Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
File:                     D4jGhrHhIvzcFlwCN6D149mQvwE.cer (raw, json)
Hash identifier:          29B+x+CKz6f4Zv8jMqpYfuMFxVoVYPS/vA+zMpuxJgk=
Subject key identifier:   0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206817D1F6F2641034B4CE93647D8CC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212154

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:17:d1:f6:f2:64:10:34:b4:ce:93:64:7d:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:fd:1b:ca:44:46:f5:d0:2d:e4:71:92:1f:
                    22:90:90:95:c3:78:f9:02:29:92:1c:d7:e2:87:9b:
                    e0:34:ea:56:e5:15:81:4b:b6:10:53:3b:21:e8:4b:
                    ac:4e:10:db:f3:b6:e7:6e:e3:d8:99:32:26:68:0e:
                    89:d4:83:a7:53:cf:5b:08:ee:b6:98:56:5e:96:73:
                    09:c8:f2:b9:94:10:35:e5:e1:5d:09:36:ee:6a:44:
                    5f:7f:bb:44:e4:84:e0:25:9e:3c:ca:d9:ae:cc:24:
                    8e:a6:d4:d3:48:db:b6:a0:da:22:7a:22:10:fb:fa:
                    c4:6f:20:f4:48:e6:89:0f:78:e4:00:7b:52:b6:c1:
                    06:4e:6e:2c:28:2a:56:93:8a:3f:50:5e:c4:8b:fd:
                    5e:59:a6:97:cc:42:89:83:41:ae:16:cd:9a:5c:7a:
                    4d:d6:d7:43:b3:ff:a9:c0:4d:e1:5b:0e:fa:21:9d:
                    29:73:9a:8d:68:30:bb:24:f2:ab:57:01:a2:e8:0b:
                    c2:ee:ea:70:7d:db:c5:d4:26:9c:17:e8:f7:f5:72:
                    99:c9:1c:49:9c:63:74:9e:c0:fd:29:98:1c:e1:24:
                    81:fb:7e:7a:5b:64:13:e2:18:59:7f:66:95:97:70:
                    72:c8:fa:8a:ff:ca:85:ab:6a:51:de:b4:60:61:a6:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212154

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:4d:b3:1b:54:54:ee:61:52:7d:50:9e:3f:39:99:07:70:
         9e:c5:15:d2:f1:60:17:25:9a:a0:ca:b1:dd:b4:df:e5:41:42:
         b2:ee:ee:04:e3:b9:8f:c8:6c:e3:1f:81:d6:6e:af:28:a5:2e:
         29:67:d8:e6:ab:9b:19:7f:0a:19:e5:50:63:76:f8:2d:8c:03:
         55:92:b5:cf:b6:7f:07:76:1c:c5:a8:a7:4b:8d:3a:48:4e:14:
         a4:63:e5:5c:3a:50:bf:40:16:a1:c1:dc:39:c8:b5:ff:8a:36:
         4b:e9:a5:15:37:84:ae:56:19:2b:d4:96:90:00:3c:eb:22:67:
         44:21:8a:29:ad:ad:d7:da:82:8f:99:e0:a2:07:3b:d6:c1:3e:
         03:8c:d3:74:f1:d0:40:27:a6:d4:83:dc:67:10:c2:4c:e6:65:
         db:bf:0e:1d:32:e5:78:30:07:9b:7b:a8:af:a4:3a:0e:5a:3c:
         07:56:37:72:91:8b:e4:d6:ce:d8:97:78:79:44:48:1b:e6:bf:
         9d:93:91:fa:c1:ae:c5:c2:16:98:f3:98:2e:4a:07:f5:2c:72:
         17:65:55:82:85:64:81:56:8a:a0:69:9b:0e:3c:7e:ed:40:10:
         e1:ff:5f:94:72:0d:90:61:ae:9f:2f:da:9a:be:15:8b:b6:23:
         bd:3c:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----