Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
File:                     FnguRefo6SnFw_lkQafmTFQfguY.cer (raw, json)
Hash identifier:          NTuea5tzeAZ97vwlzO6atEvFtuWUujkv4BpmpCIJsRU=
Subject key identifier:   16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B24D345C20D8C5C13C1BF3BBD80922
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:40 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44203

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:4d:34:5c:20:d8:c5:c1:3c:1b:f3:bb:d8:09:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:a2:13:dd:19:f8:31:1b:f8:9a:66:7a:23:
                    c4:ab:b9:38:62:73:cb:f0:18:cf:03:55:e3:cf:54:
                    a6:42:fe:7b:03:3c:87:87:c3:b7:95:c9:1a:e2:92:
                    28:a3:d5:5a:05:06:84:db:39:d3:30:6d:34:0f:4d:
                    fb:65:b3:52:9d:3f:52:67:a1:b5:55:88:c6:8f:53:
                    e1:77:3a:ff:45:81:b5:f1:54:f5:eb:aa:84:51:1b:
                    4b:22:94:7b:cb:dc:a4:65:04:3e:78:b5:a3:73:3e:
                    26:28:84:94:23:d8:26:70:09:4b:0a:a9:ae:28:8a:
                    07:d1:8a:60:95:28:f9:94:c1:59:b4:8d:3e:69:04:
                    83:af:9f:a5:95:7c:5b:6f:9c:99:e7:88:05:80:31:
                    65:cd:23:1b:e5:c6:7e:e1:c7:f2:19:df:da:4e:06:
                    e4:3e:82:a3:19:37:2a:da:cc:ea:4d:8b:cf:df:7c:
                    60:1f:e7:2f:3e:57:94:fa:96:a3:4f:2c:5f:4f:f7:
                    3c:86:6f:c2:6b:d0:66:23:bd:3a:15:32:bc:cc:fd:
                    9d:af:b8:47:64:89:29:b4:56:a2:ab:11:af:f3:b2:
                    36:b0:e3:a4:ad:ea:da:d7:02:dc:b5:61:1a:d9:fa:
                    12:b2:1c:07:0f:57:66:60:44:e8:b2:04:16:70:e3:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44203

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:b4:ac:28:63:e6:c5:ac:13:17:80:b6:e8:e9:d8:8d:55:
         94:a5:b3:29:a2:26:73:3d:43:d7:a4:e1:8a:9f:66:73:a1:08:
         f7:6b:e9:cf:1f:f0:bc:f2:bc:b8:89:5c:f3:a2:a4:0e:a3:46:
         8b:93:bc:f4:37:6e:b6:d9:d0:40:a1:a4:6b:d4:71:e1:19:eb:
         10:36:d2:d5:70:34:41:74:db:42:4f:e6:8e:fe:3b:84:09:1a:
         dc:00:b3:ad:d8:4d:55:bf:82:fa:70:bf:cd:5f:fd:8c:88:b8:
         93:6f:e7:d8:6e:4f:3a:d5:54:8b:a8:50:70:e9:1f:74:d4:73:
         e3:90:80:29:04:d0:44:67:6e:26:2a:df:cb:32:bb:3e:6b:d9:
         33:cc:91:e1:dc:3b:85:07:df:f3:66:f8:e0:fc:cb:12:c3:8c:
         71:e3:82:d3:61:be:61:60:6f:1a:d7:7f:9a:e9:a4:0c:1c:15:
         a9:82:a9:a0:c6:ea:e5:8e:35:a4:f3:72:76:b6:f0:1e:8a:5f:
         c7:b4:cc:75:8a:24:d3:3e:8e:78:8b:f1:fb:3b:8c:19:c4:c2:
         7d:d5:1e:a4:9a:37:b8:a9:94:9b:77:7a:9c:e2:6d:60:0c:29:
         9e:21:3c:da:21:bc:c3:7a:cb:58:7e:d0:ed:87:d3:73:be:9a:
         66:c9:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----