Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.cer (raw, json)
Hash identifier:          s2R22Rtnqdr/cYVXgi31oTHkTNwaof1O+86oz8fCoUs=
Subject key identifier:   ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FBC3EA0ADA2979628BE751205426F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204510

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:bc:3e:a0:ad:a2:97:96:28:be:75:12:05:42:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:e3:a0:bf:91:68:eb:fa:25:c2:68:24:14:
                    16:ed:e7:12:c1:29:6a:3c:27:a7:b2:fb:af:2a:22:
                    bc:60:a8:e1:a7:12:c5:8a:d9:11:d7:41:74:1b:05:
                    33:36:87:95:40:c2:c7:9d:b8:19:a8:01:54:a3:96:
                    7f:cd:01:86:ee:fb:2b:ca:03:3c:c0:3e:b6:27:21:
                    10:c6:d0:69:55:a0:04:e1:2a:a8:62:4a:bb:96:ab:
                    b8:5c:40:df:76:96:22:5a:2e:c8:9d:e2:f5:a7:d3:
                    e1:70:88:76:fd:a0:cb:d2:cb:fd:a4:42:51:d3:7d:
                    26:49:53:7b:ed:68:4b:10:ee:f4:5d:3a:46:ed:da:
                    c1:2b:17:27:8a:7f:bb:88:fe:e2:4f:cd:1b:1a:d0:
                    ec:cd:be:08:37:42:be:cb:7f:7c:cf:ab:61:26:56:
                    a5:a6:29:f7:e0:a4:6d:57:58:7d:8a:43:35:a5:00:
                    e5:52:2c:ab:06:97:35:28:f5:10:72:6d:b6:ea:c9:
                    c5:4e:04:96:2b:30:2f:ed:41:29:b8:ec:3d:b5:97:
                    cc:24:60:dc:4a:ad:2c:7c:06:16:5b:93:cc:68:96:
                    90:4b:72:fa:f1:e6:06:9c:b1:a2:cb:1d:cb:f3:03:
                    97:c1:63:e6:d0:5c:f5:18:83:e0:51:a9:33:c0:47:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204510

    Signature Algorithm: sha256WithRSAEncryption
         60:da:58:4a:c9:ca:b0:03:7e:c5:25:f4:d3:b3:fc:bb:53:37:
         d9:f9:2a:d0:cc:40:e0:cc:a4:7a:90:66:16:13:1b:dd:42:96:
         46:b4:65:ac:93:6e:12:a6:4c:e9:d4:1a:4d:4d:8d:49:bc:9b:
         3e:ca:70:df:9c:d5:6f:bd:44:d1:f5:c3:c8:e5:e7:5c:94:d0:
         20:8b:f8:0c:53:fb:02:d0:73:70:d2:87:fb:07:53:87:f5:eb:
         ac:80:e8:f3:f1:10:26:dc:6a:57:8f:26:e7:20:09:94:61:99:
         5f:56:84:0c:af:c4:0b:ff:f8:8c:7c:13:e3:7c:bc:f0:4c:53:
         f3:04:1a:31:53:4a:1f:23:df:d0:4a:cf:7e:6a:d4:3b:d1:5a:
         ac:e3:09:3c:93:04:89:52:71:16:d6:fb:f0:9c:4d:26:80:22:
         f9:00:53:f7:8d:f3:04:43:3a:13:bf:b9:43:af:04:7e:1d:cd:
         3a:f9:e4:71:bd:a6:ac:ec:10:1c:e1:92:46:84:d9:de:2d:2c:
         57:a1:f0:7a:8c:fa:ef:a3:c5:0f:c5:a0:9b:b2:e1:09:8c:8d:
         fa:24:4a:79:5f:6b:39:25:1f:7e:39:6e:75:99:1d:51:10:c2:
         8d:91:09:94:56:eb:18:3f:2c:fc:21:ab:8b:c6:8f:ee:8e:7f:
         49:7c:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----