Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
File:                     8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer (raw, json)
Hash identifier:          SO9DKhBIqxbXcKU8Qjb1vk4P8pXbHXAlmh6OKR382fw=
Subject key identifier:   F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B232810F4282A19AFEA9D30C3E16C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216270

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:32:81:0f:42:82:a1:9a:fe:a9:d3:0c:3e:16:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:e8:7e:79:e2:bd:d8:6b:f9:67:2b:e1:2e:
                    00:03:95:33:bf:76:70:5a:c5:e6:ee:0d:4d:ee:ef:
                    90:63:c8:03:98:9b:c2:36:16:d9:c9:56:26:da:3b:
                    99:b6:76:37:1a:ef:77:af:53:74:76:79:26:67:33:
                    dd:0e:ec:12:be:ba:b9:10:4a:8b:f5:66:d8:5a:7c:
                    8f:b7:7d:f2:ff:d2:4e:cc:16:20:42:6a:f3:c9:f6:
                    c9:8f:db:d5:fe:dd:52:22:5a:99:47:48:ac:5c:9a:
                    ff:40:dd:10:73:38:d8:7b:53:0b:16:b3:fb:a3:b3:
                    25:d2:4d:45:c8:28:cc:07:e4:54:70:95:95:26:bf:
                    97:de:aa:62:ff:75:d9:31:24:2b:3d:fb:de:45:c1:
                    cf:3e:72:c4:c4:c1:82:ad:fa:51:46:19:61:df:42:
                    14:35:c1:87:80:11:07:ae:11:b0:84:d1:54:fe:79:
                    5c:96:a9:3a:bb:35:b7:c4:c8:a9:52:65:81:62:a2:
                    fb:e5:35:31:61:af:d2:2f:ad:54:a6:cd:06:a0:8b:
                    12:f1:5b:b1:d1:29:ec:e1:f1:82:62:e4:c4:1f:21:
                    ed:ac:7a:15:93:6e:cb:a3:fe:02:4a:8c:cb:92:3a:
                    e5:bc:90:5b:dc:9b:c6:40:cc:4a:3a:a3:69:63:fe:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216270

    Signature Algorithm: sha256WithRSAEncryption
         15:70:ba:e5:8c:61:ed:92:85:80:f6:a0:39:f6:a6:da:40:30:
         48:5e:71:a6:99:92:58:8f:d7:9a:64:63:37:09:b6:36:3c:2c:
         27:c0:c8:64:99:9d:6f:b6:3b:5f:4e:ef:6a:9e:7e:54:f2:44:
         08:5e:de:60:f1:49:06:c1:9f:1b:5f:de:02:56:ae:99:8b:01:
         23:dd:3c:ba:ab:f0:64:03:fc:4d:e4:64:f1:00:6a:bf:22:2e:
         89:46:18:ba:30:44:22:9e:2b:85:a8:33:10:bb:a6:ee:ba:e1:
         96:c3:30:30:f8:39:d0:78:3e:fc:ee:78:15:06:b0:71:b8:4e:
         2e:a3:17:19:84:31:14:58:26:06:91:2c:28:ef:88:db:7d:8d:
         0c:72:03:76:39:5f:c5:2b:e0:05:24:a3:bc:c2:6a:de:b9:25:
         cc:62:8a:a0:7f:2d:07:70:82:0d:ae:c5:a8:e9:d0:88:f9:d8:
         38:1d:b4:01:5a:a6:5f:0c:58:8d:ad:89:f9:ec:0d:27:30:ab:
         79:5b:c1:d2:0c:f4:63:e3:15:77:b1:6b:1b:c2:31:c7:46:63:
         67:06:be:5b:9a:ea:23:12:ed:ed:4b:d9:ef:0b:93:48:d9:9c:
         02:51:53:ff:6b:0b:18:18:d6:ed:5c:9a:28:11:7c:04:5c:a8:
         99:73:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----