Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
File:                     qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer (raw, json)
Hash identifier:          OtFlgmdvsynS6IWbpqhCR73jkxKaRrMwt3qGua1fa4o=
Subject key identifier:   A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A0DA006CD4B2F3913A993C4D0069B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216286
                          IP: 91.199.2.0/24
                          IP: 2a13:e440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:0d:a0:06:cd:4b:2f:39:13:a9:93:c4:d0:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:99:bc:52:48:63:84:6f:6f:f2:c4:6f:ff:
                    9e:af:a1:d1:0a:56:ec:90:6b:76:41:c8:c5:37:5a:
                    7a:4c:b2:44:b6:65:31:f5:7a:66:79:25:4a:d4:02:
                    78:bd:65:c2:9b:97:1f:8f:2e:bd:b7:92:7c:60:8e:
                    83:89:1f:7a:c7:03:c6:ad:c1:8f:5c:80:8d:10:9a:
                    f7:27:59:c6:b6:d6:7b:69:52:d4:09:dc:fd:b2:97:
                    be:b4:56:89:1a:aa:1d:37:c3:da:37:69:65:97:1b:
                    0d:22:16:3e:49:8a:d5:5b:4c:2d:01:ed:96:48:a7:
                    8c:f9:58:1f:c1:dc:15:53:b1:2a:35:d0:85:c4:0e:
                    66:ee:21:52:e2:9a:cc:8c:fa:32:ef:cc:25:a1:af:
                    31:98:c1:9d:eb:bd:a9:13:b8:06:7b:c0:f7:63:e0:
                    bf:7e:d6:fd:4f:a3:3e:8b:17:12:f2:db:94:4c:2e:
                    50:96:71:b5:ec:45:02:85:47:da:79:91:26:1e:3a:
                    b0:c2:e9:1f:2c:e4:ba:06:e6:9f:77:5d:c4:22:b9:
                    6b:4b:52:c9:f3:3b:39:93:8f:5f:f8:17:45:82:8c:
                    66:df:96:b2:ec:8c:31:60:d7:18:58:cc:8d:bd:9b:
                    35:09:e7:3a:47:ec:f7:74:e1:e1:6c:c8:76:08:c6:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.2.0/24
                IPv6:
                  2a13:e440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216286

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:e4:f1:c8:83:c1:f6:30:57:f5:c7:cb:64:32:64:f5:5a:
         4f:31:4d:9a:6f:52:94:8d:1c:24:ae:8f:df:89:fd:ee:94:57:
         f3:92:9f:b9:d8:9f:92:16:e6:f3:31:a8:bb:2c:96:47:00:0f:
         c5:da:e1:30:d2:3a:56:7b:00:c6:b2:c1:79:61:92:f8:ef:e9:
         f0:6a:3c:54:6f:c3:5b:f0:17:b2:53:60:58:22:d7:97:d4:df:
         32:44:12:5c:92:45:ec:17:7b:3e:d4:87:a5:0a:b2:90:40:93:
         fa:cf:b2:bb:d8:02:b5:77:89:31:13:04:d6:78:93:b5:bc:10:
         a6:9f:87:89:af:d0:10:68:bd:70:71:41:09:95:98:3e:e5:14:
         11:06:75:5d:b4:7b:fe:de:0a:36:ab:4c:c4:95:07:10:ad:fa:
         03:82:75:e7:f4:93:c5:52:d5:6e:c8:cd:fe:c1:eb:5f:9a:be:
         bf:ec:8e:d7:5a:82:26:65:9c:7e:4f:99:34:40:10:db:49:d3:
         15:d1:4f:85:87:00:19:53:8e:ee:f1:7e:6f:bd:02:10:98:10:
         19:cb:2c:29:1f:16:1c:a2:1c:0e:2f:5b:bf:ca:41:1f:9c:25:
         1f:8d:f9:15:b5:97:fd:e5:62:d7:fa:1d:fa:38:be:c8:7a:fd:
         61:eb:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----