Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
File:                     B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer (raw, json)
Hash identifier:          SjP9UUbW2Hq7q/CFie6b9RRG83UcTPK9++1YXyQHkEg=
Subject key identifier:   07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747B72FB71AE4580AF1DDD56411AFA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215323

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:b7:2f:b7:1a:e4:58:0a:f1:dd:d5:64:11:af:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:87:92:63:d8:74:24:b7:c2:bb:91:aa:97:73:
                    25:ef:90:9a:49:40:eb:f3:6e:5a:65:78:26:0f:2b:
                    da:ea:b1:2f:62:6f:6f:7d:49:08:93:09:2f:a2:16:
                    86:a1:af:e7:61:87:ff:dd:81:64:5e:b7:39:53:5d:
                    c7:fa:7b:12:1a:fb:97:e2:43:21:2a:92:38:83:05:
                    ab:2b:b6:c2:23:fe:62:0e:3f:b4:93:49:00:0b:44:
                    26:e9:66:69:5a:f8:21:54:2f:75:5f:1f:62:5a:a8:
                    59:1f:e2:74:fa:a9:c6:98:0b:0e:b7:bd:7c:dd:be:
                    a2:49:2d:39:a6:32:b0:4d:67:3f:e2:3d:af:07:8c:
                    14:6a:15:96:19:77:9d:cf:23:60:39:20:ab:7a:68:
                    e8:27:69:d9:30:ad:7e:76:89:49:d7:14:b4:88:1f:
                    c4:61:01:35:1d:cd:84:8c:a6:5b:c4:80:e9:5f:28:
                    5c:0b:c1:ee:f9:e3:38:4c:14:f6:f4:b5:df:18:37:
                    e8:18:ef:a1:1a:31:18:9e:64:2e:4e:4e:78:53:1d:
                    fc:ee:7c:45:3c:f5:81:89:58:f8:16:51:f6:a2:60:
                    c2:45:a2:6c:2f:95:18:43:b4:ac:c9:d4:f1:f4:56:
                    38:33:29:15:9b:6b:b3:3d:4d:d6:ae:db:15:5f:8f:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215323

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:64:2d:84:1f:ed:d9:29:24:92:4f:1d:cd:7c:9c:f5:9e:
         65:4c:9e:08:fe:29:bc:9f:6c:4c:93:77:29:2a:17:6f:44:dc:
         8f:e0:d0:90:50:1f:0c:55:48:2f:e8:70:53:a7:7f:81:7d:56:
         b9:ec:b5:9d:f8:6c:5b:3a:b9:69:12:8a:8e:9f:01:19:1c:85:
         10:d7:22:d6:ca:1f:a7:6c:e3:af:74:2e:99:62:45:72:3f:43:
         ec:d3:b8:b4:6f:03:87:18:76:e6:3a:ea:e2:ae:a2:70:81:e1:
         72:56:ae:42:e1:83:b1:99:df:18:a5:e4:7a:5c:3c:fb:16:c0:
         d3:1f:45:81:60:87:4a:2f:67:37:c7:18:bc:ea:71:bf:5c:4b:
         4c:a3:aa:a1:36:2a:ec:f1:be:98:e5:cb:86:23:d3:7a:da:a2:
         98:c4:fd:4b:6d:1d:eb:e2:56:20:90:ae:67:0a:1a:74:c8:45:
         e7:02:c3:d0:03:45:61:0d:3e:54:2c:49:37:e4:c4:11:18:f5:
         e8:73:42:3f:62:3c:fe:67:0a:85:4a:65:29:fd:ba:57:ca:64:
         03:e0:55:f5:d5:4e:58:47:79:2b:db:33:a1:51:54:f1:bf:0b:
         1c:96:74:b3:7b:15:28:6a:66:dc:26:98:c9:e7:df:87:3e:6a:
         84:17:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----