Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.cer (raw, json)
Hash identifier:          ygu5lWKtrXOT0h4NvGu1pT+QEBnmgUfX8V91RvfMCto=
Subject key identifier:   0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143F3A5550E117B0C1BBA2A34373425
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:08 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59514

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:f3:a5:55:0e:11:7b:0c:1b:ba:2a:34:37:34:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:5b:4d:4e:1c:97:43:92:3a:c8:4b:d0:24:
                    56:1f:4d:5e:4f:69:4e:8e:3d:c6:bc:e4:93:6c:5b:
                    13:89:ee:13:b2:46:b0:47:06:24:27:1c:f4:ce:f0:
                    42:69:9b:e9:55:11:e7:17:fc:73:e5:b4:88:16:dc:
                    8b:75:79:6b:24:1b:8d:40:cd:c6:4d:fd:e6:bf:98:
                    16:00:3a:ba:aa:22:09:2a:3c:06:0b:a3:dd:61:a2:
                    ab:eb:ce:c7:4c:dc:8a:fb:14:34:9e:f1:eb:81:34:
                    09:4f:55:20:e3:9e:25:76:42:de:88:32:da:68:f7:
                    de:b2:6d:58:0c:bd:81:dd:bf:21:a1:c2:c6:da:69:
                    53:82:a5:03:e7:df:0c:f7:d6:db:48:dd:f3:be:0f:
                    f9:15:05:db:f4:df:ef:31:bf:5a:c7:d2:76:36:fa:
                    e3:b9:16:7b:be:25:2a:7d:56:15:d0:25:e2:e2:ca:
                    53:eb:a6:a5:93:42:03:18:09:b0:44:c3:4e:6e:30:
                    3d:95:90:ee:bb:87:6f:0e:c3:53:92:e8:72:f8:61:
                    b5:78:b3:9c:75:34:59:94:41:1c:b7:a4:a6:e0:89:
                    af:12:9d:d9:70:21:22:33:84:d5:53:02:c8:f5:9a:
                    ab:ca:1d:b1:65:2b:96:14:85:28:72:1f:b4:59:46:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59514

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:bc:bf:34:9e:78:cb:d1:c1:fa:a2:71:c2:fe:4f:71:83:
         37:21:ef:84:81:c9:8a:6e:5c:fa:56:b4:e5:6e:8b:7e:21:49:
         3d:fa:5d:6c:4f:2d:0f:41:4e:e9:69:96:eb:05:61:f5:97:a4:
         cc:69:17:69:ee:77:73:41:1a:79:29:2c:26:56:98:fe:ee:ad:
         15:9e:30:83:84:0e:05:e0:ba:66:f4:dc:1a:67:ab:d6:56:1e:
         6a:f0:74:46:79:22:e3:60:d7:c3:04:ab:e6:03:e8:79:8a:20:
         d6:49:07:f7:40:2a:6f:b6:90:db:ae:a6:ba:e8:f2:87:6d:28:
         1e:dc:a1:08:8c:70:02:45:b3:31:d2:77:89:77:da:53:4e:3c:
         69:21:69:13:d2:e3:52:4b:02:6f:c6:a7:52:dd:3a:eb:d4:aa:
         f4:d2:66:58:9e:1b:ec:8c:cb:e1:4f:e5:12:08:3e:a7:c6:bb:
         65:35:27:fb:fd:d6:e9:dd:ca:16:55:56:4b:59:96:80:97:c8:
         b4:84:78:45:ed:69:0a:ab:aa:7a:b8:90:d5:33:1e:fe:05:fa:
         a9:17:62:bd:a6:77:b0:bd:5f:b3:a7:d7:47:5a:9a:5f:48:76:
         ec:0b:52:c4:16:90:f4:49:2f:ba:6d:cd:08:28:66:69:04:21:
         77:89:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----