Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
File:                     Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer (raw, json)
Hash identifier:          r0KaWQCdyqPZD8tQH3EPPzOjNU4q90FRIfBu+WAjkQs=
Subject key identifier:   42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252142A2B07026C7EBB94AA5EA57FB50
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214790
                          IP: 185.37.8.0/24
                          IP: 2a10:c940::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:42:a2:b0:70:26:c7:eb:b9:4a:a5:ea:57:fb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:02:21:c3:91:74:64:3e:d0:ca:64:3e:f0:
                    5b:6a:f3:5a:98:18:06:e5:58:22:14:ed:54:67:7e:
                    c1:e8:b7:43:8e:dc:59:be:a6:d3:3a:1d:b2:6a:5f:
                    a3:29:30:c6:28:d0:8c:6d:0e:8e:49:af:16:f5:27:
                    2a:3c:4b:af:13:68:e5:1f:0a:56:bd:73:0c:32:ef:
                    b2:4d:fe:c1:b1:6c:5f:03:9a:66:2d:8d:c4:68:b6:
                    b1:dd:13:57:bc:9a:fb:4b:31:96:b1:07:b2:b2:3f:
                    8f:f3:3f:e8:48:e1:7a:1b:d5:8a:12:e2:d3:21:55:
                    01:b6:98:49:01:24:9d:5f:68:96:92:cb:5c:14:4e:
                    0a:3d:5a:92:8b:00:fc:19:2e:0f:75:8c:11:bd:d6:
                    cf:5d:d2:6c:68:7f:66:69:97:7a:d8:dd:80:73:f7:
                    33:17:6c:2a:d0:7d:58:ac:80:cb:d4:b8:1d:aa:e4:
                    4d:52:5d:b5:70:1a:bb:86:1b:b8:d0:26:94:60:21:
                    25:47:87:89:33:8d:83:f7:e5:d4:cc:cb:66:9e:5a:
                    98:e3:73:89:4c:a0:cb:6b:b3:bc:57:bb:52:85:a4:
                    e1:18:e5:8a:08:75:1d:09:09:cf:7d:e4:f0:3e:0b:
                    9a:e5:d6:a5:b8:a4:fe:8f:45:f2:fc:9f:e7:eb:2a:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.8.0/24
                IPv6:
                  2a10:c940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214790

    Signature Algorithm: sha256WithRSAEncryption
         30:37:52:89:c0:bd:b4:d4:38:d3:29:ff:9a:31:b1:de:f0:2f:
         29:70:4b:59:08:b4:55:47:10:3e:9a:53:24:11:5b:19:b2:54:
         bf:0c:24:3c:26:ab:79:d5:82:f9:77:eb:55:c0:79:59:52:37:
         79:31:a2:62:ce:73:65:cb:9a:9a:73:aa:6a:56:47:38:c3:a8:
         30:e3:94:67:5a:20:99:ea:32:d4:cb:30:62:06:84:52:00:9f:
         99:3a:d7:20:99:c3:51:a7:38:75:4c:f2:4f:9b:26:eb:ef:ac:
         f8:a2:a8:a6:67:35:47:62:2b:a4:a7:02:6d:a7:d9:c5:29:65:
         7c:61:b6:b0:35:6c:15:c3:c9:b6:48:40:58:b7:57:8c:29:fb:
         fa:6c:45:0d:1b:5e:4e:51:12:98:70:6e:ff:ae:17:b8:f6:6b:
         d0:cd:81:ba:af:e9:7b:61:f7:44:37:58:e8:40:16:72:e7:88:
         3d:e9:d3:3c:02:1c:d0:70:23:bd:29:a6:77:ff:15:cc:db:12:
         dc:e2:34:ef:56:58:22:bc:52:13:d4:cb:9a:47:fb:3d:2b:c6:
         02:40:eb:48:a2:47:0c:45:4a:35:a9:74:f2:fa:49:0e:7b:1b:
         32:3e:7e:29:46:fc:9a:b1:6c:12:ef:03:cf:d7:75:d9:74:90:
         22:be:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----