Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
File:                     4SGVC1Am_t2W9uUCmPkLrC28T-I.cer (raw, json)
Hash identifier:          Dy0PFPaYKPb+d5aQSqes0qhjKcni6T6RjK22NMtYOAU=
Subject key identifier:   E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206861E816F446F1FAFE03984762D04D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215843

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:61:e8:16:f4:46:f1:fa:fe:03:98:47:62:d0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:7b:77:9d:24:6e:08:98:2b:0f:4f:bd:6f:
                    9c:b0:2e:fb:17:b3:5d:77:9a:d4:35:5c:28:aa:c8:
                    9e:2b:2e:42:6e:6f:d1:17:f6:ff:7d:40:d8:0d:9d:
                    87:76:d3:7b:d4:b4:73:55:a1:5a:9a:b2:0a:a2:74:
                    28:da:dd:04:11:4b:c1:17:15:37:6c:55:9d:17:4c:
                    a0:78:c9:b6:69:df:fa:c8:f3:8c:62:3b:b8:0a:7f:
                    1d:1b:0e:f0:d8:12:98:f8:51:d6:5a:39:10:a1:5c:
                    b4:14:c7:2d:70:dd:14:c6:fd:1f:23:a4:fe:c0:b9:
                    bf:e6:d9:0f:e4:a4:6f:72:0f:1d:c5:9a:37:24:49:
                    f7:a7:97:e6:75:e0:4d:83:07:52:ae:ea:ab:45:9d:
                    fd:4f:95:6f:cd:4b:8a:13:30:40:c0:07:42:a1:a5:
                    00:1e:17:53:67:68:35:04:61:8a:7e:15:a1:31:7f:
                    ab:28:11:73:d6:bf:75:85:d9:7b:1d:08:97:ce:d4:
                    90:a8:45:d3:cc:f9:d7:f9:ae:8f:4f:cc:b5:04:18:
                    69:61:38:d0:29:15:74:3c:54:42:5e:0a:1a:86:3c:
                    18:84:88:93:05:e4:96:64:4b:0f:94:53:a3:18:88:
                    1e:fe:db:36:70:3b:01:33:5b:93:ba:a6:7b:63:77:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215843

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:14:a9:f9:93:61:7c:a1:2f:3f:f5:60:77:b1:23:32:0d:
         ca:b7:2c:41:51:88:18:29:d3:61:1b:6d:9b:97:81:bd:74:fc:
         a5:18:28:52:49:e7:b3:72:12:3c:18:89:78:82:b6:4e:60:9e:
         ce:41:c9:35:a7:1a:c2:d1:a8:96:3c:f5:64:02:ee:b2:79:d2:
         34:01:e9:5f:c9:73:65:cd:66:f2:ea:c9:8d:61:8e:33:b0:7a:
         a8:98:37:18:8e:a5:3c:5f:17:39:17:80:b9:c2:a9:d9:be:b4:
         f8:4f:21:5e:7c:d6:f7:4c:09:2e:3b:e1:64:31:e3:66:0d:b5:
         c1:36:25:4c:be:93:75:d7:b6:c9:77:40:85:56:49:32:0a:77:
         60:f5:53:13:c5:56:47:43:07:b8:18:49:3b:0a:c0:ec:d3:39:
         ae:a9:43:22:8a:eb:d0:c2:14:2b:ea:e0:2c:3b:0d:87:43:80:
         91:5e:70:ef:a3:4d:76:06:91:86:55:8b:5e:59:d8:5c:5b:bf:
         cc:1d:cc:be:0b:23:0b:cb:5f:b4:88:4f:42:e0:66:6e:83:32:
         33:38:f1:20:55:a0:1b:60:ae:b5:4b:e4:f3:54:d7:f6:49:5c:
         bb:76:06:72:94:ef:35:d8:93:42:ef:d5:de:38:da:b3:1e:03:
         32:16:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----