Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
File:                     qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer (raw, json)
Hash identifier:          fS5HHCLx4W02FJ6Wget3TF87dZt+EYPCkQIbyyLGA2o=
Subject key identifier:   A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA589B343321699D7F9029407C5937
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200959

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:58:9b:34:33:21:69:9d:7f:90:29:40:7c:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:4b:69:e0:a1:7a:35:5f:96:11:b5:89:76:
                    2d:f0:b2:8f:d8:1c:a3:87:5f:06:ed:1b:a5:ba:e9:
                    45:86:fc:36:70:f6:1c:e4:6a:3b:b5:52:c0:9e:1a:
                    9f:df:9c:d8:64:da:d1:9d:dd:d3:a0:e2:46:df:2b:
                    3a:a5:db:c6:8b:99:d6:bb:d8:0b:fd:b0:2a:9a:a0:
                    27:11:2c:b3:d4:35:4a:dd:86:88:a0:ab:1e:9f:42:
                    b7:df:b8:80:97:f3:70:9c:05:66:10:e3:e9:70:11:
                    bb:e9:f0:0f:47:be:f7:8b:b2:81:f6:48:ce:a9:ad:
                    44:62:54:6e:a9:a1:24:24:ed:84:85:e1:6b:cd:c4:
                    03:fe:8a:77:ab:d0:a9:a4:9c:0c:3e:34:6d:0b:d4:
                    70:d3:cf:f4:e9:56:39:00:13:77:48:57:f9:17:8a:
                    a6:c6:3a:fd:14:a5:d1:f3:46:f3:7d:ec:6e:ac:54:
                    f3:e6:f3:16:31:58:8b:ac:fa:41:8a:fa:50:c9:e8:
                    93:66:ad:e1:34:55:6a:8a:f8:57:0d:27:3b:55:a0:
                    4c:9b:65:be:03:03:b5:74:8c:e1:7a:f3:e3:7c:6a:
                    f2:a1:e6:0e:44:ec:71:15:8b:d0:c6:2b:f3:1b:b7:
                    e8:0a:09:e9:21:ab:63:d1:d4:6e:e9:62:39:04:ee:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200959

    Signature Algorithm: sha256WithRSAEncryption
         45:69:37:e5:6c:f9:7a:aa:53:31:d1:7e:c6:35:36:26:13:cb:
         6f:90:7c:d6:df:a2:3b:49:04:73:e4:c4:55:85:f0:ae:0f:64:
         b5:ff:4f:0b:e6:c1:c5:ab:87:6d:fe:b2:1b:c2:5e:67:dc:91:
         7e:ab:1c:e0:05:3a:f5:b4:48:35:de:44:66:e5:7c:42:01:a7:
         c8:7e:9a:9d:c9:cb:2c:d7:2e:9f:74:c1:2b:9c:23:df:9c:10:
         f6:54:dc:fd:0f:f8:f1:3f:1d:7b:f2:e8:d2:f1:d0:48:e6:bd:
         19:12:c5:65:c7:c8:88:6c:f0:a2:4f:ca:53:5c:ac:f8:65:76:
         a1:c2:e5:77:09:65:5f:42:e2:29:26:bc:6c:f1:7a:33:75:93:
         e9:66:81:b3:6e:99:6d:f4:a7:8a:13:8c:9b:f7:8d:91:77:95:
         d3:d6:d0:84:35:f5:39:27:53:7d:ab:a7:7b:20:d2:fe:8c:52:
         8a:be:6b:8d:31:98:df:66:c2:45:e9:d2:63:da:55:c7:35:fe:
         63:2f:91:07:1d:6f:55:6c:e3:29:4c:d0:89:b7:81:19:db:56:
         76:a2:84:19:7b:07:47:82:56:aa:0c:58:28:44:57:0b:48:5f:
         ee:94:4f:06:b8:d2:e9:bd:05:5f:62:55:a9:1e:0b:fc:43:3d:
         87:7f:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----