Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
File:                     q7lESdTSRidxdzvAimJFB9pRKw0.cer (raw, json)
Hash identifier:          wIcpqLxUDFf90ChShHH7GhryOK8MCcewOt6JyPwP+ro=
Subject key identifier:   AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01954BDBE8152A35EF3A442D8891302B036E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 09:20:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 62.70.0.0/16
                          IP: 212.125.160.0/19
                          IP: 213.203.0.0/18
                          IP: 2a02:2ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:4b:db:e8:15:2a:35:ef:3a:44:2d:88:91:30:2b:03:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 28 09:20:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=abb94449d4d2462771773bc08a624507da512b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:c7:be:a1:51:26:4c:b2:d3:83:ca:9b:37:
                    81:d0:03:7b:cb:41:5f:46:41:25:2f:55:7a:06:77:
                    dc:51:60:73:62:d6:75:e5:bd:6f:1a:e7:37:be:a4:
                    61:55:db:eb:ad:86:8f:99:f0:8b:55:35:94:f4:80:
                    b1:30:db:0c:e0:c4:c7:1c:0e:4a:29:36:2d:f2:00:
                    dd:f1:55:dd:dc:fe:47:23:4b:db:82:e3:ac:2e:2c:
                    d1:04:22:50:e7:0d:63:a9:a6:32:6c:18:30:d3:bc:
                    06:35:cd:8b:76:71:31:0b:ff:c5:1e:4c:13:79:e9:
                    05:cd:c4:e3:b4:a6:f0:4d:7c:67:93:04:f8:5d:37:
                    c0:0c:6c:43:96:19:c6:12:65:da:be:f6:f4:da:d2:
                    12:ac:ff:40:87:69:d1:4c:78:f0:d8:fb:e1:cd:a0:
                    c9:d0:de:7a:0c:fc:74:1b:43:5b:82:b7:cc:7b:98:
                    42:0a:ae:00:fe:d5:4f:28:89:ba:a7:6c:86:38:28:
                    8e:a4:10:47:26:11:b3:60:55:f4:a1:3b:ed:3a:77:
                    27:01:12:a0:c4:c9:fd:04:d7:11:4e:b3:3e:68:ca:
                    47:60:90:ee:bf:95:d4:94:34:b1:9a:77:0b:5b:5b:
                    b6:02:c1:38:db:7e:9b:56:44:b8:8a:cd:61:49:ed:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.70.0.0/16
                  212.125.160.0/19
                  213.203.0.0/18
                IPv6:
                  2a02:2ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:ee:2c:d8:b3:d7:6c:46:63:88:5f:d0:a7:31:0b:f2:e4:
         6c:80:14:a8:ea:96:33:3f:23:69:79:b2:f0:82:2b:75:41:8b:
         0a:2c:e2:20:1a:45:e5:88:2d:87:53:80:f8:a4:b1:59:c7:02:
         fc:01:34:02:5a:40:4a:b6:27:45:da:77:98:6a:16:44:06:d1:
         14:32:92:ef:e7:36:71:5d:27:1c:d3:64:f1:b4:cb:04:84:eb:
         40:73:1f:21:78:12:6d:40:1a:2a:b5:1e:3c:5b:50:0d:41:15:
         16:29:9d:cb:b4:80:a7:11:1b:b5:ad:0a:d7:f2:1a:f7:b0:99:
         c7:f7:d7:27:40:f5:57:1c:25:8e:de:c7:e3:8f:df:88:14:2a:
         8c:3c:dd:d0:d9:35:d7:80:d0:5b:cc:64:a3:69:40:1b:e2:59:
         97:a6:74:48:93:7e:6e:dc:78:75:5b:ca:4a:44:3b:f3:5b:d9:
         4b:be:9d:b3:40:c9:a5:67:08:b5:85:2b:2c:9a:f2:f0:17:c1:
         75:e1:58:ce:ea:42:2d:aa:de:cd:df:75:54:5d:0f:34:76:38:
         d5:4a:56:b0:18:a6:8c:09:7d:d2:8d:ee:81:3a:5e:00:81:68:
         fe:78:7c:b8:44:ce:ed:12:f5:62:f4:d0:ec:ab:ba:ca:30:71:
         8a:90:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----