Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
File:                     AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer (raw, json)
Hash identifier:          jJxM4ARlI1G0elBbvqL7nN3sk/oi4f4rMFrjg1MenoE=
Subject key identifier:   00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA1570D21326B8C5FC48AF702F98ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203174

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:15:70:d2:13:26:b8:c5:fc:48:af:70:2f:98:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:63:42:90:72:66:eb:98:01:3e:65:99:f4:75:
                    a4:c2:3a:b2:3c:7f:e0:98:0e:01:da:83:66:a5:bf:
                    d3:37:2e:f5:53:6f:54:c3:ab:7a:9a:99:f0:9e:71:
                    89:cf:90:8a:45:06:b4:29:86:73:22:12:77:06:b2:
                    fb:15:70:fe:e0:a5:e7:53:d9:f8:e9:f0:e5:fe:86:
                    bb:ba:59:05:4f:1e:98:7c:25:71:0c:1a:eb:97:e8:
                    68:6f:b1:47:d2:63:81:c2:aa:6f:cd:c0:da:26:55:
                    a1:2e:83:f8:fb:0f:79:e0:32:7e:69:bf:5a:6d:50:
                    75:7e:19:f4:c6:71:36:a4:ed:0c:97:f4:04:17:80:
                    d1:a3:9d:a3:3d:95:c5:15:5c:ed:53:e3:ea:c4:a9:
                    6f:79:e4:3a:41:92:bf:78:10:bd:08:95:51:d7:52:
                    33:74:27:81:29:e8:40:8f:02:8c:6e:56:82:3b:8a:
                    5b:c5:72:97:a0:03:46:a5:07:a9:08:8c:2e:ae:85:
                    8a:60:1c:83:87:d4:c8:0b:9f:d1:2e:48:6c:34:34:
                    29:90:e1:bd:03:bb:32:34:88:fa:67:48:b6:17:bb:
                    ec:d0:c4:15:24:8e:0c:3d:90:45:58:30:8e:2c:54:
                    9f:3b:48:f7:13:e3:e9:7b:c9:8a:0c:00:89:c8:3a:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203174

    Signature Algorithm: sha256WithRSAEncryption
         80:63:8a:27:4b:18:76:37:55:be:85:63:0b:7f:9f:77:43:2e:
         78:9c:1c:51:52:10:2e:36:4f:23:2c:6e:d4:27:1c:c7:8f:d3:
         2e:5f:60:40:eb:33:be:32:56:ba:f3:b3:54:37:f8:72:65:88:
         f5:89:cf:e0:0b:54:10:9c:61:e7:e9:20:42:4a:00:6a:ce:d0:
         a8:46:c5:71:da:60:4f:78:bd:84:14:96:64:f6:ef:71:8e:e3:
         26:3a:04:c8:a7:1f:f7:14:65:75:04:64:7f:5f:3d:f9:3d:19:
         d2:06:b0:ca:de:5e:e5:5d:3e:f1:39:25:0a:2a:fd:a4:f5:5a:
         53:48:28:07:80:b8:c6:0d:a0:e0:6e:42:8c:de:48:b8:51:8f:
         71:ff:c2:b1:2b:11:92:fc:31:78:00:37:76:d4:3a:71:cc:0f:
         04:ea:a5:29:66:79:95:d7:dd:6e:4e:c1:53:a4:ad:77:2c:a3:
         28:99:e8:c9:8f:6c:75:21:5e:1a:67:42:f7:b1:e5:41:f8:50:
         e6:b2:40:87:82:17:47:3a:4c:8c:3f:cc:61:f6:d4:5f:c1:f8:
         3b:23:11:6e:c9:a6:44:41:80:53:28:83:a4:1b:e6:a2:42:94:
         8f:cf:0d:d7:4d:14:c5:ac:f1:91:45:77:3a:50:22:59:04:18:
         3a:ce:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----