Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
File:                     3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer (raw, json)
Hash identifier:          2bsoTTYyTa3m9MI0sVAIdzvnaEKiIsKbDUWSE1/gJpk=
Subject key identifier:   DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195F558EA4CE2A264F0FF1D4BD09086584A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 02 Apr 2025 07:13:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211017

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f5:58:ea:4c:e2:a2:64:f0:ff:1d:4b:d0:90:86:58:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 07:13:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:94:17:9e:1e:ad:4a:c3:67:1e:c2:82:a0:
                    48:79:4e:23:6e:ab:ee:e3:fd:c7:ac:e2:8d:3f:a3:
                    58:8b:30:6f:a0:7c:b5:8e:37:3e:1f:37:e2:69:66:
                    ce:5c:31:c4:04:0a:72:8e:f9:38:bd:36:ce:e8:df:
                    19:fe:fb:1d:db:05:56:32:df:7e:fc:92:2f:99:aa:
                    d7:60:f3:e3:7f:56:9a:74:71:5d:13:64:fa:01:d2:
                    fa:80:84:8f:7a:d0:ed:a8:40:74:1a:e1:1c:64:91:
                    e2:50:48:ad:b4:d8:76:0f:eb:97:4b:22:97:d3:fa:
                    8b:25:0c:94:f9:c4:55:e9:67:b7:75:f9:22:9f:ee:
                    ca:20:ba:ac:fd:aa:7e:54:05:29:c0:e8:fd:47:c4:
                    72:dd:2c:cd:46:d6:e7:1e:84:c8:38:7c:ba:6c:90:
                    71:f3:11:32:4a:a4:bf:d0:8b:9f:90:d8:80:10:5b:
                    0f:ce:ca:79:ef:3f:2b:ff:7c:e8:5a:fe:ac:34:16:
                    28:31:d4:d1:99:93:4c:c6:1a:73:6e:18:18:65:60:
                    a7:43:42:53:94:cc:00:6f:83:63:0a:22:af:1e:af:
                    03:bf:fa:a7:c4:4c:01:d1:5b:54:8f:85:fc:8a:2d:
                    78:76:8b:21:d6:fb:b7:1c:11:14:f2:49:77:8e:b9:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211017

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:3d:99:48:78:34:da:50:fb:12:0a:87:e4:8b:28:09:40:
         6d:46:10:10:51:66:b6:d5:6d:80:d3:56:3b:66:4b:19:4e:96:
         f7:5e:d1:ba:af:6b:75:9c:ba:af:e5:b8:7a:2c:52:fd:83:f8:
         9a:4a:e9:ed:3c:79:9e:e4:a7:80:cc:75:b6:f2:c2:d8:23:33:
         b1:2a:5f:f1:4f:62:67:c1:74:4b:bd:b6:29:ed:3a:0a:2c:c6:
         6f:1a:d8:89:05:18:b2:48:69:e6:82:03:7b:ff:76:7a:14:c8:
         50:64:55:42:a8:0a:db:15:2b:19:7b:30:ec:64:4b:ea:2e:5e:
         4c:03:5c:f8:99:86:e2:6d:51:8d:bc:07:a5:c3:6a:22:ab:ff:
         e3:6c:c7:48:9d:9f:6b:5f:14:53:88:60:8f:26:ea:98:52:50:
         99:e1:55:16:3f:1c:6e:cc:b9:98:57:de:e6:b4:54:27:b5:54:
         4c:7d:a6:8f:36:89:88:f9:b9:41:81:dd:d1:53:3b:8c:ae:a4:
         33:76:40:d9:67:23:88:e3:a4:f0:0d:1c:17:1f:ef:52:81:a7:
         82:e7:41:ad:4e:f8:a5:ab:e1:1c:fd:ba:f6:e7:12:0c:a1:38:
         ce:4e:b3:a6:39:26:bf:07:03:33:14:3a:cc:1e:e9:2e:da:70:
         c7:f0:23:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----