Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.cer (raw, json)
Hash identifier:          RMgrTSoCQxWT6feHdJzqJDh3n50terxMR+YbDphLMms=
Subject key identifier:   D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9DC75C5EB482DFD3CB07DB77B4FA8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:dc:75:c5:eb:48:2d:fd:3c:b0:7d:b7:7b:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:8d:e0:99:d5:30:42:fe:0e:ed:b3:46:56:
                    a2:b1:49:ae:b0:6a:ee:67:c0:7f:c3:0d:62:d2:c9:
                    78:ac:e7:46:04:d6:32:3c:f7:1b:c5:42:f8:19:07:
                    e8:5e:2d:c8:13:aa:f2:f3:3f:0f:db:ac:b3:08:9f:
                    8b:01:00:ad:f9:42:86:0e:7b:11:4c:8a:cb:55:f9:
                    fa:db:42:a4:bc:23:79:86:4f:26:fa:e6:3e:96:9e:
                    8f:a6:81:e3:b5:d6:86:cc:d6:b2:e9:60:3f:3b:9a:
                    5d:a7:68:d2:d0:b5:4f:1b:a5:76:3b:eb:9f:50:79:
                    eb:0d:2e:93:fb:fe:4d:89:4f:bd:7e:68:e7:04:84:
                    33:95:2d:92:5c:37:09:4a:14:57:36:cd:e0:b3:71:
                    97:47:32:df:a3:f2:c4:81:35:26:b1:a8:dc:2e:de:
                    85:7a:f3:b0:c5:0c:af:60:55:43:4e:4c:07:a2:f7:
                    62:d8:5b:63:de:25:a9:bd:d4:9d:d0:72:3d:c5:2f:
                    46:da:15:cd:1e:6a:68:e9:5f:aa:fc:70:55:f3:c4:
                    fc:6a:0b:15:27:75:5c:19:7b:f5:7c:ad:cf:e6:fa:
                    f1:26:c4:64:44:5e:07:80:6c:87:d9:3b:5d:cb:7e:
                    6e:81:40:15:38:b5:1f:1a:74:04:cb:6a:bc:31:27:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59867

    Signature Algorithm: sha256WithRSAEncryption
         23:96:ba:ab:7c:03:0e:cc:b0:ab:16:bb:43:a6:ac:2d:7b:90:
         e8:42:ac:96:65:69:34:10:e4:3e:a3:9d:11:71:90:7b:69:1a:
         04:5e:35:89:33:9c:93:2c:44:56:3e:3a:db:cb:28:35:b4:a7:
         07:11:6a:db:57:6f:4b:c2:e6:68:ec:43:35:78:a7:72:fc:a1:
         8e:7d:c1:eb:ac:2d:f4:69:0f:2f:5e:18:6d:7d:95:68:98:09:
         34:76:e7:f2:d8:81:a8:b4:98:db:0c:80:9e:60:ca:c1:66:8d:
         e6:5a:82:0e:1c:7a:6d:a0:2e:26:fb:a9:38:82:b0:9b:9a:de:
         53:06:23:56:b9:59:e1:40:b8:64:08:27:45:cc:44:ff:b6:9e:
         63:33:65:cf:20:b3:d8:a8:ae:50:f5:ad:7f:2e:47:ea:88:f6:
         e6:55:4c:be:00:6d:c8:7e:7a:f7:f5:22:a4:ef:b2:24:68:78:
         c1:20:8c:2a:11:a8:cc:07:ff:bf:12:0a:f8:73:a5:31:fe:43:
         db:76:b9:1a:50:16:96:37:ae:98:a6:a1:b9:b8:79:44:af:78:
         10:83:80:01:a7:16:9a:fe:7d:d0:ca:70:5f:5d:c1:27:a1:e1:
         99:81:90:a4:b2:6f:f6:7b:fe:df:c8:06:44:8d:64:94:50:41:
         eb:27:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----