Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer (raw, json)
Hash identifier:          kEjN2sGjr4xI1g/t3akIIXhR/yT6i7SOXFPJ1lr3Dlw=
Subject key identifier:   DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C9A94D7C1AA47765777F30DF5FAD1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213392

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:9a:94:d7:c1:aa:47:76:57:77:f3:0d:f5:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:6c:e3:5c:0f:0a:f0:ff:f1:9c:5a:c9:22:
                    ed:4c:2b:52:bc:4f:bb:88:fc:92:24:fe:0e:06:9b:
                    d8:7a:75:61:5a:d8:ee:73:a0:0c:61:89:b3:36:4b:
                    0d:49:18:e6:c8:5e:63:62:1d:f9:8e:7c:d2:b0:0a:
                    b2:18:db:29:60:87:de:7a:8f:b0:c2:0c:41:fa:b3:
                    ff:c5:c0:9a:15:7a:bc:6f:48:c2:27:f9:77:db:55:
                    9f:ae:ae:01:9b:37:ae:b1:37:36:0c:43:9f:38:70:
                    46:53:46:7b:ff:f7:5e:03:43:cc:e1:9a:af:f8:ae:
                    32:e9:cc:59:a8:9c:3a:c3:4e:16:7e:b9:bd:8e:b5:
                    27:18:fb:b3:7c:15:f2:c5:22:9d:7d:cf:93:4c:f0:
                    45:9b:8b:bd:4a:54:0f:d5:68:54:68:f5:84:67:6f:
                    de:f5:0d:a5:8c:fe:5f:45:4e:78:c9:75:ee:42:53:
                    23:34:c3:db:1e:83:39:42:66:b3:43:2b:fd:33:99:
                    f5:47:21:8d:0e:95:8d:a0:55:50:85:d0:b5:a8:26:
                    5d:b9:7f:38:7b:2a:f6:ef:c2:ca:36:74:c5:11:46:
                    13:05:13:ce:43:1a:2e:20:b9:d9:30:d8:4d:55:c1:
                    1e:eb:ab:83:bb:c7:72:a9:f7:1e:ad:7c:fb:ed:05:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213392

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:f5:72:eb:d5:85:02:fa:74:1f:9e:6d:f4:29:0c:15:5e:
         04:b1:f8:f2:9d:12:a4:12:40:44:7d:d0:61:98:59:77:9c:90:
         0e:3b:15:61:cc:bf:e0:62:25:d6:f5:0c:d0:93:68:81:e0:25:
         2a:c3:ca:f4:7d:d1:c3:93:f0:2f:fc:db:46:c7:f8:29:f0:4f:
         7c:19:d3:84:2a:1e:26:5e:db:03:b4:30:be:d0:9f:77:c9:ac:
         04:73:34:b3:36:18:18:5e:18:b7:f8:fa:e9:1f:98:4e:d7:8d:
         a7:c6:7c:c1:67:fa:87:3f:08:f7:44:dc:9b:0f:1c:01:7d:01:
         28:52:d3:5f:c7:ef:2e:22:ea:48:84:12:30:10:7c:7d:4d:3a:
         60:ca:e0:be:b6:e6:25:43:8a:c5:dc:04:df:2a:42:8b:e2:e5:
         6c:3d:d0:ee:4f:9a:ed:e3:80:19:2e:ba:e2:c8:13:35:24:5f:
         3c:7d:1e:d6:eb:a0:04:17:30:e6:9d:8a:18:19:38:a0:c4:03:
         5a:b0:02:63:b6:8c:8f:78:c1:09:bf:d3:71:1c:2a:3d:ee:11:
         8c:2a:d2:c7:ea:5c:a3:ca:ad:92:2e:85:e7:9a:7f:94:92:ac:
         13:1a:e6:08:66:b8:d7:cf:d2:eb:d2:12:86:73:5b:86:c3:90:
         26:3f:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----