Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
File:                     9xPX34BXC8z7JzeT8ApdRshT5Jo.cer (raw, json)
Hash identifier:          IJuyodwt2cJ7MKywdOveRi3zfhcci8/+DFog/ue09oA=
Subject key identifier:   F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942068590903EB31415121B8D7042D19FF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215274

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:59:09:03:eb:31:41:51:21:b8:d7:04:2d:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f713d7df80570bccfb273793f00a5d46c853e49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:d2:1e:90:01:22:8f:ae:5e:1d:ee:fb:78:
                    0f:b2:fa:71:26:62:a5:5f:25:30:c2:76:a2:a9:69:
                    d9:4b:51:4a:c9:b8:07:1f:c2:2c:b7:19:e2:d9:91:
                    ae:3a:5d:41:9d:4c:3d:f7:86:2d:0b:e9:3e:20:3c:
                    89:0a:f8:10:ad:e9:fa:e5:cb:ef:89:98:0f:5b:b9:
                    de:49:e7:38:c7:7f:41:b2:41:98:29:90:4c:d4:8b:
                    93:88:23:47:ae:01:26:05:db:7b:fe:69:5f:5c:53:
                    d1:e1:c9:71:62:b9:bc:bd:bf:6d:f6:8e:15:8f:26:
                    af:dd:e6:ad:52:1b:9d:b2:2b:b9:76:e7:eb:62:0f:
                    70:d2:6e:70:ee:53:79:32:82:83:52:b3:49:dd:c6:
                    1f:34:cb:04:2d:38:c8:37:69:68:fa:bb:91:57:40:
                    b2:cc:ce:24:ee:8c:e6:f9:78:56:56:96:4f:85:c3:
                    97:ab:4f:32:36:ca:98:a1:b1:d8:5a:92:84:88:ff:
                    8d:e8:3c:80:14:83:bb:17:3e:bf:17:76:4b:84:c3:
                    ab:52:e0:59:d5:9c:a9:4e:77:ee:04:3a:87:7a:33:
                    ae:56:86:b4:94:43:4d:6b:7b:68:c9:a7:a2:ce:ed:
                    ab:d1:f5:eb:ec:7a:a7:2d:43:de:25:8e:d3:66:f3:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215274

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:30:8d:34:fc:c1:13:2b:ae:95:81:a1:88:7f:bf:85:cf:
         cf:97:de:58:68:1d:4a:37:35:2b:31:50:3e:94:26:98:35:80:
         40:0c:b9:52:d4:13:82:4f:a9:79:9b:17:42:cf:aa:1f:cb:b7:
         f3:ec:dc:64:4a:57:c3:d9:9b:93:55:a2:e8:f1:9b:c0:2b:fc:
         75:0b:17:bb:b7:bf:7d:82:73:1a:ea:ef:02:35:29:c4:13:ae:
         d1:50:0a:78:e2:b6:92:53:01:20:8e:ea:9a:a6:8f:cb:62:c5:
         14:65:80:67:29:2e:c1:dd:be:42:65:5f:a1:52:f5:e0:66:36:
         1e:62:32:2f:5d:c5:06:aa:84:31:31:f7:4f:d2:2c:fb:ed:95:
         f2:de:56:9c:1f:d8:86:25:e6:fc:eb:ad:cb:ab:31:1a:34:2e:
         22:38:41:ad:3c:60:10:69:f7:19:48:bd:1f:cc:5b:8a:9b:4a:
         b3:91:13:a1:72:2e:41:97:87:46:74:5e:fc:27:01:5d:8f:25:
         2d:10:4b:09:d3:a7:2b:72:9b:7a:ee:62:73:32:e1:d8:72:5e:
         2f:00:9b:90:98:53:f2:19:81:50:80:6b:48:44:5a:cf:64:72:
         47:d7:fd:27:38:ca:bb:4e:27:44:96:04:9d:52:56:d3:5b:c9:
         12:4c:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----