Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
File:                     1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer (raw, json)
Hash identifier:          6EOrOPtnLOOyHtU+mWjSFd8nO7mm1bTT1sffAHubLKU=
Subject key identifier:   D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E02B09E1F7CD5E7B6F41B5CF15DC8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 58111

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:02:b0:9e:1f:7c:d5:e7:b6:f4:1b:5c:f1:5d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:5d:8b:fe:09:10:d1:63:20:a6:12:1e:ea:
                    34:8b:22:2e:df:88:71:ad:ca:7e:bd:32:47:83:db:
                    6c:d9:1f:b3:fb:3d:55:8b:62:61:75:c0:81:86:0c:
                    1e:66:4c:3a:5a:78:28:20:fc:2c:39:27:e2:40:35:
                    53:a2:97:0c:92:89:62:b2:5f:07:c5:99:73:31:ef:
                    44:6a:23:28:77:1f:e9:8c:c7:7a:48:cb:b8:0d:31:
                    dc:04:ae:39:70:ca:2f:a2:c5:4f:6f:98:8b:68:77:
                    da:be:cb:be:ed:a3:e8:b8:7e:43:1e:95:15:68:13:
                    3d:50:52:9d:54:b3:37:c7:7a:91:e0:fa:1b:8c:de:
                    16:a1:8d:76:b5:a1:16:b8:9f:18:38:29:a9:92:7f:
                    ef:0b:64:93:d7:7a:2a:c6:0a:2b:bd:eb:7e:5d:70:
                    04:c1:8d:36:ad:02:ea:74:1b:9b:3a:07:83:d5:46:
                    0b:3f:da:88:8e:cd:92:b3:c6:02:c8:63:80:c2:5c:
                    53:b0:16:2c:5e:b5:88:aa:57:0a:96:cc:9d:ad:fa:
                    03:e8:8f:bf:67:9e:32:25:91:e4:bd:5d:9e:3a:a0:
                    2e:98:d4:17:1d:81:b0:07:57:91:c8:77:fd:a7:4e:
                    eb:7d:df:b2:d0:fa:b5:7b:cb:e8:95:c9:bd:76:d7:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58111

    Signature Algorithm: sha256WithRSAEncryption
         74:01:81:12:15:a4:52:5d:5f:34:6f:29:e0:db:68:c9:fc:23:
         e3:4e:67:e3:3b:53:82:45:03:0c:94:39:51:3d:7c:86:1e:71:
         a3:d9:8f:56:47:87:a4:2f:2c:cf:2d:dd:34:b0:33:63:19:35:
         95:63:4c:0b:ae:3a:da:19:93:0d:9c:b5:ad:5f:73:00:4e:f4:
         75:55:a0:fa:d9:68:05:00:33:d3:e2:2c:ce:96:c6:f2:21:3a:
         d2:37:80:7e:52:80:99:c1:1a:94:3d:77:ef:65:d1:6d:4d:2d:
         74:f5:d2:1b:df:29:55:98:3a:50:76:20:66:49:75:6a:31:b0:
         34:86:41:f9:89:d8:06:94:89:b7:f7:2f:19:75:cb:5b:2d:8d:
         16:e0:8e:5b:69:cc:5c:e5:b8:42:81:de:58:97:dd:14:48:3c:
         57:29:c3:e3:d4:fc:30:46:cd:e1:76:7a:6f:0c:df:e7:5f:8a:
         ca:6f:ea:60:45:82:b6:2e:5d:6e:6e:d3:11:15:f0:50:ff:45:
         23:61:9d:34:66:0a:f0:be:df:5b:82:d4:b9:a5:8c:aa:0d:5a:
         d4:46:43:7b:90:f9:7b:e8:79:b2:b0:15:42:78:b1:58:51:fb:
         3f:eb:44:13:f2:df:18:61:58:86:20:62:6e:e5:40:0b:1f:a3:
         ca:41:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----