Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer (raw, json)
Hash identifier:          knVz4fgqr51scFClkzIYtbZCiPjn3xZHVEU3kZPAoks=
Subject key identifier:   D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7191F1F96F5C0BB9E785213CA802A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42745

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:19:1f:1f:96:f5:c0:bb:9e:78:52:13:ca:80:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:cf:1f:2a:da:eb:76:27:92:a5:8d:34:b8:
                    10:21:c9:ae:93:8c:0d:49:68:7a:46:09:45:eb:d1:
                    9b:3a:af:ba:b8:41:2e:4e:95:67:82:45:27:f2:90:
                    44:bd:69:50:aa:24:e6:ad:e9:79:c6:0e:ea:42:87:
                    50:62:e5:f7:63:80:cc:12:05:a9:b3:01:b3:26:5a:
                    a9:b9:78:ad:56:2b:98:e3:67:cb:90:05:e9:03:4b:
                    e7:30:c6:92:a2:ea:ec:82:3c:aa:7b:c9:e9:cf:31:
                    40:1d:b2:03:a1:80:2f:51:5d:60:60:98:c0:ff:84:
                    6a:fe:ba:b1:ec:7f:ef:6a:4b:59:f4:b5:a6:8f:e5:
                    4a:84:1b:cb:50:16:db:a7:64:57:d1:69:45:5a:46:
                    f1:ad:0e:3b:8b:01:ad:18:de:46:5b:9f:d1:75:61:
                    cc:31:57:8e:98:cf:75:73:7c:a7:cd:83:5e:f9:5c:
                    53:87:ae:ec:60:2a:b7:11:0f:20:be:2b:99:2a:55:
                    89:48:5e:0d:67:42:ab:c9:99:46:05:f1:58:62:b6:
                    46:0d:7e:19:ae:c3:6f:9d:84:bd:d0:d7:72:ad:23:
                    3c:d6:a9:fe:fc:eb:0f:02:a0:a3:f9:19:b1:19:64:
                    fc:38:a5:94:08:bc:54:99:8a:b1:6b:19:31:3b:f2:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42745

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:68:a4:63:11:75:d5:57:51:ae:c0:31:64:9f:43:2c:6a:
         b2:1b:8b:a5:f9:33:a5:f0:03:60:1c:6d:e5:98:b5:b5:97:22:
         1a:53:39:2d:e6:c1:78:48:85:93:b3:7e:2a:11:17:39:d4:80:
         5e:8b:dc:e7:a2:0f:1a:97:59:ac:db:d0:9d:89:2c:7a:cf:91:
         d2:f9:e9:fb:f3:c0:13:32:0b:79:8f:28:bc:af:00:1b:17:ea:
         61:36:3e:40:c1:e1:3c:c8:b5:da:3d:29:a4:74:f9:86:05:a9:
         79:f3:7a:d9:f2:37:51:b6:f1:0a:54:2b:83:e9:62:b5:33:f6:
         c5:cb:1e:22:aa:7c:fe:12:00:f2:23:cc:96:f2:25:63:a9:a2:
         c7:72:0e:a3:39:90:73:5e:b0:70:91:f6:d3:35:c8:41:15:e1:
         c7:91:0b:a1:51:77:76:9c:53:1c:4e:a1:bc:62:3f:4b:dd:7a:
         b0:16:d4:eb:fa:d7:d0:1e:3e:d1:38:5b:e0:f0:44:be:33:1c:
         e2:01:29:60:08:4a:b7:0c:74:81:bf:77:54:bd:fd:1c:3b:48:
         bc:75:81:b9:f1:fc:d9:52:43:a9:99:36:f8:1d:cb:55:0f:8a:
         c3:5c:9f:77:f3:9e:03:63:8a:11:5f:fd:89:f8:9a:90:d1:d6:
         a1:3b:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----