Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
File:                     2yNWAARVt7WJTO0UaYWgqIifnkw.cer (raw, json)
Hash identifier:          z5AnUy37eHm1ixeh/BlJq8JDlIivYLA2vU6XXi2VX0I=
Subject key identifier:   DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F647F323BD54B29BA03CB8FFC4EC2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41726

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:64:7f:32:3b:d5:4b:29:ba:03:cb:8f:fc:4e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=db2356000455b7b5894ced146985a0a8889f9e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:46:68:15:80:ce:8a:26:9e:f5:1d:f3:8c:
                    eb:fc:17:ba:06:83:9f:a4:27:a7:52:0c:65:1a:3b:
                    d5:a9:0e:1a:d9:d4:b2:3a:6d:05:05:5f:50:99:85:
                    09:76:58:78:14:76:29:10:88:c1:79:6f:29:58:e4:
                    93:a2:59:23:7c:b1:a7:39:80:f2:2b:63:a8:d9:88:
                    13:bc:d1:7c:9d:0e:55:d0:56:c4:d9:58:71:71:cb:
                    d1:e6:44:c6:80:bc:78:85:01:64:5f:ea:b4:f2:4c:
                    b4:f3:35:77:2e:b8:2f:11:9b:39:c1:98:15:f3:e1:
                    78:a8:c1:bc:44:e5:3e:3f:c4:a6:14:c4:c2:ee:9b:
                    39:54:81:d1:ce:b2:a6:b4:d1:97:a9:a9:cf:52:b6:
                    7d:2f:39:7b:61:ec:ce:52:d8:ba:c1:65:b7:06:2b:
                    8b:62:f0:fe:04:d7:27:5c:9f:f7:95:88:80:23:aa:
                    c1:2d:33:d5:69:a6:77:68:88:e8:17:2e:36:11:1d:
                    0d:a0:a6:5d:c5:4b:9a:78:6c:46:9b:80:20:34:76:
                    95:6e:da:3a:01:ff:02:e0:73:d3:64:b4:d7:03:40:
                    d4:d3:d2:99:df:b1:a6:5f:c2:72:e9:cc:df:54:a5:
                    3d:6f:dc:ed:b7:37:90:bb:84:fc:c1:59:f0:ff:3e:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41726

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:f9:f6:32:ad:ec:31:ab:a6:5e:8e:53:1a:a6:a9:61:46:
         d8:93:7e:7a:fc:16:0f:b9:e8:f4:48:a0:ed:08:0c:72:5f:c5:
         7c:90:1d:68:29:1e:9e:27:63:a6:94:68:8e:dd:16:21:0d:07:
         dc:de:a2:75:83:cf:30:e1:ce:46:ac:89:05:21:fe:5c:2b:df:
         07:30:9a:d5:1b:14:3b:dc:ca:46:b7:af:a7:af:42:a6:3a:79:
         13:a4:9c:6c:f4:c1:b8:3f:1c:39:ae:54:1e:c4:e8:15:35:20:
         1e:3b:12:d5:8c:5c:44:c3:91:a1:ca:66:21:aa:d3:7d:aa:76:
         19:af:21:e3:e3:68:02:1b:b1:a3:84:b9:1c:98:c4:3c:02:a1:
         c5:d4:82:c0:95:fe:3b:fa:a5:2c:38:18:d5:01:43:d6:74:9b:
         18:cb:4f:86:64:75:92:4b:42:08:3c:41:fe:da:02:bf:54:a5:
         76:74:d3:e9:44:93:89:8b:1e:c5:7f:35:ea:55:e2:d0:a2:20:
         56:77:f9:73:26:da:13:f0:9a:21:f7:ef:9d:8d:8a:84:1a:fb:
         41:34:38:ca:a1:d0:2b:54:77:1e:02:77:2a:d6:f5:1d:6b:d9:
         16:18:00:9c:9f:ad:7e:87:24:31:aa:c9:ff:33:d3:1c:80:ad:
         1f:70:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----