Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
File:                     AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer (raw, json)
Hash identifier:          ewWJVddAhEs+6NSmS8eMi0PZN+he8ubOKv7YZWkGgSs=
Subject key identifier:   01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA3FC8F8C8973B1EAECB062D337324
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51777

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:3f:c8:f8:c8:97:3b:1e:ae:cb:06:2d:33:73:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:8c:83:93:71:98:c0:22:b6:19:2d:ad:df:
                    8a:68:ad:78:fe:1b:2c:e6:0d:62:1b:6e:99:3f:f9:
                    80:52:d5:47:42:d6:f4:37:23:6c:b5:5e:ec:75:d1:
                    eb:6e:72:ea:ed:0d:b8:dd:0b:04:67:38:62:1b:a4:
                    51:70:00:f4:42:56:5e:85:19:46:18:87:c4:39:6e:
                    01:2b:8e:94:68:44:0e:86:c2:31:21:15:d8:5d:17:
                    f5:07:e3:e9:9d:ee:8e:ef:f2:08:34:49:9b:11:08:
                    dc:34:30:f8:55:a4:db:e5:e2:88:36:55:84:25:3a:
                    49:67:4c:a2:87:f2:f9:73:52:57:b9:5e:60:2b:7a:
                    cb:e4:57:07:3e:99:21:fc:87:39:7c:50:0a:c9:67:
                    d0:07:1c:e3:8b:29:64:c8:76:bc:07:3e:9b:0a:7f:
                    85:a9:ea:74:40:63:86:f8:ba:2d:9e:bd:60:32:37:
                    b6:09:7b:9c:11:f1:a3:ca:43:e6:81:2e:89:6c:b2:
                    ab:8b:c4:f8:8b:6e:75:88:b6:5d:9a:8e:48:6b:07:
                    cc:21:0b:e7:55:91:3c:9d:73:57:6c:5c:99:2a:7b:
                    22:fb:69:8e:9b:91:0c:8a:28:bf:18:a8:26:79:ff:
                    c3:5b:1c:9d:a5:78:e8:7b:98:08:a7:f9:3c:ff:0e:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51777

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:2f:6e:48:db:60:d4:cb:bb:9b:b9:e8:2c:07:c0:cd:18:
         e9:0c:b1:5d:5a:56:36:15:be:dd:bf:c1:2a:bf:55:c4:13:ca:
         f7:d1:b7:d2:f8:d7:47:50:e6:d2:b6:01:07:0c:0c:c0:b0:74:
         79:7c:27:2c:c2:af:aa:83:92:a2:69:61:93:24:fb:10:c2:5e:
         36:a0:fd:bc:b2:62:13:84:39:67:65:fd:c7:1a:d2:b6:f6:9c:
         cc:39:a9:34:f8:97:e6:20:48:6b:69:dc:c9:a1:63:d4:d2:78:
         93:01:e6:fe:84:2e:37:78:f4:cf:74:79:41:36:d7:3e:cf:46:
         02:63:fa:2a:e1:72:08:ac:d2:74:65:22:5f:ed:c4:70:9b:90:
         84:e9:e6:99:d2:9b:25:b4:2c:53:22:64:c5:76:d6:44:08:26:
         61:bf:f5:91:d6:1e:9c:be:75:ce:de:69:19:0a:e8:8e:a4:69:
         eb:94:8d:93:20:ee:c3:7c:08:65:cb:3f:1d:da:fe:50:1e:a5:
         54:2e:e7:47:aa:cf:dc:22:3a:82:ba:1b:7b:6d:c2:bd:30:19:
         16:90:44:26:66:f8:2d:71:a6:11:81:fc:6c:a5:ac:09:45:38:
         8b:e7:40:a9:9e:52:60:87:55:0a:9e:99:d6:20:bd:f3:ee:d5:
         bd:24:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----