Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
File:                     rqAyAc2mqK295P6ARuxl-WrGqWw.cer (raw, json)
Hash identifier:          6Kz6/YtPtdEAt0stRMIHf9QoCYyXi0pTlv7DVWPWFzU=
Subject key identifier:   AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B7A3B9DC570B1F501E45EE087BCCE1A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 21 Mar 2025 07:38:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47274
                          IP: 91.204.8.0/22
                          IP: 195.62.80.0/23
                          IP: 2001:678:3e4::/48
                          IP: 2001:67c:1b34::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b7:a3:b9:dc:57:0b:1f:50:1e:45:ee:08:7b:cc:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 21 07:38:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:31:be:d2:b1:66:2d:db:a9:d8:2c:80:b1:
                    d2:6f:d0:be:db:72:83:27:f0:39:e0:24:83:9f:2f:
                    4d:11:c0:85:ed:f9:73:0f:dc:f8:5c:4b:a1:c7:a8:
                    05:28:18:3a:de:44:3a:a2:4f:d8:72:79:6f:96:15:
                    81:a4:50:25:58:03:8d:9b:39:9c:63:97:d1:23:bd:
                    c0:d8:1b:f8:0f:88:62:6d:8e:16:97:24:f8:b7:b4:
                    7a:21:12:8d:a3:86:99:66:f4:7f:76:8e:49:3e:7f:
                    00:ce:3b:3a:35:74:3a:d8:c4:22:e2:fe:f0:00:b2:
                    f1:63:60:c6:7b:ad:e1:04:d8:28:ff:bd:ab:2c:d0:
                    f1:07:08:86:b9:ff:12:8a:09:2d:e1:91:48:62:05:
                    8d:44:38:ac:17:4a:ec:b1:29:4d:98:33:bf:58:63:
                    48:63:de:2e:83:54:f6:67:da:e8:12:41:ce:b5:35:
                    7d:ec:25:72:b0:56:b9:95:1a:40:53:7f:cc:92:96:
                    07:1a:19:b5:69:53:e1:8f:b7:3c:a3:2a:85:06:3d:
                    91:25:c9:69:81:ed:b0:50:70:d8:da:5c:f7:55:9f:
                    c8:a3:44:41:71:58:3f:07:d9:bd:3a:05:ac:5c:b3:
                    9a:17:0d:97:90:f0:73:3b:92:01:65:86:8e:0c:0f:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.204.8.0/22
                  195.62.80.0/23
                IPv6:
                  2001:678:3e4::/48
                  2001:67c:1b34::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47274

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:d4:5c:06:0f:d9:d3:8f:bf:22:5f:49:dd:84:81:54:c8:
         1c:39:b4:bc:e1:b7:56:7b:90:f1:ac:49:dd:3c:b7:9e:48:98:
         6e:0a:0d:48:5a:2b:8e:e0:0a:5f:6a:84:12:6d:83:0a:50:84:
         3c:e9:48:c5:56:f9:1e:c3:e0:6e:52:52:40:8c:cd:d6:0d:05:
         ba:12:7e:bf:5a:ef:05:5b:3c:1b:6e:5e:a2:28:a0:0c:54:c7:
         de:16:d4:5c:f7:c6:4c:01:49:8a:62:ae:05:3a:4c:c3:30:a3:
         be:7e:de:82:6b:f8:ca:ec:b5:4f:da:7b:56:73:b0:f4:35:7b:
         e4:83:eb:8e:96:e9:1b:fa:d9:4d:ce:1e:7a:4b:59:56:e7:78:
         77:3c:d7:80:3e:70:bb:6b:97:c1:15:e6:59:a7:0f:ab:ba:bf:
         a3:6a:dd:99:1f:af:ec:3c:9e:c5:21:45:1d:b4:c1:b7:c3:17:
         7c:81:3e:01:0b:93:71:70:04:99:0c:72:2d:fc:60:1f:4f:7a:
         0d:51:f1:b9:d5:02:39:6b:6e:01:6e:ca:79:ec:09:a0:ee:92:
         26:74:22:83:70:cc:98:24:d7:79:20:cb:56:d9:7a:06:76:3c:
         a0:40:15:c0:f6:eb:11:b2:47:93:4b:63:57:b0:2c:bc:6a:d3:
         77:bb:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----