Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FLklHG89i7aaegPOrN0q58LIzjc.cer
File:                     FLklHG89i7aaegPOrN0q58LIzjc.cer (raw, json)
Hash identifier:          mOay1PkOOY62Me2XWKne0rwovi7vLUB3qf1PoCnQujw=
Subject key identifier:   14:B9:25:1C:6F:3D:8B:B6:9A:7A:03:CE:AC:DD:2A:E7:C2:C8:CE:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958E25C0A41BAACD19FD0A9567A9E30EBA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 13 Mar 2025 06:16:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213749

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:25:c0:a4:1b:aa:cd:19:fd:0a:95:67:a9:e3:0e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 13 06:16:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=14b9251c6f3d8bb69a7a03ceacdd2ae7c2c8ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:cd:62:73:65:ae:fa:f7:dd:e2:37:47:22:
                    a0:a6:17:fd:57:06:75:dc:f3:08:32:b6:48:1b:5f:
                    18:b4:15:40:15:5d:86:92:10:37:2c:2f:28:12:84:
                    57:a2:2c:de:6e:9a:88:04:be:50:38:54:6a:ea:62:
                    d8:6d:53:55:97:54:7a:8c:dd:ca:02:8e:8a:cb:ea:
                    e9:bc:15:0b:59:15:68:cc:3a:4d:ea:9a:a1:30:c6:
                    16:96:a8:42:7a:84:7c:4e:a0:16:ab:f7:c0:d6:02:
                    8f:f0:1a:5c:e4:71:2b:ec:f8:98:2f:4b:32:9d:ad:
                    2f:c4:fe:84:85:33:13:33:f4:b3:4b:34:da:53:dd:
                    77:c7:70:b5:d3:fa:1a:3d:ec:38:df:5e:8b:73:5d:
                    67:a4:7d:f8:0e:9d:32:92:c3:a5:eb:34:dd:19:21:
                    6a:68:7c:48:88:01:c6:a5:bd:8b:00:42:93:17:ea:
                    72:40:db:0a:e0:06:5b:4c:a2:e4:6c:1a:35:91:15:
                    cc:47:34:4b:72:05:17:a4:b8:aa:6c:e0:b2:99:81:
                    17:0a:bc:ed:27:8c:c0:8b:1c:4f:30:b5:b9:35:aa:
                    a1:e5:64:ae:fa:ed:e4:b0:15:ad:db:55:6c:82:d7:
                    e8:13:e7:c9:8a:bc:47:0c:19:43:e7:1f:76:13:b4:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:25:1C:6F:3D:8B:B6:9A:7A:03:CE:AC:DD:2A:E7:C2:C8:CE:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b30d66-8fb0-4e9d-98ec-c2d8a59b00d3/1/FLklHG89i7aaegPOrN0q58LIzjc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213749

    Signature Algorithm: sha256WithRSAEncryption
         56:17:0a:4c:9f:6f:91:32:e0:68:8f:35:09:65:e6:e3:7f:64:
         56:55:28:7d:a0:9c:73:74:fe:b5:fb:94:65:8b:2a:56:95:ac:
         65:c5:c5:f0:8a:ee:1f:3a:2a:4f:03:41:e2:42:d4:a2:2a:b7:
         0b:55:a0:a3:13:10:16:1c:7f:0a:cf:ee:18:bd:e5:0a:26:d9:
         6d:12:de:05:fd:23:81:29:1a:37:e4:f8:2c:45:2b:62:bc:e2:
         96:3b:44:8a:75:00:b8:45:fc:a7:34:72:bc:b0:37:a2:3a:d0:
         5c:00:fb:5b:c6:3a:a2:c1:3d:c2:8e:ab:f5:77:fe:9d:fb:fd:
         d3:6a:37:8c:2c:a5:0d:55:21:cb:34:4a:d5:40:7a:5e:52:47:
         12:51:c4:82:64:f9:f8:dd:0a:db:df:f6:6a:eb:b6:25:e4:0b:
         d3:05:7c:0c:c2:aa:83:7e:45:61:b4:3c:c1:84:f5:99:81:37:
         57:89:cf:47:80:e7:fa:9c:e4:3d:f7:5c:71:d7:43:07:f7:c6:
         65:47:62:4b:96:52:7a:01:f6:e8:04:71:ba:d8:ed:fa:b4:62:
         fd:5e:e6:3b:cf:0c:39:e1:23:9c:55:5c:fe:6e:92:02:e1:64:
         19:38:de:77:d5:6d:7a:88:47:5e:da:55:e8:7f:49:08:c1:75:
         3f:63:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----