Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
File:                     DlNS2UQbZcIBbtjrfi8jWVRDT10.cer (raw, json)
Hash identifier:          tBFfpyTwk8hzIjCefnnuH+hRUVgvday7X98dfIBq/g8=
Subject key identifier:   0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019519049315226D0269593E0C0FE8C00A1E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:24:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212183

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:19:04:93:15:22:6d:02:69:59:3e:0c:0f:e8:c0:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 12:24:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:e5:6b:78:3f:1e:6e:a7:10:55:77:9c:1e:
                    6f:45:17:47:1d:3e:27:a0:30:00:e5:2c:38:e9:02:
                    7e:74:6c:c3:fb:81:5c:6c:c8:27:c8:4c:30:01:d6:
                    a2:0b:4c:5a:d1:97:07:4b:98:c1:e6:81:77:29:83:
                    91:af:99:ff:c1:72:85:1c:6e:f4:ac:d4:0a:d1:26:
                    02:63:c9:ff:ee:61:5f:04:07:a8:c6:e1:bd:25:0d:
                    ce:28:25:a4:d7:a5:d2:51:f6:5c:cd:91:b1:6e:49:
                    8f:b7:e2:41:9b:1a:57:88:59:ce:f5:1f:fe:60:6b:
                    9f:ce:bc:d4:35:cc:cd:03:08:80:bd:f9:a0:d7:07:
                    71:1a:3a:b4:2d:72:9a:cb:41:1e:db:47:18:03:0d:
                    11:79:ae:a7:ef:b1:4c:4a:92:7f:cf:85:b9:db:50:
                    44:68:a6:eb:eb:a3:7d:c2:98:a8:0d:73:00:1d:26:
                    97:88:68:74:a1:11:da:a1:54:57:85:c5:08:6f:4f:
                    4f:13:b2:65:32:bf:33:cc:9a:05:ae:0b:85:e6:b9:
                    a8:96:0e:64:7f:6b:9c:c8:f4:c5:ab:24:ad:7b:9f:
                    f6:ac:14:10:92:72:5d:b4:e6:82:47:5b:7f:cb:0d:
                    dd:ba:a0:cb:c4:0e:b1:90:f1:c2:79:99:f4:80:d6:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212183

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:a4:9d:17:f2:83:3b:a9:1e:fc:fa:0a:a2:00:91:2f:ba:
         0f:ff:24:46:75:68:26:ad:ce:dc:6d:9c:50:a4:96:3e:4c:c1:
         a8:5f:0a:bc:55:f2:36:81:2b:79:6c:da:78:f3:18:77:b3:42:
         d1:d4:6a:4c:e8:18:f8:02:ea:ff:7a:74:86:a3:26:a0:b4:f0:
         75:1e:28:d4:b1:ce:df:0e:cd:ab:b6:24:ce:ab:bd:87:7f:73:
         a3:f9:a8:62:14:25:c6:2e:73:55:88:30:2f:71:33:ef:d9:15:
         9b:70:5f:16:63:0d:44:5f:c9:63:50:58:0d:08:bf:3a:af:87:
         4b:86:ac:36:85:3b:de:0c:89:9a:58:0a:95:ba:44:b7:42:31:
         4d:49:8c:26:0f:63:6b:b5:d6:31:5f:ba:75:4e:cc:72:62:4d:
         1e:f5:6f:59:dd:76:ce:05:44:61:58:32:6f:8a:53:3c:3f:f3:
         9b:9c:ff:20:f8:35:74:b1:46:5b:c0:2c:49:a2:fb:80:33:4d:
         5d:79:08:27:a5:d8:24:ed:db:e0:e6:7d:3b:0f:46:0e:c5:9a:
         9a:dc:cf:4c:11:c1:44:95:8e:da:9e:d1:88:1f:85:79:10:b7:
         df:71:32:25:68:d5:28:7e:5b:23:d8:26:3f:28:64:5f:c6:9a:
         ba:f7:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----