Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
File:                     9oUCGMB4Hne2SXXDTBalwSm3nrk.cer (raw, json)
Hash identifier:          RVKrd3nnwjSxzBwuG/aA55pf9/X77n0b6J44r9ytbM4=
Subject key identifier:   F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01962AEF13C28F8857F50576FBAB305C37F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 12 Apr 2025 16:57:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213520

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:ef:13:c2:8f:88:57:f5:05:76:fb:ab:30:5c:37:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 12 16:57:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6850218c0781e77b64975c34c16a5c129b79eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:74:b8:a1:b2:76:f2:84:3b:59:43:74:7d:
                    5a:3a:6b:35:76:c0:58:59:c2:27:9f:75:db:32:d9:
                    17:08:cb:56:2f:cf:d7:5c:0f:55:a4:1f:52:c3:c5:
                    92:3e:b7:d4:b6:fc:5f:1e:3b:01:5e:0a:26:d1:bf:
                    c1:cf:d8:b7:45:68:f8:11:85:42:82:36:a7:f4:5f:
                    18:fe:8e:4f:77:27:1c:4a:4d:e7:a6:46:f2:c4:66:
                    74:29:76:82:63:ed:6c:a2:f8:5c:ba:ea:0d:64:c5:
                    72:20:bd:c4:3a:86:6b:a9:19:0c:d2:38:53:1d:33:
                    03:06:02:20:97:e3:d1:91:c9:0b:28:ed:94:0d:41:
                    7c:dc:47:bb:17:d3:6e:72:77:d1:f4:14:76:15:df:
                    0c:a8:d7:d2:f4:9d:be:57:5e:de:a2:2d:e2:eb:5a:
                    38:82:5e:2f:e9:c0:ff:80:39:ef:55:50:dd:5d:92:
                    d7:93:47:d6:81:be:27:84:1c:71:91:07:cf:e5:37:
                    67:4e:c7:95:0e:64:ca:be:a6:48:76:89:81:ff:bc:
                    fd:75:c3:e5:1d:e0:d9:a4:a0:00:73:b6:07:41:8a:
                    c1:f3:94:93:71:db:5d:69:02:15:7a:1a:a8:04:e6:
                    a4:c2:65:dd:99:cf:35:fc:f3:f9:77:70:b0:59:5a:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213520

    Signature Algorithm: sha256WithRSAEncryption
         23:81:c1:f5:e1:a6:63:75:a8:a8:0e:c3:17:67:95:5b:ce:d2:
         53:4b:96:b8:03:62:50:22:c5:d0:03:91:a5:b7:75:15:34:f3:
         33:a1:d6:2b:2b:cc:4e:14:09:d4:64:28:bd:8b:6f:49:21:ca:
         e3:54:c5:7f:a6:ba:8b:89:16:9d:bc:6f:c8:3e:90:00:99:c6:
         1f:00:e5:99:21:5c:49:b5:86:15:56:34:98:78:86:e0:cd:22:
         97:34:7f:3d:5e:f7:58:bc:f8:1e:1d:86:e8:88:d3:70:e0:0c:
         fc:9e:14:ab:9e:d0:6e:d3:8d:97:10:6b:84:1d:3f:fe:8b:09:
         2d:95:d9:51:1a:98:53:91:34:14:8f:ec:23:af:27:aa:9d:7d:
         39:07:c4:f7:ec:0a:73:a4:bd:52:4c:52:94:8a:3e:0a:99:16:
         18:d6:6c:01:ae:bb:39:fe:50:57:d4:20:69:dd:5f:04:1a:a7:
         28:b3:6c:b8:62:6a:34:d2:a7:88:3e:82:16:0d:b6:5d:06:25:
         ec:b8:05:5f:b0:93:ec:4a:3d:c0:d0:35:90:99:52:26:2d:4b:
         a0:bd:60:8a:71:5c:01:45:3f:55:43:bd:60:33:e3:3e:0b:02:
         b7:bb:e5:fa:c3:22:16:a1:f0:cd:af:d8:9e:9e:84:ba:a8:e1:
         1f:47:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----