Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
File:                     Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer (raw, json)
Hash identifier:          bsHzV8mAOe0OOCdNR3ed+IJYu37ELdJQkgqe9RaqccM=
Subject key identifier:   0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDD9E7F6FC4A32E2816EEFD7939D3D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204446

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:d9:e7:f6:fc:4a:32:e2:81:6e:ef:d7:93:9d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:f8:92:8d:82:3c:19:a9:6a:22:d6:b4:12:
                    c4:d2:7b:0e:ef:dc:52:5f:dd:61:1e:9d:d0:09:f4:
                    ba:cb:37:27:55:20:1c:82:3a:c4:d6:ef:f5:a2:52:
                    2f:f0:fe:c4:fd:5b:0e:e8:2d:12:09:68:30:6f:65:
                    99:29:f1:ba:92:74:e2:3b:4b:a9:39:c0:72:ac:d5:
                    66:1e:b4:58:2c:6e:5e:1c:c3:ca:01:9c:d2:d7:68:
                    48:e8:a5:42:e0:e7:f5:34:c6:16:a4:8a:71:19:9d:
                    d7:98:62:00:a7:1d:2a:7e:35:10:a7:1c:d9:86:79:
                    7a:b0:cb:af:9a:70:6e:6a:55:81:9c:13:c6:fa:a8:
                    9f:d8:10:56:d0:66:33:8c:37:09:79:52:ce:69:21:
                    72:f7:db:52:61:44:b5:ce:01:b6:b2:47:3b:1f:c0:
                    4d:11:cf:97:e1:1b:29:72:bd:d7:13:b7:d1:af:e5:
                    1d:97:22:25:5e:83:6b:24:9a:0b:5e:5a:64:d9:57:
                    75:3e:d2:17:0d:da:a7:02:05:3b:1c:a0:b5:22:fa:
                    ea:a1:50:3d:1e:9f:02:d0:0e:fb:e8:93:d9:53:5a:
                    62:38:f9:57:6c:62:d8:29:72:e1:67:67:57:d3:f7:
                    3d:4a:d9:0f:80:5d:68:35:e5:b5:f6:b8:5e:c3:99:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204446

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:08:4b:eb:e4:fc:4d:26:ae:f2:21:67:98:7d:20:9c:39:
         50:82:f9:44:1a:58:43:54:c5:ed:c2:3a:5d:af:f4:67:3d:e5:
         dd:08:57:f9:88:a5:4a:4d:88:28:f7:11:9f:1f:2c:92:13:6d:
         b5:78:ea:84:d7:29:c5:dc:4a:24:3d:f4:5a:cb:53:f9:4e:ee:
         61:50:2c:94:6b:71:f4:aa:6d:9b:a8:a8:a5:aa:df:8a:a8:43:
         3e:70:26:61:c4:be:5f:92:2f:7a:ee:1e:84:18:8a:8f:99:54:
         92:8d:6c:92:f2:4f:6a:17:73:4b:1d:29:af:d1:c0:21:9b:f4:
         63:32:ae:7c:0b:28:65:69:42:29:5f:d4:86:9b:8b:2a:3e:4c:
         30:22:dc:ec:10:24:fb:bf:5a:3e:16:5b:bd:70:df:5f:98:0f:
         a8:a1:99:03:57:f2:1f:24:f1:fc:6b:42:03:4e:8f:c5:93:24:
         87:7f:b4:dd:cd:b1:ba:73:d3:19:a7:f4:96:58:57:07:34:be:
         40:91:68:ce:13:8d:91:1e:f2:a3:de:41:4d:d9:f2:9f:d8:57:
         db:e3:36:ca:c5:35:86:80:86:c5:cd:65:89:f0:75:5d:ea:72:
         17:f3:f7:46:64:ed:51:b1:93:61:dd:94:d8:69:ab:72:38:83:
         6d:8c:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----