Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer (raw, json)
Hash identifier:          P/+/AQRvyCU7EhCIlyGbps8nz4JoUDTRjpuFidLzWbw=
Subject key identifier:   F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958985D91D71F26E66DCF24E0929703AA1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 08:43:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210199

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:89:85:d9:1d:71:f2:6e:66:dc:f2:4e:09:29:70:3a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 08:43:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:ea:fc:c1:5b:bf:cf:ea:6d:63:15:2c:ca:
                    96:eb:4b:ca:f8:5f:69:02:f0:af:ab:45:88:90:90:
                    12:d0:51:ef:ad:a0:7c:1a:4c:53:e6:79:fd:22:83:
                    2b:76:8a:08:1d:42:a5:64:83:8b:2a:c2:4e:78:f3:
                    54:91:c2:05:46:6b:f4:00:81:92:50:c7:8f:e0:05:
                    ab:45:29:79:9b:7e:29:45:d1:6b:f9:e9:c0:71:42:
                    03:86:97:16:ef:ec:b7:83:d4:85:62:3f:01:ac:1c:
                    65:70:bb:50:51:c8:ef:60:11:90:cf:c4:2f:f1:85:
                    f4:9f:58:b5:0b:2e:2a:60:63:be:35:82:ab:6d:4f:
                    f4:74:ae:cb:7e:8d:f2:98:3e:f2:cc:88:1b:ba:24:
                    b6:82:96:c5:ba:21:99:6e:93:af:ef:6b:2b:20:cd:
                    88:bb:ac:f9:3b:0d:d4:b5:3c:8a:a5:8f:0d:1e:da:
                    ba:ee:f6:c5:ce:a7:1d:d8:b8:35:7c:e6:a3:da:84:
                    c5:6c:4c:52:57:a9:70:c2:f4:72:29:7c:dc:72:01:
                    28:0c:df:c7:91:35:fb:2e:93:40:02:ea:60:be:a5:
                    51:58:b9:8b:aa:93:4d:f2:1e:cd:e6:66:07:82:3b:
                    70:37:28:39:85:5a:98:53:b0:0e:c0:07:61:ba:cb:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210199

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:17:1e:8f:73:cd:1d:29:71:3e:c3:2c:fe:6a:57:0b:74:
         9e:f6:b9:76:b9:43:f0:d6:b1:a7:0b:fe:c8:5a:a2:7a:54:e0:
         17:3b:cb:ab:14:38:0d:8b:68:cc:bf:66:b4:9f:00:99:80:cb:
         a8:66:e5:eb:a6:58:01:0b:d4:9a:f7:60:34:b7:7d:c2:8f:9e:
         a7:0a:9a:f8:f2:d8:bb:00:db:91:c1:9f:ff:50:a5:6a:95:93:
         9f:c5:3e:f5:b3:6d:98:b7:3b:59:7d:a2:78:06:89:7e:54:5b:
         9d:69:ed:3c:16:06:e7:d0:47:f6:39:0f:1f:cd:ec:33:58:04:
         78:f4:cb:96:1e:ea:ce:72:00:06:7d:3f:f0:ba:59:86:f1:19:
         ad:0e:ed:9f:be:26:30:2e:21:d9:65:3a:6a:36:c3:ff:49:6d:
         de:d4:b6:9d:05:17:33:ad:a3:6b:fd:2a:14:26:4e:58:bc:38:
         b6:35:cc:38:9b:72:d2:6e:ac:42:27:59:d0:e6:fb:e8:26:e7:
         2b:8e:9c:2f:4f:bf:c9:e6:cc:13:aa:d4:1c:54:0f:c8:70:1a:
         50:2d:70:e8:4b:44:ba:c5:03:8a:3b:d7:d1:39:ca:6c:6a:c6:
         5c:77:b5:26:e9:92:85:f5:dd:17:30:74:ba:18:eb:a9:b9:e2:
         77:c4:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----