Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
File:                     97KiPZsF9XV53i8CRJtmYD4-Vzo.cer (raw, json)
Hash identifier:          y1kJdVf0/3gjq9lWF59jT7IU02k2n7TLEaqgo4oNQyw=
Subject key identifier:   F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D77D380B585E798E69F1202A25D9F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211688

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:7d:38:0b:58:5e:79:8e:69:f1:20:2a:25:d9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:f9:4d:93:a0:89:28:64:fb:1f:d2:58:5c:
                    28:7d:03:d4:52:5e:66:07:4d:91:89:7a:dd:a7:c2:
                    fe:36:fa:1e:f4:b6:da:28:65:ad:b9:37:a1:c9:2a:
                    a9:c9:09:7e:28:82:26:85:94:f0:5a:5e:36:84:3c:
                    18:94:67:0d:bd:fd:da:9c:c6:9c:d9:23:f0:29:19:
                    ab:53:a5:cb:9d:b6:14:32:d7:c1:e2:fc:6a:0f:9c:
                    c7:9e:5b:61:f1:75:37:e6:5a:9a:5b:ff:8b:32:50:
                    c2:8b:e4:6c:e7:ed:e8:94:42:7e:54:65:7b:e0:a7:
                    06:0d:d2:67:9f:c9:79:04:ab:0f:53:d2:b5:a6:e1:
                    9f:97:f5:86:71:26:e3:ae:3d:cb:8a:17:78:db:60:
                    41:59:74:a7:61:41:8d:b5:39:dc:02:08:27:17:f6:
                    cd:ea:aa:4a:19:44:89:d7:4b:d1:ae:ce:d5:99:d6:
                    ea:e6:15:12:d4:da:4b:e5:f2:8f:92:d8:8d:3f:9d:
                    51:89:18:52:6a:37:de:c5:f7:f8:28:31:27:e3:91:
                    27:f7:24:6b:e3:0a:6a:57:6a:fc:60:6a:df:99:64:
                    33:70:d3:47:3a:8a:57:99:86:f7:57:76:24:36:5b:
                    c0:57:d5:67:5e:61:86:ed:63:12:17:49:61:0a:e2:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211688

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:86:3c:d7:74:90:7a:0a:ca:b9:d0:a9:9f:ea:44:34:f4:
         8b:1e:87:71:9a:de:d8:d8:18:f9:22:c6:c3:c5:63:fd:39:a9:
         49:7a:33:ae:08:24:c5:23:3f:4b:92:57:2e:e1:67:be:16:ce:
         51:0a:b7:61:07:65:7f:f4:74:0c:4d:e8:84:9c:b7:9c:0f:40:
         20:f4:e6:11:9e:88:a6:8b:6c:7e:19:5b:f2:2e:39:e8:49:50:
         d3:7f:10:af:08:bf:6f:18:85:91:cd:99:9c:73:df:fb:7d:b9:
         86:51:0d:fd:8c:82:6b:cc:58:3d:67:6d:dd:0b:82:30:d9:5b:
         fe:49:05:1f:ee:33:d3:9d:40:ac:ee:46:54:2a:57:a3:2e:1c:
         c8:d7:c2:4e:1a:63:6f:58:ed:1c:36:44:8d:ce:79:0f:e8:6a:
         03:b4:26:36:20:ba:79:f7:f3:39:57:e7:a4:0e:4f:47:83:d4:
         c9:ae:3b:5b:1d:32:e7:95:c7:03:56:bd:1c:a9:28:c4:ed:15:
         05:cb:e1:ab:c7:3d:e3:0c:99:26:15:3c:60:3a:9f:dd:75:b9:
         55:92:90:02:6c:64:cd:5e:08:5b:66:6f:d3:7f:a9:9a:6c:ce:
         db:2a:62:57:33:2f:54:31:70:ea:3d:d8:07:1e:ef:ef:97:9f:
         ff:05:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----