Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
File:                     qPAjGPLOly5yQIzMx9MgrzDNKw0.cer (raw, json)
Hash identifier:          LWfZKolX0g+g9JHdJC8fwNR36SrM2DrVA1UuQ8SkwH4=
Subject key identifier:   A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCCFE506E55F34C70EEA3C1588E284
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 20493
                          IP: 185.113.160.0/22
                          IP: 193.108.21.0/24
                          IP: 2a06:6a00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:cf:e5:06:e5:5f:34:c7:0e:ea:3c:15:88:e2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:5e:1c:a0:58:5a:01:1d:5e:36:2f:51:6a:
                    6b:73:f3:7a:db:03:1a:b8:da:6f:ea:91:8e:18:be:
                    f2:1f:19:14:03:79:71:41:4b:e9:1e:54:a4:7d:be:
                    43:8c:3c:53:21:5f:76:c4:8f:dc:1f:fe:bb:55:6d:
                    36:72:72:42:9c:91:eb:bc:cf:1d:fd:9b:b1:47:ec:
                    b1:19:fa:71:7c:30:2d:63:27:1e:e7:75:c6:ea:50:
                    6f:f3:1f:d2:61:12:56:5e:13:af:77:4c:38:2f:c9:
                    e7:fe:50:bc:54:75:64:c2:00:9c:01:40:1f:34:34:
                    49:91:e8:22:5f:74:a5:28:3a:06:c4:d8:69:99:52:
                    fe:98:b6:49:8b:b6:fe:5f:b3:05:71:e2:8b:9c:06:
                    dc:92:9a:4b:41:76:9c:23:55:94:51:a4:83:1a:41:
                    91:3e:98:10:ca:b3:37:dc:fa:98:d0:f7:df:73:cf:
                    19:90:5e:63:17:67:35:89:1d:55:53:cf:65:cd:76:
                    7c:1e:74:7e:37:32:4e:f5:45:15:de:8b:cf:f1:2d:
                    b3:2d:79:62:22:20:5a:84:f8:02:54:df:9f:00:5d:
                    c3:89:5d:70:95:22:ba:3f:54:b2:48:0e:c0:e2:4f:
                    48:f4:76:62:c1:f3:68:a8:6a:ac:f4:da:de:41:eb:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.160.0/22
                  193.108.21.0/24
                IPv6:
                  2a06:6a00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20493

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:3b:78:55:81:02:5b:21:c2:6b:c1:2f:13:64:bb:65:d4:
         47:f3:f4:c3:58:6b:96:82:d6:f4:14:d4:c4:4e:7a:2b:22:43:
         a0:7c:51:b9:d6:e1:a7:d2:f1:04:23:01:1b:29:7a:4e:bf:35:
         33:9b:ac:0d:95:62:2e:d2:89:cc:00:55:04:95:26:b4:2f:c0:
         9b:4c:3e:81:53:65:e5:eb:3e:f4:4c:25:62:98:99:e4:b5:df:
         6e:48:99:b5:15:b7:d8:2c:10:a2:78:59:9c:c4:7b:80:87:c0:
         a0:16:93:8e:8c:c4:9e:e7:5b:cb:c3:69:63:39:9f:db:4a:2d:
         be:c0:48:62:c6:23:22:57:8b:8d:8a:d3:05:2e:6b:05:57:b2:
         a0:9c:30:b4:f8:96:1d:98:8d:b6:e5:58:17:35:c9:2b:e9:39:
         27:b7:a7:c5:03:60:e4:0b:25:f2:cb:64:a3:f8:b5:37:2c:f8:
         94:28:1d:da:a6:d9:36:75:94:64:22:ed:fc:d4:fb:0d:3c:b9:
         a2:7e:95:ed:a2:06:e8:b6:ad:bc:69:58:5c:1e:c2:3d:cc:ce:
         e1:3e:1c:33:57:93:7b:8e:37:1b:d5:fd:89:49:80:f6:ef:79:
         9a:8e:0d:65:3d:5e:a2:bb:96:58:02:47:c9:5b:1b:b0:f7:10:
         05:ae:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----