Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer (raw, json)
Hash identifier:          n+4tgNlnC2IcYZEvK8egiiB4wgahdt+mzoyMFAU0lkg=
Subject key identifier:   75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244523D72AF26DE59333C6C8B4F892CA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215629
                          IP: 2001:67c:da0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:23:d7:2a:f2:6d:e5:93:33:c6:c8:b4:f8:92:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:49:52:6a:7d:13:f9:b4:86:a6:0b:84:77:
                    aa:39:8e:72:ac:12:bd:05:97:9b:89:79:25:19:b4:
                    14:14:88:8d:4f:eb:68:f9:69:57:e0:87:9b:28:45:
                    a1:ad:87:4d:28:ca:fb:5d:18:38:3f:d1:2c:0d:62:
                    45:b9:09:74:fc:c3:49:05:ca:3a:e7:28:5c:cc:3b:
                    d0:3b:5a:62:de:f2:27:1f:59:72:08:3d:77:f7:ec:
                    a6:67:8c:e8:52:e0:ac:e4:15:f7:de:4c:32:b1:11:
                    2b:93:2a:21:0e:dd:3d:da:0f:6f:8d:b3:f6:8b:1a:
                    68:0b:b0:12:8e:04:2c:3c:41:72:fa:02:e6:b7:0f:
                    6b:e2:b5:b3:60:c7:9c:0c:81:f0:ac:06:e0:f0:38:
                    df:c8:17:32:f7:88:0e:68:11:81:06:c7:09:73:72:
                    ea:5b:c9:22:71:f9:8b:82:80:fc:5f:10:82:18:21:
                    35:4a:2f:80:27:4f:40:16:80:d7:e9:19:e5:3a:42:
                    87:ba:5a:69:ae:32:ab:a5:c0:3e:d1:7e:0f:19:f2:
                    d7:3f:d9:96:5f:2e:20:5b:b0:6d:84:02:84:38:08:
                    78:cc:2f:0a:90:da:a6:f2:b2:0c:5c:43:15:e6:6a:
                    1e:91:21:7b:58:b7:64:5e:2e:01:a9:08:f8:67:bc:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:da0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215629

    Signature Algorithm: sha256WithRSAEncryption
         21:87:ca:86:37:ef:55:e6:cc:dd:a8:6d:3d:7c:e9:f5:8f:f4:
         b4:61:c5:46:99:37:05:1b:b1:9f:21:65:2e:f5:14:d8:15:e9:
         a1:43:66:ae:6a:08:22:72:a1:69:71:fe:1e:45:a0:d2:16:68:
         45:9f:8d:77:48:77:84:2b:53:af:63:cb:3c:96:b6:a8:63:c9:
         83:78:9a:d3:46:a8:27:fd:f0:42:55:61:29:30:62:10:96:ac:
         c5:b3:4c:5c:db:84:7d:59:c7:47:63:a5:0d:bb:54:6a:3a:5e:
         2f:81:e8:45:4a:8a:57:d1:4a:df:dd:15:76:09:2c:cc:33:b3:
         d7:6f:c9:e6:f6:54:4e:ef:eb:ef:6c:5c:a9:9d:b7:60:5a:bc:
         44:b9:d4:91:57:e8:3a:60:0b:e8:9d:09:70:62:82:65:bc:3b:
         04:66:bd:b5:3b:10:0f:df:a8:e7:a5:58:81:b8:72:52:9f:ef:
         3a:9d:ca:63:1f:59:ef:c1:92:54:e2:f5:51:b5:33:78:d3:0b:
         e0:ec:11:1e:3e:4b:cc:f1:4b:17:29:54:f6:c0:f9:8c:38:a0:
         6a:7d:74:e8:58:36:06:d3:80:5f:2b:4e:8c:28:1f:44:4a:97:
         be:96:23:9c:44:16:a0:b9:ed:70:e4:7f:05:f9:2b:47:00:38:
         db:14:04:4a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQkRSPXKvJt5ZMzxsi0+JLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTAwYmI1NTgyZTc0ZDYxZTkwYzgwMjgzYmE5Yjk4YmE2NWNkMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZZJUmp9E/m0hqYLhHeqOY5yrBK9
BZebiXklGbQUFIiNT+to+WlX4IebKEWhrYdNKMr7XRg4P9EsDWJFuQl0/MNJBco6
5yhczDvQO1pi3vInH1lyCD139+ymZ4zoUuCs5BX33kwysRErkyohDt092g9vjbP2
ixpoC7ASjgQsPEFy+gLmtw9r4rWzYMecDIHwrAbg8DjfyBcy94gOaBGBBscJc3Lq
W8kicfmLgoD8XxCCGCE1Si+AJ09AFoDX6RnlOkKHulpprjKrpcA+0X4PGfLXP9mW
Xy4gW7BthAKEOAh4zC8KkNqm8rIMXEMV5moekSF7WLdkXi4BqQj4Z7w0owIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFHUAu1WC501h6QyAKDupuYumXNLcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzE2M2Ji
NS1mOGIxLTRjYjQtYmQ0OC1iYjNkNDkzMGU0NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMTYzYmI1
LWY4YjEtNGNiNC1iZDQ4LWJiM2Q0OTMwZTQ1OS8xL2RRQzdWWUxuVFdIcERJQW9P
Nm01aTZaYzB0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA2gMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNKTTANBgkqhkiG9w0BAQsFAAOCAQEAIYfKhjfvVebM3ahtPXzp9Y/0tGHF
Rpk3BRuxnyFlLvUU2BXpoUNmrmoIInKhaXH+HkWg0hZoRZ+Nd0h3hCtTr2PLPJa2
qGPJg3ia00aoJ/3wQlVhKTBiEJasxbNMXNuEfVnHR2OlDbtUajpeL4HoRUqKV9FK
390VdgkszDOz12/J5vZUTu/r72xcqZ23YFq8RLnUkVfoOmAL6J0JcGKCZbw7BGa9
tTsQD9+o56VYgbhyUp/vOp3KYx9Z78GSVOL1UbUzeNML4OwRHj5LzPFLFylU9sD5
jDigan106Fg2BtOAXytOjCgfREqXvpYjnEQWoLntcOR/BfkrRwA42xQESg==
-----END CERTIFICATE-----