Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
File:                     EFkFws-IrzKqrL3Wcc08w6z_ktE.cer (raw, json)
Hash identifier:          AgzWS4CrCV8CaBzOQ09cHO+cRnA5dgwlMSiHx+Z9ERg=
Subject key identifier:   10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8BFFE8C1D9BC8BAEAAF9F35B601017
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210542

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8b:ff:e8:c1:d9:bc:8b:ae:aa:f9:f3:5b:60:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:6a:c2:a6:45:96:f3:4c:5e:4e:5d:ae:34:
                    e9:17:2c:83:e2:42:fa:b0:e0:0b:a8:a4:a0:e5:83:
                    a2:b4:9e:2f:4a:a5:cc:36:b4:16:95:1d:33:94:9b:
                    85:a4:3d:57:e3:b6:b0:46:99:b5:c3:ac:1b:0f:1c:
                    38:51:e8:78:77:30:a9:77:67:f7:55:f6:1d:6f:e2:
                    93:8e:30:91:87:78:f6:40:79:8c:2e:d1:be:39:97:
                    8d:b6:ec:c0:7e:13:29:37:75:c0:7a:96:e1:5e:a0:
                    6b:94:ce:b8:fb:43:b4:ba:0c:aa:c2:73:cc:44:3a:
                    9f:b7:71:30:1b:9c:ff:83:d1:80:3b:57:f0:82:cf:
                    83:a0:ac:d3:22:03:12:fe:a0:f5:42:d1:c9:42:11:
                    5d:53:86:ea:45:11:70:ac:31:df:a5:51:49:9a:af:
                    c9:24:1b:5a:c4:b7:61:ef:94:61:64:cd:d0:6b:76:
                    85:47:ef:6e:00:94:3a:e3:fb:3d:02:85:73:53:d7:
                    18:9c:41:fa:31:ab:57:39:97:00:70:4a:38:71:0d:
                    34:c8:79:77:79:a4:70:98:f3:2f:73:47:61:69:c9:
                    c3:e8:85:f8:22:c1:f6:c0:0c:b8:4e:11:76:c6:01:
                    92:cd:d5:c9:fd:2e:11:aa:6f:e8:1c:e0:d2:d4:60:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210542

    Signature Algorithm: sha256WithRSAEncryption
         66:53:cc:04:63:9a:f4:39:88:63:68:0a:8f:c8:0b:af:1d:d0:
         bb:48:e1:f7:29:f5:18:c1:17:0a:a3:16:69:a4:05:83:bd:98:
         e7:0b:36:43:86:e4:da:6b:00:01:5e:b9:89:ee:91:58:c6:ab:
         52:19:ec:b7:b2:6a:cc:96:47:95:19:26:95:9b:5c:b8:a1:9e:
         17:b4:be:1e:14:42:82:9b:6b:76:5c:49:58:6e:84:1c:87:1f:
         5b:ed:4b:73:90:93:76:18:8d:fb:2b:30:6c:8f:dd:14:74:4f:
         42:dc:8a:02:a9:a8:03:dd:a6:56:ea:25:35:28:ba:9c:ac:70:
         ea:90:e8:25:99:42:2f:0c:4a:9f:7f:b2:b5:20:05:c1:9d:9f:
         34:d7:ec:61:5c:85:8f:4b:79:a8:34:0f:20:40:05:29:bf:83:
         10:6f:22:dd:9f:5e:55:d4:3c:b0:2a:06:0e:95:8e:0a:99:fa:
         fa:06:f2:1d:40:55:e5:ea:c2:68:43:5f:fa:21:78:79:f7:06:
         6d:26:ea:11:de:87:cd:bc:7d:ff:30:12:42:bc:b5:96:1f:2d:
         2e:03:b4:c0:f7:28:72:44:5f:93:4d:be:16:1b:50:03:46:96:
         3c:54:43:86:42:69:05:45:a8:ba:19:5c:ef:a6:77:78:97:82:
         f5:32:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----