Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
File:                     qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer (raw, json)
Hash identifier:          10EntyaZ3PC0HfWBnURMYRO77wn72cPxgosQCF8ShSM=
Subject key identifier:   A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD85AF3F2BB22788CD65597F8EC0A2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202327
                          IP: 2001:678:708::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:85:af:3f:2b:b2:27:88:cd:65:59:7f:8e:c0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a86ee450deb3a708aee85b78238fa370f90457f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:7a:56:89:09:4d:74:9a:e5:39:95:53:64:
                    ae:0c:46:88:0a:ed:41:4b:ae:d0:c0:91:58:03:74:
                    79:93:ad:b5:35:2f:30:a9:6a:9d:3f:b6:8e:7f:6d:
                    01:a2:b6:ae:e8:b5:b0:94:74:64:41:98:4e:91:4c:
                    d7:c1:51:c4:83:e1:c6:91:62:f0:9d:50:17:b2:87:
                    aa:1c:48:a0:4a:87:b1:99:15:4e:10:03:70:57:c7:
                    e6:80:83:11:0a:cd:c9:51:c3:94:c0:55:56:de:68:
                    8a:02:18:a6:b0:03:34:55:7c:cc:3a:f9:32:20:91:
                    79:e6:0f:7d:29:10:6a:e6:5c:16:48:44:ca:79:5e:
                    4d:da:92:a1:23:d8:69:92:23:86:09:55:c0:9b:ae:
                    db:c3:64:63:d1:84:27:20:17:c4:6c:07:d3:14:2c:
                    c5:69:2d:0d:ab:19:36:12:11:a8:5d:d9:43:2a:2d:
                    91:14:44:02:16:04:38:2b:47:47:1b:7b:48:22:b4:
                    4f:a7:ab:fd:20:66:a0:d7:52:9f:95:b8:fe:fd:6c:
                    5a:9f:3e:07:1f:53:7b:46:61:f8:7d:36:db:e5:c1:
                    f7:f6:7f:40:6f:2e:60:e9:9a:11:bd:be:97:56:a8:
                    2b:5b:d2:42:7c:59:36:98:62:8b:d8:95:2f:a8:d1:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:708::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202327

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:9d:06:9b:5a:c2:11:10:26:07:e1:5c:66:11:bf:d7:a7:
         0b:88:7b:cf:d4:87:cf:42:99:0c:ad:aa:7d:9e:68:57:3a:af:
         81:1c:0a:11:0b:9e:de:29:ee:64:46:69:d6:78:44:e4:c5:a7:
         4c:1e:d8:f4:84:c7:da:d5:09:38:28:d3:b3:79:5e:05:00:06:
         15:f0:0f:17:38:7d:87:49:12:b0:89:b7:87:2d:93:f3:a5:59:
         b6:d7:72:be:2f:f3:11:9c:e2:17:32:0d:45:c7:95:4f:19:b7:
         29:e6:34:75:a4:9c:b8:d0:b9:cc:4a:54:86:b2:eb:9b:e5:ad:
         13:e5:10:d8:e2:72:a7:ac:48:84:ef:c8:c8:56:39:1a:95:57:
         7b:9c:39:1a:ac:05:6c:94:95:3d:86:37:d8:c0:2f:45:05:5f:
         47:a6:cc:77:5d:b0:46:c7:82:e0:6b:86:64:62:69:de:40:94:
         15:56:38:7a:0d:b9:46:40:b8:a2:91:b0:e6:e4:09:26:12:41:
         06:ec:7f:58:96:37:c6:bb:0e:75:24:b7:93:8f:35:e1:99:6d:
         21:f4:f4:cf:d1:2e:73:92:f0:0c:9f:a3:fe:a7:df:e8:d7:18:
         52:77:1d:f7:d3:0f:0c:fa:05:1c:d0:b6:6e:33:1a:0d:79:39:
         ff:bd:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----