Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
File:                     AoDVqrjuctqjUocfunLspFGnDtw.cer (raw, json)
Hash identifier:          UiEgAmkW2mORJhryvBh5SCJQVYX5MXcrqHIx6/f//Ug=
Subject key identifier:   02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D11B59F0DDAA00726CCE8FEF44728
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198768

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:11:b5:9f:0d:da:a0:07:26:cc:e8:fe:f4:47:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:6d:3b:ac:0f:3b:68:18:91:a9:71:35:fb:
                    e4:ab:60:9d:6c:4b:25:37:0c:04:08:08:4b:00:5e:
                    6f:99:e3:07:b3:4d:ea:cc:88:0c:ec:73:56:48:7e:
                    0e:1d:0c:1f:ce:73:2a:0f:3c:08:2f:9f:4a:c8:f6:
                    a8:d2:19:52:1d:47:a7:33:69:48:41:36:20:e4:48:
                    0f:0a:0a:cb:65:ab:66:9d:80:a9:25:d7:33:ce:b1:
                    89:5d:de:34:77:79:2c:e0:7a:55:b1:6e:ae:7f:b7:
                    05:ab:17:ce:82:cc:f9:81:93:30:f0:94:fc:81:ed:
                    e0:50:0c:90:de:64:b1:ae:18:d2:e9:5a:69:39:05:
                    56:d9:aa:76:f5:b1:bf:9c:ff:42:d7:10:b8:13:da:
                    73:05:e4:0a:58:b3:d6:ce:29:6e:eb:99:89:6c:29:
                    e8:a3:29:53:4a:9a:54:d1:ca:ac:c8:07:8c:dd:05:
                    d9:7c:b7:d8:74:64:f0:57:94:2e:9d:6b:b4:df:c3:
                    3e:86:60:24:e9:29:51:e4:7d:4b:f9:e9:69:5b:a7:
                    f5:8e:17:d7:c0:f6:4a:9f:34:b4:d9:73:cf:8f:63:
                    63:1c:97:7f:3b:88:c4:3d:88:c0:b5:c6:62:31:e5:
                    af:22:24:8b:f8:18:eb:7d:48:43:84:cc:55:df:71:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198768

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:cb:cd:dd:da:10:68:af:8d:15:30:0f:0e:15:f1:7b:59:
         dd:68:38:a6:81:28:c9:06:21:f8:86:80:28:be:6f:20:5c:2b:
         af:42:75:23:29:6a:26:d3:48:d6:64:94:bc:4a:40:2d:aa:3c:
         bc:f8:9a:90:00:86:67:43:ec:de:c2:25:22:07:6e:9b:bd:aa:
         ee:23:06:86:60:e3:76:3b:40:21:83:05:61:6c:ea:3b:d7:b8:
         66:fe:d9:64:55:6d:95:21:58:27:07:a8:04:af:7d:52:fb:88:
         43:ae:ae:36:59:db:43:f5:01:e6:bc:b2:ca:26:dc:c7:47:6b:
         37:bc:7c:99:67:13:76:46:0f:b7:bc:41:f8:3d:78:e2:92:9a:
         f6:05:b5:b2:70:c4:a5:51:30:03:92:c0:43:10:db:3a:e2:55:
         eb:e0:46:20:89:2b:75:84:3a:02:3b:08:75:79:db:54:13:ba:
         d1:49:c4:d1:c9:e6:84:dc:89:a6:6e:e0:d7:21:89:cf:f4:a0:
         87:a4:e8:2b:8c:a2:93:40:52:4f:c6:dd:a6:c9:92:4a:83:48:
         46:c5:bb:22:00:a7:78:7f:fc:dc:79:72:40:c4:89:70:8a:a0:
         1a:35:e3:1e:a6:a8:38:93:16:c6:cd:db:97:2d:1d:25:33:d2:
         94:42:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----