Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
File:                     qif1ErChAmXfKzRvFDpkXDgnQr4.cer (raw, json)
Hash identifier:          HmUQxcvFUz8obhw5FVswWlEaHZP1SSj9ttRWiXzpUC4=
Subject key identifier:   AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067EFBE773AC92388AC8535D0C19468
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51202
                          AS: 198160

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:ef:be:77:3a:c9:23:88:ac:85:35:d0:c1:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aa27f512b0a10265df2b346f143a645c382742be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:03:21:a8:c5:50:bf:65:12:0d:ac:19:09:
                    39:a9:0c:de:5a:5f:d5:e3:44:af:0e:e2:d5:31:16:
                    65:b0:a0:b6:14:17:af:19:1c:a0:a8:e3:62:6c:8c:
                    ae:a5:b0:ff:a8:39:6e:9d:17:e2:1a:96:75:d0:c3:
                    2c:e0:9d:8e:92:ee:90:4d:a1:2a:29:0f:0d:47:05:
                    db:b7:c6:d6:71:ff:96:1c:10:5f:d0:dd:f6:ca:1e:
                    3b:14:e1:3d:d3:22:b7:fc:d1:dc:b8:bc:26:49:83:
                    d3:d0:1b:00:f6:8f:20:83:19:b1:14:9b:48:80:4b:
                    02:bb:d5:12:77:4d:0b:41:2c:e1:76:b8:bb:7b:e4:
                    29:f5:c2:bf:d3:4d:9b:10:96:68:36:95:a6:36:ce:
                    9b:a3:60:60:b2:0b:e3:26:55:61:91:2a:8e:cc:fa:
                    34:c2:b7:7f:02:92:b4:82:e2:a2:a4:ce:24:49:cf:
                    de:e6:05:4b:26:b2:33:31:5a:3a:71:a7:6b:79:67:
                    be:44:03:e2:bb:1f:6d:e6:38:b5:73:ad:0a:0c:17:
                    6d:52:81:27:ed:25:59:75:b6:23:b8:04:3f:8a:81:
                    31:0c:ce:21:48:fd:49:b1:b4:24:e5:ba:e4:37:8d:
                    85:c3:be:84:40:21:90:21:70:8d:c6:ab:23:06:0a:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51202
                  198160

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:fc:f0:b1:8d:12:44:b0:52:0f:7b:10:90:d8:82:92:0f:
         d6:94:0d:49:83:8e:2c:30:45:f0:b2:33:2d:9f:5b:18:94:9b:
         d9:28:79:56:4b:a0:7c:24:33:1a:79:ca:02:ff:46:f7:30:3f:
         53:c5:5c:4a:1e:75:c2:b8:76:02:e2:1d:e0:ed:aa:79:47:57:
         67:60:6d:5d:2b:f4:ec:39:59:25:5f:e6:99:95:f2:ab:fe:3c:
         18:3b:16:0f:a8:82:8b:64:23:e5:37:19:0f:3a:5a:58:d8:b3:
         56:c4:a7:7e:48:bd:07:3c:81:89:c0:61:fb:1a:3d:33:54:6b:
         17:b0:bf:37:ee:ba:bf:e5:b5:af:c3:b2:c9:73:22:1e:8c:ed:
         5b:bd:0c:40:7c:60:87:24:7f:ef:ea:f0:b1:bf:72:d8:7b:66:
         f1:d1:c6:95:80:54:45:ae:5f:df:35:ef:b6:2a:ef:05:be:78:
         21:c1:cc:17:5b:af:73:c0:9b:6e:17:d7:53:72:a9:16:79:a6:
         0f:73:df:90:f5:ad:2b:2e:67:73:69:17:d0:4e:c6:10:4c:0a:
         30:ef:d4:3c:4c:5c:b5:ff:50:49:d7:0c:f7:ba:f1:ac:ea:a2:
         06:a8:dc:21:10:76:ed:f7:11:4b:e8:36:46:f8:62:ea:cd:76:
         55:03:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----