Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer (raw, json)
Hash identifier:          TxRDE7LZ30oRFYnN4XZxPnwcs3SoK/nFBPSrwgqGUAY=
Subject key identifier:   A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B68D0BF0F60549F4994078CE63EE7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:51:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206730
                          IP: 185.166.48.0/22
                          IP: 2a0a:8a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:8d:0b:f0:f6:05:49:f4:99:40:78:ce:63:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:51:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:d7:be:14:8b:d8:93:1a:69:c3:6a:48:89:
                    84:9e:23:7c:9f:00:c8:ef:cb:98:72:da:21:4c:66:
                    d4:86:f3:31:02:cd:75:27:82:0b:91:20:d5:ab:2a:
                    6b:ed:b0:93:f1:ac:c4:8d:8d:5d:25:ce:82:97:79:
                    71:0b:8e:3b:ec:8a:d1:44:5e:75:e7:2b:b4:8d:3a:
                    f9:07:90:ac:43:99:a6:a1:2c:b4:be:b2:c5:f9:ee:
                    c6:24:94:6f:1f:43:e8:f2:80:86:5c:be:e2:96:59:
                    34:c1:ce:87:d7:14:fb:e9:15:20:9e:56:98:bd:6a:
                    c9:6c:92:56:b3:df:6e:e0:ae:5a:21:2e:cc:5d:2b:
                    0e:5b:2e:1e:ac:13:2f:e8:77:3a:f3:a5:3e:fd:64:
                    5b:e1:c3:04:07:e3:78:97:d6:31:66:79:be:d3:b0:
                    9b:b4:b0:9b:f7:bf:e4:12:5a:e8:18:f8:bc:00:f0:
                    65:a2:f5:31:5b:05:59:a0:f0:ba:af:99:18:89:d2:
                    54:17:d5:93:0b:49:16:54:45:fb:a0:65:68:12:2e:
                    38:68:d5:bc:f8:f7:73:3f:b6:9f:bf:64:02:6b:72:
                    e5:fb:51:04:4a:68:5b:23:24:91:20:e8:95:76:e6:
                    63:4b:46:90:3d:f2:45:b3:bf:07:e0:2f:b0:8e:f0:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.48.0/22
                IPv6:
                  2a0a:8a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206730

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:9f:52:48:05:e2:b5:ad:05:ea:8c:ad:e3:80:91:89:bb:
         e3:60:bf:0e:5d:4f:18:5a:cd:c8:95:c8:8e:a3:df:fd:9e:54:
         b3:b7:5a:8b:da:4c:12:8e:71:b7:51:1b:d7:76:aa:43:fe:3b:
         9b:b1:43:af:64:ed:36:7e:52:06:54:bb:bf:9a:2d:9d:4d:86:
         e8:59:a9:d9:5a:50:06:6a:2e:ff:55:a8:80:23:c1:91:c8:79:
         8f:10:70:79:1a:8a:5f:9b:cd:5c:a7:c6:ce:ba:f9:e5:30:7f:
         49:ee:9a:a5:04:21:ab:3d:6a:97:63:80:c6:70:25:1b:26:e7:
         00:29:eb:76:0d:bc:ed:73:38:de:20:ca:ee:d4:b6:63:c3:16:
         47:22:d0:b4:82:17:4f:62:34:37:6e:b5:4a:58:42:15:b5:0a:
         03:f8:19:d3:3a:44:ad:ce:1c:33:04:92:7b:12:dc:c4:a9:d2:
         67:60:ef:fd:67:6e:13:cc:ff:8a:97:b4:0c:da:69:5a:3c:da:
         cc:43:fe:60:47:e2:ef:ba:63:ea:c8:d3:49:bd:5a:98:15:a1:
         40:56:48:fd:41:a4:ce:0b:3f:13:ad:1a:47:79:60:2a:de:30:
         30:4d:47:2c:24:0d:ca:3f:6c:e7:2a:ce:37:cd:c1:45:10:55:
         4d:27:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----