Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
File:                     5UHTgH6p2K1130eFWJlQnubzKCA.cer (raw, json)
Hash identifier:          0GIysFMypfuWeIag0gjeLCPnAbhnZIkmyfImlK9Bops=
Subject key identifier:   E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195C8DA9F474B36319729F759FF20A76226
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Mar 2025 15:52:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211314

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:da:9f:47:4b:36:31:97:29:f7:59:ff:20:a7:62:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 24 15:52:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e541d3807ea9d8ad75df47855899509ee6f32820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:fb:6b:46:2b:b6:73:3a:40:3d:6c:b8:ba:
                    5f:50:de:d9:d8:77:3c:fd:6d:11:de:c5:ca:03:a2:
                    0b:c8:8d:23:c3:20:26:ca:d7:de:83:3f:f7:94:89:
                    2c:af:30:1d:f9:ff:45:06:28:65:7c:21:d9:38:65:
                    e4:64:fe:19:21:8a:6a:42:a2:87:53:43:00:91:aa:
                    66:b1:d0:b9:40:5d:31:be:3b:3f:99:bc:9d:f9:19:
                    9c:2e:94:bf:b6:88:94:5d:11:fb:c2:d1:5c:01:ad:
                    6d:fc:41:a6:9a:04:b6:a8:26:36:94:24:ad:1e:c4:
                    92:5b:88:60:39:89:7b:6e:da:4e:78:ca:7f:ee:b2:
                    60:c7:18:a1:ac:60:d3:a9:0b:1e:a0:f3:1f:2e:2f:
                    97:ea:4c:27:c6:5c:57:90:38:3e:11:24:73:c7:39:
                    ce:08:43:e2:c9:c6:bd:bd:a5:58:49:61:ff:63:df:
                    65:ca:34:89:75:6c:fc:30:2d:fc:81:96:82:7f:98:
                    b3:04:86:ca:5e:1a:d1:3e:1c:c8:f8:6d:13:4e:48:
                    a5:d3:1a:10:0b:5f:47:9a:ef:c3:c6:89:4e:33:2d:
                    45:b3:7b:32:8e:16:9d:09:98:15:cf:1b:dd:34:a9:
                    61:5b:f3:f9:33:ec:d6:80:04:e2:03:77:a5:de:61:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211314

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:f3:e2:f1:06:7a:dc:97:e6:42:3a:70:2b:ea:0b:4f:f1:
         32:db:f9:1b:fb:76:25:a4:83:95:d9:16:c5:53:d4:3c:97:32:
         43:c4:8f:9b:a0:ee:4d:b9:ef:bb:25:5b:d3:a8:66:48:29:81:
         74:3c:ea:78:34:bb:99:9f:d5:2f:be:3a:b6:65:41:a2:7c:62:
         73:0c:47:f9:cd:ec:d2:05:1a:cf:b0:83:9f:7b:50:35:4c:b3:
         f0:12:d2:4b:95:25:86:af:3c:9e:8d:8c:e9:b6:15:cb:dc:55:
         ad:f7:08:87:23:9d:ce:89:a6:73:63:f4:c7:ce:06:d8:79:42:
         73:33:f1:2a:13:6e:09:cc:29:fd:99:2f:50:6d:9b:d3:76:a3:
         02:19:69:82:45:9b:f5:67:cd:95:88:45:29:04:70:89:3a:c2:
         4e:2c:f9:9e:92:67:df:35:1f:38:18:6b:9a:8a:8d:61:91:bc:
         1a:b0:82:ee:16:6c:55:f5:f8:9f:d7:8a:df:27:3d:a9:a7:8a:
         81:47:17:1d:08:34:e2:19:52:ad:8a:0e:ae:7f:54:16:6e:5d:
         7f:9c:16:b7:f2:f7:93:22:fd:bb:87:85:79:84:eb:ad:57:18:
         b5:0a:45:da:d2:65:43:92:76:ee:60:06:fb:57:a1:3a:4e:1e:
         8b:f7:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----