Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
File:                     qsqNwMC5IbCJ8WAmGORVN5enR0I.cer (raw, json)
Hash identifier:          OpQMPCa242dmejTpbjDk1DjNYr4KJ2axnAEpY1L9rYc=
Subject key identifier:   AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019522C55F43ED88805F2405D14BC9044336
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 09:51:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.147.252.0/23
                          IP: 194.150.180.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:22:c5:5f:43:ed:88:80:5f:24:05:d1:4b:c9:04:43:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 20 09:51:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aaca8dc0c0b921b089f1602618e4553797a74742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:8a:24:f4:b1:ab:04:d0:75:6b:b9:c7:62:
                    33:60:55:5b:f5:fa:d8:98:17:3b:5e:df:87:48:03:
                    51:d7:95:73:d7:28:f1:db:e2:8b:97:e6:40:c8:4f:
                    a3:89:f2:19:84:c1:0a:2b:8f:3d:dc:7b:bd:aa:7f:
                    85:53:1f:19:00:76:35:dc:1c:56:1b:cd:45:55:06:
                    03:c4:20:40:53:11:f4:6d:5c:e7:19:6a:05:96:bb:
                    9d:f0:33:c8:78:3f:b0:ab:59:c3:9e:1e:82:96:08:
                    c4:be:d3:5e:6a:86:e2:5d:83:1a:86:be:e6:e4:0e:
                    74:45:af:c0:f7:d0:57:3d:93:f8:55:ea:a0:1c:f9:
                    e6:94:d0:e1:f1:d6:4d:86:fa:70:5b:9b:75:e6:88:
                    c5:0a:71:fb:d5:dd:4a:67:06:b7:ee:75:0c:d7:6d:
                    b6:3e:70:e8:68:08:d3:c6:c5:e5:43:16:cc:65:6a:
                    78:6c:4d:4a:fa:28:90:86:52:e3:a6:4e:6d:d7:e1:
                    e4:b7:85:b3:a9:a8:50:66:f7:bc:3f:27:8f:2f:b2:
                    56:61:41:c5:3c:0c:4b:74:8d:93:dd:3b:85:3d:44:
                    64:eb:e4:00:93:a6:9b:f6:2d:ac:89:b0:30:82:d2:
                    04:3e:69:da:3f:47:20:b7:a6:ee:ac:6d:ac:34:ea:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.252.0/23
                  194.150.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:97:79:92:3e:24:f1:a4:b0:5f:4e:1d:03:e6:af:fe:ba:a0:
         b6:d1:4f:26:4a:04:3d:b0:01:cc:9e:52:cf:74:db:47:da:57:
         42:68:60:6c:c4:b5:c1:44:65:61:0b:0c:ef:f2:8c:d9:17:88:
         3f:ad:59:da:72:3f:65:0d:9b:ca:91:5e:ce:e2:62:6d:28:67:
         36:37:13:3f:09:c9:59:e5:df:85:61:12:70:74:d1:a7:a8:29:
         12:ed:23:5b:e0:44:9c:81:cd:70:0a:47:35:f8:37:b6:57:77:
         f9:f2:e0:76:e6:c3:28:57:56:56:a6:fb:cd:c7:fc:b0:7a:2e:
         07:e9:1b:bb:d9:d6:f3:5b:be:e2:48:46:29:a3:9f:10:2a:a7:
         1a:48:d4:65:ac:0d:85:07:5a:d0:2a:93:d9:5b:14:02:39:c9:
         68:5d:cc:66:d6:66:0c:e5:b9:df:b7:ed:3e:cc:88:62:dc:20:
         49:6e:d1:3d:5d:13:8f:b0:27:68:e7:5f:04:11:22:cc:56:f7:
         56:65:ff:65:1f:64:c0:bf:8a:96:bc:42:bc:1b:33:78:bb:58:
         52:ed:be:6e:64:89:66:42:e2:fb:8c:33:11:0c:74:05:25:27:
         16:2f:5d:b0:16:3a:39:a0:29:11:3b:e9:41:fb:13:e3:75:1c:
         4d:dd:11:3a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZUixV9D7YiAXyQF0UvJBEM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjIwMDk1MTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWNhOGRjMGMwYjkyMWIwODlmMTYwMjYxOGU0NTUzNzk3YTc0NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5yKJPSxqwTQdWu5x2IzYFVb9frY
mBc7Xt+HSANR15Vz1yjx2+KLl+ZAyE+jifIZhMEKK4893Hu9qn+FUx8ZAHY13BxW
G81FVQYDxCBAUxH0bVznGWoFlrud8DPIeD+wq1nDnh6ClgjEvtNeaobiXYMahr7m
5A50Ra/A99BXPZP4VeqgHPnmlNDh8dZNhvpwW5t15ojFCnH71d1KZwa37nUM1222
PnDoaAjTxsXlQxbMZWp4bE1K+iiQhlLjpk5t1+Hkt4WzqahQZve8PyePL7JWYUHF
PAxLdI2T3TuFPURk6+QAk6ab9i2sibAwgtIEPmnaP0cgt6burG2sNOrNbwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFKrKjcDAuSGwifFgJhjkVTeXp0dCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2ViMzFk
Yi1lNjU0LTQ5MWUtYTE0MS05MWQ1MDczOGQxZTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvZWIzMWRi
LWU2NTQtNDkxZS1hMTQxLTkxZDUwNzM4ZDFlOC8xL3FzcU53TUM1SWJDSjhXQW1H
T1JWTjVlblIwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwpP8AwQBwpa0MA0GCSqGSIb3DQEBCwUAA4IB
AQBol3mSPiTxpLBfTh0D5q/+uqC20U8mSgQ9sAHMnlLPdNtH2ldCaGBsxLXBRGVh
Cwzv8ozZF4g/rVnacj9lDZvKkV7O4mJtKGc2NxM/CclZ5d+FYRJwdNGnqCkS7SNb
4EScgc1wCkc1+De2V3f58uB25sMoV1ZWpvvNx/ywei4H6Ru72dbzW77iSEYpo58Q
KqcaSNRlrA2FB1rQKpPZWxQCOcloXcxm1mYM5bnft+0+zIhi3CBJbtE9XROPsCdo
518EESLMVvdWZf9lH2TAv4qWvEK8GzN4u1hS7b5uZIlmQuL7jDMRDHQFJScWL12w
Fjo5oCkRO+lB+xPjdRxN3RE6
-----END CERTIFICATE-----