Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
File:                     29B3gCIiIDwWzo6v1Z8LCsHb58M.cer (raw, json)
Hash identifier:          v3Gx82z+CPSR66gPpLxwvcOoePLqIcjC3aiDDNxtxEw=
Subject key identifier:   DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BC394273F3F88A0D72E485A615900
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210522

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:c3:94:27:3f:3f:88:a0:d7:2e:48:5a:61:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:87:3b:be:99:56:35:ad:9f:8f:70:2e:7b:
                    2e:fc:88:9d:4a:bd:08:41:0a:22:49:cd:63:ac:cb:
                    34:bb:2c:35:d5:c9:1e:6a:dd:e0:f6:40:83:cf:34:
                    8e:7b:32:e2:1c:7e:e2:3a:5f:9f:94:51:b9:c5:4a:
                    21:d2:91:ed:54:37:cc:ef:5e:b2:d3:1c:20:3a:7a:
                    a3:2e:4d:95:c2:c6:62:dd:16:8e:35:84:6a:ee:89:
                    a5:5c:e8:fc:bd:cb:42:5b:43:d2:48:a4:54:7a:0b:
                    b9:c9:be:f2:df:51:c5:49:40:e8:86:01:4d:90:34:
                    bd:16:78:f8:b3:76:0d:17:27:0e:81:d9:10:b5:ca:
                    1c:56:a5:c2:53:7d:77:79:82:16:1e:55:c4:04:cd:
                    86:14:d7:f6:e0:eb:60:35:bb:51:d5:47:1c:43:95:
                    28:63:99:d0:cc:da:38:b0:04:04:90:7e:d0:0e:09:
                    e2:25:5e:da:b7:6d:43:92:a0:16:51:d0:47:a9:30:
                    c5:22:56:b8:c5:8e:e2:f1:f3:cd:25:45:17:d5:0c:
                    95:b6:83:3d:4d:1b:9f:5f:7d:1b:87:62:cb:92:cf:
                    2d:ae:a0:d6:44:a3:21:59:34:54:4a:27:4f:f2:4e:
                    36:61:f8:f8:7c:6f:df:8f:a6:52:c1:1b:e6:8c:a7:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210522

    Signature Algorithm: sha256WithRSAEncryption
         16:21:2d:91:ce:6f:e9:88:a6:a5:46:0b:d9:17:b4:1d:22:34:
         4c:09:f2:e9:e1:43:f7:5a:aa:2a:05:66:51:47:96:57:ee:a0:
         d5:74:eb:b2:f4:07:8f:77:b1:0b:bc:a4:53:c0:3b:9c:d2:8b:
         0c:6b:20:f3:d5:15:b7:ab:11:e9:49:82:9a:90:40:e9:a7:2e:
         d5:36:3c:2a:8c:3a:99:7a:ce:d1:0f:83:f0:c2:64:b3:76:77:
         4d:a5:eb:1c:a7:ec:ce:4c:ec:3e:25:2a:d8:f5:02:7e:8e:0c:
         be:c2:8b:23:4b:51:92:51:6f:41:b7:ef:b2:79:58:66:66:66:
         d0:b5:df:fb:14:69:bd:16:0c:53:c7:51:fa:7d:37:0b:02:9e:
         25:28:1e:64:07:15:25:3b:0f:8d:35:b9:68:52:d9:d6:b2:a4:
         7e:3d:4e:52:c4:b0:d6:d4:95:22:50:79:64:4b:50:b3:d7:d2:
         7a:83:be:fd:42:3f:cb:e5:54:62:d8:03:3f:5a:b0:3f:0c:ed:
         2b:78:79:3b:73:e1:12:7b:76:d8:f7:96:cf:02:5a:91:4a:a1:
         19:0a:fb:6c:c0:22:cd:eb:67:ff:cc:55:79:bc:af:c1:54:06:
         c5:f5:8c:ce:40:ae:0c:82:6f:01:ba:32:24:c0:08:37:86:0e:
         6d:9b:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----