Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2HrqF8lrXvk2foP9UUoqUorNjc.cer
File:                     D2HrqF8lrXvk2foP9UUoqUorNjc.cer (raw, json)
Hash identifier:          M8DHVCP894uBr+Lpbfiln+36+S6rbhjPnuK/FofILac=
Subject key identifier:   0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958525F7529AD458AB3DA03F721323F697
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 12:20:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211765

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:85:25:f7:52:9a:d4:58:ab:3d:a0:3f:72:13:23:f6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 12:20:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f61eba85f25ad7be4d9fa0ff54528a94a2b3637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:c7:32:e7:ea:f2:f1:78:fe:a0:cd:38:74:
                    20:bc:d9:ac:54:3f:39:30:83:18:99:8c:40:cd:48:
                    c0:20:5b:e5:b7:99:24:f5:31:ce:51:39:ec:59:de:
                    64:ec:5a:41:f4:7f:9c:c8:5d:8a:a5:39:bb:d6:73:
                    6a:2b:ac:d8:54:79:71:b9:26:2d:06:9c:ed:58:19:
                    4d:cd:ff:e4:41:c2:ec:0f:71:78:ab:de:ba:f1:14:
                    61:ae:a6:ea:28:f7:d4:14:1a:cb:86:88:15:57:be:
                    08:3d:b6:53:29:01:dc:af:10:0d:b8:4c:24:52:ea:
                    a0:21:9a:f4:33:86:d5:56:4e:b3:9a:91:68:ee:b8:
                    9e:de:c4:40:f4:7f:79:37:99:02:07:83:9c:4b:cd:
                    ee:df:51:51:2a:fc:af:79:c3:49:e0:a5:61:ac:86:
                    ae:a9:cf:5b:13:f5:04:b6:b1:2c:a5:c2:fe:8b:24:
                    e0:8d:be:0a:f7:3c:53:bf:91:f0:21:d9:b7:8d:1f:
                    a2:4f:38:df:c0:61:a2:04:30:d2:7e:f3:e1:35:80:
                    3e:92:33:73:ec:76:69:f0:c2:1a:33:f0:e7:c6:3b:
                    eb:35:d0:9b:75:ec:9d:93:9c:68:4d:6d:b5:a3:f1:
                    f1:3b:d0:09:bf:50:c1:34:4a:84:98:5a:67:25:0f:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:EB:A8:5F:25:AD:7B:E4:D9:FA:0F:F5:45:28:A9:4A:2B:36:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/671bac-9f98-440e-87b7-f094069675e3/1/D2HrqF8lrXvk2foP9UUoqUorNjc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211765

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:44:59:d0:af:ca:9f:3e:ec:c5:bf:c3:90:df:5a:b3:dd:
         c3:c0:69:5c:80:6b:f2:3d:1a:44:e5:43:ca:3c:25:66:5e:17:
         41:df:fd:55:4e:b6:87:ca:88:ba:78:a8:c8:a1:1e:c9:cd:80:
         02:94:ec:2b:a4:48:9a:eb:93:63:8b:34:6c:56:4a:bc:44:aa:
         2d:bd:f2:74:d4:87:84:d6:fa:85:46:a7:c6:52:fa:30:1d:b4:
         50:2c:75:17:b3:c2:46:eb:51:9f:79:be:82:99:77:12:0f:d0:
         0c:dd:5f:fa:d3:24:34:97:ea:ad:8a:51:c0:90:da:10:41:7a:
         e4:d3:36:a4:96:41:50:ce:09:c6:66:bf:fa:b0:7c:f8:90:50:
         77:e4:c9:71:76:21:a1:c1:e3:c1:72:7f:23:cc:2b:9e:5f:39:
         d4:10:23:87:6f:b7:3d:11:f3:66:de:a7:b8:df:e8:ff:dd:5a:
         7a:8f:d2:6a:b0:27:56:5e:37:94:6a:59:77:87:c0:fa:01:cd:
         ea:47:81:06:29:72:db:24:a4:e3:c1:03:e8:a0:b5:b8:0c:ac:
         80:72:22:6e:17:0b:cb:31:ad:10:82:d5:56:fe:5e:c7:9e:7d:
         65:55:cf:43:11:90:8a:ae:8a:0b:40:9a:df:b6:b1:76:c2:76:
         e2:43:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----