Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
File:                     9kixVYLTS9UXCp3RO4EyW6uuXjo.cer (raw, json)
Hash identifier:          FIwIrjrAZ4VBmG8Qeyr3z29j8QwFyvdwN/fxkHza2VA=
Subject key identifier:   F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019473B8C4BAD932B98DC5A2A96B9E9A7A13
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 10:04:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209347

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:73:b8:c4:ba:d9:32:b9:8d:c5:a2:a9:6b:9e:9a:7a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 10:04:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:92:df:46:1f:a0:c6:7d:0e:63:c9:a3:d1:
                    f1:ab:be:8b:3e:88:d8:a9:79:15:97:11:82:5c:11:
                    59:48:76:99:eb:06:33:42:a8:19:70:d2:10:bb:39:
                    0d:c9:92:83:f2:10:2a:28:8a:b9:76:02:e6:d8:3e:
                    0f:09:75:f0:3f:47:fd:c6:28:d5:55:fb:cc:f9:e2:
                    fc:eb:a6:3e:39:da:5c:c5:e7:81:73:62:d5:d6:e0:
                    39:f2:5b:9d:0f:b4:af:31:de:b1:35:f0:2f:36:88:
                    20:34:13:dd:0b:9e:5d:41:9d:7c:c6:86:d7:5c:db:
                    0f:61:08:96:3d:90:1f:8b:3a:ea:b9:c1:4b:81:42:
                    37:4b:0a:c4:d1:54:f7:dc:2b:e3:99:4f:86:11:69:
                    9f:4e:82:92:22:0c:69:0c:4f:fd:74:56:27:b7:e9:
                    1f:e3:18:07:71:67:29:f5:12:e9:f5:ab:63:4d:0f:
                    e1:9c:74:e2:2c:76:2e:a0:9e:4c:30:7b:de:6d:c6:
                    43:23:7b:ad:5c:68:5f:f3:70:03:74:75:ba:a7:73:
                    6c:2c:7c:77:26:ff:92:b0:50:16:98:85:2c:50:86:
                    1e:ea:7c:18:f5:8c:46:58:97:d3:69:88:b1:48:26:
                    69:b4:18:3d:6d:96:02:d8:79:b5:b1:3c:1a:2d:1e:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209347

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:a5:9e:c4:18:43:51:7a:51:31:0d:48:2c:1f:d6:90:c2:
         1e:4d:18:0f:dd:00:4f:1a:7e:7e:bf:99:a8:02:f9:d0:52:35:
         5d:b6:67:7b:68:61:55:c8:d5:d8:05:ad:77:c5:ac:9c:96:7d:
         9c:7f:7f:cd:3f:8a:de:8d:84:e0:5b:45:12:3b:53:77:df:3c:
         0d:d3:3c:91:06:ce:e0:a7:6e:42:26:ff:76:12:9e:f3:32:da:
         44:ed:40:93:f4:1e:9e:e8:23:b4:78:1d:cc:9d:ea:e6:ca:68:
         10:50:04:e6:c3:3d:b1:f8:96:78:c4:0c:16:34:ec:9c:45:f1:
         9e:13:8d:53:a1:1f:c4:b7:39:ce:23:7a:25:70:b0:c5:17:08:
         ef:d9:1b:fc:05:70:cb:b9:46:3e:9b:25:aa:75:99:f9:0e:5a:
         b9:63:80:28:97:f5:79:68:bc:a4:0d:4f:0b:57:2d:ea:cd:58:
         78:c3:b8:ef:60:0a:7d:b7:8c:2e:de:2a:62:31:a6:44:5f:7f:
         16:ef:ac:a0:d8:8c:de:25:95:67:95:be:7e:66:3d:51:99:f2:
         83:00:36:19:bc:23:f4:3e:ba:d7:ad:35:73:ac:89:25:95:17:
         ed:b9:f4:cb:16:7f:1d:02:81:40:f6:7c:d9:16:3e:dd:2a:c2:
         4c:04:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----