Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
File:                     pqBZBOyBdGoKZtIH9dNvjZeIig0.cer (raw, json)
Hash identifier:          rOdl/QWyGmmt6MGDO66qKi+G3gzAjfO2FGtn3l81grY=
Subject key identifier:   A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368D83F914D7A4713AFA21C399C1BCA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60318
                          IP: 193.104.157.0/24
                          IP: 2a06:b300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:d8:3f:91:4d:7a:47:13:af:a2:1c:39:9c:1b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:81:19:a8:c8:12:0b:8c:80:84:55:13:ab:
                    1a:69:e1:61:07:6e:bd:8a:51:b0:a0:c8:9b:a0:81:
                    46:ba:98:ab:ca:4d:c0:43:a4:de:42:d6:0a:19:cf:
                    b9:67:7b:f6:cc:02:2c:f4:db:95:86:5f:77:07:88:
                    d8:b5:9a:d6:6e:ce:0b:62:0e:bb:54:19:4b:1a:34:
                    28:64:7d:d5:18:bf:61:8b:a4:17:98:e7:1e:97:aa:
                    45:49:20:1a:74:31:a9:0e:30:93:ec:35:11:26:a3:
                    d7:24:5f:45:22:77:76:a6:8b:e2:32:0c:97:e2:59:
                    c9:e4:1e:62:93:63:32:9c:68:2d:5f:e8:f2:b1:f9:
                    68:0a:7c:a5:24:4c:eb:69:79:58:3c:d9:04:0e:0f:
                    a8:4d:84:f3:3e:16:16:31:e6:8a:eb:5a:01:aa:34:
                    f3:ae:60:11:8b:e4:68:24:64:35:02:eb:d8:96:59:
                    cc:7f:b4:73:aa:e0:b8:e3:f2:38:04:4c:db:db:fd:
                    b2:fd:49:5d:7d:8f:3e:f9:f1:2e:8c:c8:a2:5b:9a:
                    ae:d0:97:f4:9d:0c:fa:b5:11:f2:db:e6:43:70:d0:
                    8d:13:bd:54:27:70:d2:22:21:08:a6:08:ca:33:42:
                    91:ac:0d:37:2a:90:23:20:84:61:62:e3:3e:99:da:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.157.0/24
                IPv6:
                  2a06:b300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60318

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:00:ae:22:9f:50:18:df:e9:2d:88:8f:72:4b:f8:4e:8f:
         48:e3:f3:d8:8d:a5:94:1f:01:6a:9c:4d:f6:cd:0e:2b:45:25:
         3a:61:1e:f7:c5:dd:b4:91:6d:61:09:ef:3f:d9:ee:29:cf:8a:
         7f:5b:39:04:d2:63:05:4b:59:d1:39:cb:16:5e:91:c6:b0:43:
         9d:7e:ba:ce:f9:3c:99:fa:22:2e:54:c3:89:14:40:28:7c:da:
         ff:df:23:aa:c7:d8:00:25:ad:1b:c6:44:6f:0e:2c:a6:90:79:
         d8:cf:fa:b9:78:3b:c4:a8:ab:f2:36:c0:fe:a9:0f:29:c6:40:
         fe:6a:4c:88:1b:a1:2f:d6:a3:88:bf:47:79:a6:3d:a8:c5:f7:
         fc:b2:92:8f:bb:42:a8:3d:29:aa:b8:21:9e:ff:78:a9:f9:80:
         ad:09:64:f9:57:38:0b:56:6b:f0:44:6c:d5:1a:bb:3b:f1:e8:
         28:ef:1a:90:d7:00:0b:93:06:af:ca:5f:08:ec:2d:76:79:8d:
         37:54:13:8a:2f:ee:22:9f:86:20:ae:9d:bb:73:e0:98:cb:8b:
         5a:16:95:8b:19:95:30:82:6d:0e:98:fb:53:28:a0:d5:cf:d6:
         4d:aa:8f:17:58:86:63:e2:05:15:fa:28:8e:79:52:25:03:c6:
         e0:a2:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----