Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer (raw, json)
Hash identifier:          c24SJpdnyjalaB5a/gn8tkB1V3Kz8UzyWxq2TbcN1v8=
Subject key identifier:   F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F99EC5E1A965234C00F96E0B28C09
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 24952

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:99:ec:5e:1a:96:52:34:c0:0f:96:e0:b2:8c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:6e:94:73:73:08:7e:e2:3d:a1:cd:c4:bd:
                    9b:01:0f:f1:50:c3:c7:85:c8:ae:69:ac:ad:19:26:
                    31:16:ac:be:54:f4:f6:9e:09:ab:5e:a2:61:bb:e7:
                    dd:88:40:9f:f2:be:53:19:fe:40:95:e1:65:e3:af:
                    09:74:ef:98:3f:97:b2:74:2a:8d:6f:33:60:71:07:
                    ef:5d:bd:d6:41:99:2d:c1:a7:f5:48:73:1f:eb:ba:
                    b3:10:bf:1b:5f:ba:4a:85:95:7c:a6:ad:8b:b0:fb:
                    38:76:e5:a5:8f:67:14:f6:b1:c8:9e:45:f5:23:5f:
                    e7:b0:83:1b:dd:60:a5:bc:ad:c3:2e:46:02:cc:5d:
                    8b:ef:f9:19:71:92:11:ce:b4:13:b8:a3:c3:6b:6f:
                    72:fe:21:45:36:c1:bc:52:db:b9:b2:53:19:0a:86:
                    20:b5:75:41:d8:1b:a4:69:48:8d:62:33:06:52:40:
                    24:2c:47:2c:83:3d:bb:d7:3f:84:01:b6:fc:8d:bd:
                    47:27:0f:27:c6:44:07:93:0d:fe:a9:1e:8f:b2:a4:
                    8b:6b:e8:ae:7e:fe:0e:15:ad:82:92:91:0c:92:03:
                    68:fe:b9:c2:dc:8d:4e:f6:9e:70:42:31:2b:31:f8:
                    1a:de:27:1b:a7:1e:36:da:e6:17:ed:a1:57:1b:c5:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24952

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:0f:74:2e:d6:37:b3:11:47:80:43:0f:81:73:2c:50:82:
         0a:af:d9:dc:14:c1:32:6e:75:87:da:cd:19:0f:db:01:af:20:
         cf:6d:f7:48:f2:8e:8b:1b:f6:38:8b:a8:aa:00:cb:31:2b:f5:
         57:91:94:75:ee:b3:65:63:c8:82:97:99:b1:8b:71:f5:28:a4:
         03:b6:cd:22:c8:11:35:b0:b6:ed:c2:31:8b:ed:9c:1f:56:f2:
         07:70:d0:63:3a:d0:b3:2b:df:15:ed:e3:1f:77:26:a6:5b:3b:
         90:01:a2:e9:6d:a5:d8:7c:9a:71:a0:fd:c9:0a:45:39:ee:52:
         1a:47:3e:d5:36:81:1d:f5:cb:80:85:2a:1f:ba:a2:75:8b:2b:
         62:58:8a:a0:88:57:87:2b:aa:41:ed:cd:d5:51:0d:6e:15:74:
         40:f6:36:3f:c0:74:1b:d4:e1:23:b7:0e:5c:e1:4d:e6:8c:60:
         26:1b:13:a4:bd:8f:de:31:4f:89:23:e1:fb:fd:a7:f1:a6:fa:
         cc:5d:2c:a7:03:4c:7d:d0:38:a0:e9:21:0d:df:96:15:1f:b4:
         c6:44:77:2a:71:52:e8:18:a8:b3:3e:52:be:f2:de:1d:a2:a4:
         11:15:8e:c4:0a:6b:cf:40:27:0f:b7:64:2a:fe:5d:ed:92:70:
         c2:9f:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----