIAKgb4AioJLeHA2QeluQScnWw=
Subject key identifier:   6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C7A8F2211E63D6B014EACB144D3D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208834
                          IP: 45.83.72.0/22
                          IP: 2a0e:7c80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:7a:8f:22:11:e6:3d:6b:01:4e:ac:b1:44:d3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:a4:1f:cd:53:ac:7d:f4:c1:32:82:3d:73:
                    aa:7d:60:21:cc:36:ce:7b:a3:82:c3:62:60:50:29:
                    aa:56:33:9c:96:71:41:6d:e6:ea:23:3c:d0:cf:0f:
                    cb:e7:58:23:00:3d:7d:66:c5:aa:a7:3a:d0:4c:a5:
                    4a:96:16:b2:ab:46:9c:97:9d:fd:d6:bd:89:7f:46:
                    b8:42:d3:6c:de:07:d1:3e:84:e9:c8:e6:91:a4:44:
                    31:2e:f3:5a:d9:ac:da:85:5d:d3:80:7b:57:f8:16:
                    8c:bc:27:08:7f:d9:8f:d1:51:23:6a:3d:0a:11:6d:
                    17:d9:a3:67:f3:c3:e4:0d:ee:c5:ac:6d:b6:ae:5e:
                    c1:cb:77:24:86:ba:04:d9:a4:22:f9:17:d7:22:0b:
                    e0:18:51:d7:51:f8:90:86:48:99:92:ec:c4:36:8d:
                    db:62:e2:9f:8e:1c:83:73:db:69:96:77:e9:36:85:
                    ec:fd:66:5f:6e:cb:ac:8a:58:e6:e7:52:6a:78:20:
                    6c:68:a3:be:27:93:18:5c:d9:4b:bd:d2:2d:eb:18:
                    81:14:12:0c:a5:0c:84:86:83:49:d5:dc:14:5a:16:
                    6f:40:4b:51:a9:a9:09:f9:b7:e6:71:7d:ed:91:db:
                    59:df:15:13:92:be:a0:e3:fc:ef:2c:a7:2f:92:a4:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.72.0/22
                IPv6:
                  2a0e:7c80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208834

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:21:35:0c:7b:8b:ec:cf:82:de:24:83:6f:d1:a8:73:20:
         46:5d:60:09:17:55:dd:ce:4e:83:e9:42:b9:b2:25:51:45:9f:
         2e:26:07:5a:35:17:cf:55:71:e0:ba:5f:48:55:49:f1:25:80:
         19:37:bb:10:e2:2d:29:e6:99:65:a4:5c:f9:02:96:5b:59:73:
         b5:83:bc:62:8c:61:17:df:6b:35:f3:83:58:18:be:50:32:3f:
         cb:66:8f:61:70:ba:13:bb:e3:21:ba:77:50:27:22:f2:95:93:
         29:89:50:c7:e3:d4:42:19:6d:24:97:98:5d:76:6e:76:7e:40:
         94:03:33:af:0c:5a:69:e5:b0:64:9e:35:d5:4b:b0:43:d9:e1:
         50:17:a1:71:95:f4:2a:86:e1:cc:04:b3:97:24:21:87:e8:b2:
         61:24:2e:c6:92:e5:21:a8:65:79:c0:8c:4b:a4:7c:c2:fa:2e:
         43:75:be:46:51:be:4f:51:40:92:dd:e6:b4:43:ec:ee:79:aa:
         82:18:9e:4a:26:bd:03:e1:bd:a3:d2:e8:11:98:b7:64:89:73:
         0f:09:43:df:98:01:57:b5:a2:ea:3d:d6:4d:1a:cb:d2:45:14:
         24:39:e7:ed:2e:0c:b8:d0:22:73:e3:29:28:db:89:c3:14:0f:
         19:6a:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----