Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
File:                     D97nlErE2jERKV2B4p3roAwWOpY.cer (raw, json)
Hash identifier:          MBvWnEyYwIx8HwTmmHxXL236/jKedcDr4nB5Vq0aq3E=
Subject key identifier:   0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA3C202F5564E657CCFB2C88ED4068
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199249
                          IP: 2001:67c:12bc::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:3c:20:2f:55:64:e6:57:cc:fb:2c:88:ed:40:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:8f:c0:e7:af:72:20:03:23:3f:b9:01:01:
                    41:c3:7a:c8:12:34:46:b4:5c:17:f6:ed:99:9c:3a:
                    a8:1c:d4:c4:75:6b:6b:a5:6f:a2:67:c0:4a:0c:0d:
                    af:ba:b8:f3:d9:aa:7c:2b:86:85:0a:8b:34:0a:ee:
                    ca:b1:f0:d4:39:e5:9e:b6:8d:01:f9:08:72:b5:fb:
                    34:41:10:00:ea:c2:15:a4:a9:49:96:5a:b0:41:a2:
                    2b:17:04:8a:7d:fb:1d:4f:94:68:11:fb:25:c7:aa:
                    d4:70:b2:ae:a4:7b:5a:d8:de:7e:45:57:5e:c9:92:
                    aa:b6:18:81:d4:b5:85:06:3e:7b:55:d1:4e:bc:3c:
                    11:9e:da:18:e4:80:d6:2e:7d:e6:66:90:fc:bd:38:
                    99:35:63:9a:91:08:05:9f:5e:ea:03:25:e6:32:17:
                    16:cc:63:46:54:db:87:8a:56:db:4d:f2:3d:74:16:
                    d9:06:e6:a4:09:76:1e:9e:9d:a6:50:de:72:99:e5:
                    69:01:6d:6b:d3:cc:49:7a:98:db:9f:89:f1:81:78:
                    d2:81:56:40:8c:d3:1f:93:f4:f1:56:38:b5:eb:d7:
                    51:f3:fb:8a:b1:f7:14:f3:6d:85:5f:9a:f2:ec:23:
                    c4:45:a0:51:e4:6e:41:54:27:28:bc:ed:1c:32:66:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:12bc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199249

    Signature Algorithm: sha256WithRSAEncryption
         53:56:ed:52:83:4b:83:74:d2:86:c6:0a:8f:29:97:e1:cf:ae:
         62:3d:4a:f4:d1:60:1a:bb:ee:b4:2f:42:8d:35:9c:b3:50:64:
         ce:1e:d1:72:ae:4d:bb:9c:c4:b6:38:3c:c8:00:54:f1:20:51:
         64:3c:18:3f:e1:e3:03:9e:89:79:bd:92:9a:d6:8f:68:63:76:
         b3:4c:02:8e:dc:24:cd:45:9d:df:4b:ad:b8:2a:d4:c4:d5:b1:
         d9:e2:1d:5f:e7:c7:75:09:03:b5:78:8a:ff:e3:e5:08:17:77:
         b6:3b:87:26:ff:c1:ef:d4:bd:0f:88:13:bb:f7:11:26:67:cc:
         17:7b:99:a8:b9:e2:a1:6e:84:c0:be:f8:c1:9d:f8:d2:36:e3:
         ec:d8:bd:de:bc:74:61:fd:42:2c:d1:b7:49:f3:79:f0:be:a6:
         85:46:67:05:26:6d:6d:0f:58:f6:c0:ee:37:60:48:00:9c:87:
         01:d8:be:7b:13:39:7a:88:a3:a7:3b:7b:ff:ef:1d:7b:c0:06:
         2a:77:da:10:78:4c:0a:c7:47:5a:1a:6b:7b:4d:86:03:9d:b7:
         74:94:1d:91:3a:8a:ba:ad:5a:91:84:dc:fb:34:5a:3a:be:de:
         0e:52:79:82:d4:57:e5:5d:3b:b1:51:41:ab:80:5e:00:68:78:
         be:52:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----