Certificate

$ rpki-client -vvf rpki.qs.nu/repo/cynthia/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
File:                     FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (raw, json)
Hash identifier:          UDPcyZwJsS4jLpjuoQ3qDoMPCXR4pwao76NtHMc2Y7k=
Subject key identifier:   FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Authority key identifier: 22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C
Certificate issuer:       /CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
Certificate serial:       43EB04299EE37B1ED88E18FBB21F287F8893E28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer
Manifest:                 rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
caRepository:             rsync://rpki.qs.nu/repo/cyntest/2
Notify URL:               https://rpki.qs.nu/rrdp/notification.xml
Certificate not before:   Tue 23 Aug 2022 20:12:57 +0000
Certificate not after:    Tue 22 Aug 2023 20:17:57 +0000
Subordinate resources:    IP: 2001:67c:1190:555::/64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:04:29:9e:e3:7b:1e:d8:8e:18:fb:b2:1f:28:7f:88:93:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab6906f1375c1930cf9ea6c4f3c90039f5ed4c
        Validity
            Not Before: Aug 23 20:12:57 2022 GMT
            Not After : Aug 22 20:17:57 2023 GMT
        Subject: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:97:31:be:6c:77:50:ba:ad:de:ac:e2:6d:
                    2c:8f:b8:5f:99:76:13:b4:75:61:d1:d6:66:21:55:
                    c4:67:19:d1:f5:fd:48:74:f9:b9:90:5b:99:bf:2b:
                    54:f1:bb:79:91:47:a3:fd:93:48:95:a0:de:72:2a:
                    dd:34:ed:26:3a:a3:02:f7:97:3b:21:80:43:9f:18:
                    0e:f4:b3:d0:ea:3e:50:29:0d:96:1f:05:54:b1:d4:
                    e9:aa:50:30:24:2b:01:47:48:43:fa:53:96:9d:81:
                    b1:04:fc:66:1a:18:ca:7a:97:1a:e1:b2:42:f5:d0:
                    31:8f:e4:9a:f1:05:a4:7e:d5:d5:ec:bf:d3:b7:1b:
                    9e:80:27:1a:4a:8a:dd:c1:93:86:8c:4d:e5:2f:30:
                    94:10:f4:e4:b8:7a:1b:e6:8e:46:d3:4c:13:bf:f4:
                    3e:0e:ea:72:76:5c:50:15:c3:8a:9f:c3:69:aa:dd:
                    98:38:e7:f5:27:46:d9:81:23:70:63:df:5b:8a:76:
                    6a:3f:4a:42:ef:14:a3:01:dd:2d:03:3d:a7:2c:3a:
                    ba:98:5c:c8:f6:7c:e3:10:0b:b9:76:1e:af:57:53:
                    82:74:41:c8:3c:53:b5:90:04:c0:0e:ce:9a:c1:5d:
                    d7:35:15:df:5c:82:a2:50:13:77:04:6a:df:4b:bf:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
            X509v3 Authority Key Identifier:
                keyid:22:AB:69:06:F1:37:5C:19:30:CF:9E:A6:C4:F3:C9:00:39:F5:ED:4C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/cynthia/2/22AB6906F1375C1930CF9EA6C4F3C90039F5ED4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqtpBvE3XBkwz56mxPPJADn17Uw.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.qs.nu/repo/cyntest/2
                RPKI Manifest - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
                RPKI Notify - URI:https://rpki.qs.nu/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1190:555::/64

    Signature Algorithm: sha256WithRSAEncryption
         68:9b:96:04:9f:d6:b8:96:43:70:d1:a3:90:ac:f9:de:c9:35:
         6b:e0:67:a8:b6:72:25:66:3b:1c:11:15:50:95:a6:16:f3:a9:
         79:da:cb:51:97:5c:4e:36:45:ca:4c:72:99:45:3d:9f:d3:1d:
         b1:06:77:3b:ee:85:a6:46:9b:68:3d:03:90:19:96:f8:68:de:
         86:5e:30:65:71:e3:a2:40:6e:0d:7b:3d:d7:cf:47:9d:ab:ee:
         2c:ea:30:72:08:85:44:49:a5:d0:92:0f:f1:ce:85:58:a4:85:
         0a:b6:f6:f5:ae:f8:d1:a1:f2:d9:0f:66:d9:99:cf:2c:cd:97:
         c2:4b:a2:b6:2e:06:8f:10:19:36:e6:6a:98:fb:0b:fc:b4:79:
         09:59:3d:b6:2d:61:e8:84:cc:ce:2f:58:ab:bc:2f:f0:c5:28:
         f1:1d:dd:94:22:ce:25:28:97:b2:db:80:eb:22:50:66:74:a3:
         ae:fd:10:66:82:4f:56:40:52:e3:e2:9c:1c:47:7e:7b:2a:e5:
         a7:78:b7:f6:23:3c:cb:2a:ec:57:fb:90:dd:36:68:29:12:dc:
         05:04:de:fd:b4:3c:37:9a:f2:05:2c:a7:69:9c:d1:9e:7d:80:
         f2:3b:b2:0d:be:e5:eb:86:3c:71:a7:e2:0e:be:07:6d:57:bb:
         bf:9e:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----