Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
File:                     2IUFXXA5jPDHLM6sXlga1A8gPvw.cer (raw, json)
Hash identifier:          nga1LFGKr0BfXjglzw5m+Cql5ZJiLayjkb3LNN/9oXM=
Subject key identifier:   D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194236A09AB6BA2D7A18D92A7D925CE1D2F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210669

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:09:ab:6b:a2:d7:a1:8d:92:a7:d9:25:ce:1d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d885055d70398cf0c72cceac5e581ad40f203efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:97:bf:aa:20:db:62:7d:4b:32:78:d0:4c:
                    91:0c:d6:26:36:b7:d7:71:dd:04:39:96:96:93:bd:
                    f4:cd:4c:cd:4c:32:6e:12:05:53:6f:b5:ef:b8:46:
                    0c:7e:03:00:ae:87:d4:b1:00:13:01:7e:df:76:b3:
                    19:d5:2d:fa:2e:f3:32:7a:3f:7f:18:e4:57:8d:47:
                    8c:42:b3:9f:78:89:c4:ad:7c:6a:af:06:eb:40:03:
                    76:42:61:33:d1:70:8a:d1:11:1f:d7:13:b4:46:d6:
                    07:79:ab:20:c8:5a:15:9d:cd:0a:de:67:da:89:68:
                    60:4e:d8:18:8e:7f:59:f1:7c:a2:9d:fb:64:3a:9a:
                    eb:6e:79:53:d1:85:3f:fc:ae:24:7c:8a:bc:41:06:
                    d2:e6:a4:32:42:ab:23:62:25:fe:91:3a:5d:ce:c4:
                    3b:c7:4f:fd:d5:7c:f4:ba:7d:5d:7a:7a:4b:a2:aa:
                    72:53:78:e3:04:4c:cf:fa:6b:d8:92:3b:3d:c3:ce:
                    8c:d6:bf:f9:05:51:63:71:0a:40:58:ef:cf:81:af:
                    08:43:21:3b:74:e9:c6:76:98:64:5e:78:16:f3:9e:
                    27:3d:33:84:0c:e7:de:b7:5a:4f:a8:f2:f5:c8:1a:
                    b2:6b:1e:36:f2:92:56:de:00:5b:60:46:60:ea:81:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210669

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:2d:a2:82:a6:99:72:8f:e9:d6:6c:8e:9a:2e:ae:19:4c:
         d5:6c:eb:4a:41:10:26:01:9f:bf:7b:64:5b:9f:f3:29:52:b1:
         bb:49:5e:3e:68:3c:5c:4e:94:ac:f1:b7:74:11:6d:0e:15:ee:
         e3:69:ec:a2:48:d0:c8:93:0a:1d:ab:f1:10:a1:52:91:e4:35:
         8e:bb:f3:cc:e3:72:9a:f2:6c:d2:ef:c8:58:86:51:b7:02:5d:
         74:97:38:bf:6b:74:95:07:6c:19:19:ac:6d:c1:67:b3:11:1a:
         10:8d:75:94:f2:72:69:02:9f:eb:30:ba:31:c9:4f:1b:3a:4a:
         7e:70:81:44:cc:ac:98:eb:bb:c6:e3:fd:50:00:6f:c9:22:d4:
         6c:43:ed:ee:2a:5d:25:71:2d:69:18:30:85:85:42:c1:59:71:
         4c:d0:4c:e7:81:86:d5:af:85:91:6d:8b:70:71:64:0d:51:fc:
         99:e2:19:90:bd:4f:e7:12:49:1f:80:e4:8b:d2:16:67:38:5a:
         13:3d:1b:52:b6:32:fa:f8:b3:89:c5:71:de:de:bc:55:c0:0e:
         b6:45:c9:85:dd:b6:ce:82:84:90:4c:f8:10:42:e5:b0:99:93:
         f9:e8:e7:00:4b:4b:ca:e3:b3:59:a7:19:b5:57:39:cc:59:f4:
         09:2c:4a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----