Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
File:                     G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer (raw, json)
Hash identifier:          wiwhLrP2BVrNtrjmt43ImCkzTJODeg32D6P6ThSDWRc=
Subject key identifier:   1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942823EE55A52523193480DF987E3EF780
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:50:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41376

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:ee:55:a5:25:23:19:34:80:df:98:7e:3e:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:50:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:81:3b:56:4c:2d:46:6e:16:93:72:74:bd:
                    9f:0c:92:66:c8:61:ae:ef:b7:6d:10:ac:f0:ae:32:
                    f1:d8:10:1b:f0:16:a8:0f:77:b0:38:cd:dc:b1:b3:
                    6d:dd:03:25:76:df:a7:ee:b4:4a:4b:7c:96:ea:dd:
                    3c:2b:20:61:a6:d7:95:b9:09:48:64:11:86:61:ba:
                    14:22:13:74:b8:3e:f8:c7:52:f1:71:ad:67:6d:b5:
                    16:c0:8f:80:26:f3:ce:21:24:d9:de:5b:c8:7c:46:
                    18:01:2f:0a:aa:7d:2c:f8:d9:8d:dc:84:28:f4:80:
                    64:86:d1:a7:a9:0e:fa:bd:d3:12:5c:e8:2b:0d:f0:
                    34:a5:af:d7:fc:83:20:ec:44:5e:51:e3:6b:25:1f:
                    9d:db:d2:33:77:ae:95:e1:fe:eb:89:15:32:0c:af:
                    c6:02:42:51:49:bc:41:f7:58:9e:91:3f:91:fe:c6:
                    f5:be:3f:9b:6b:c8:07:16:03:2f:b8:d2:7c:26:5e:
                    06:7b:dc:14:3b:9a:7f:23:22:38:85:04:39:43:b4:
                    e9:4d:4e:c8:c4:8c:7b:76:68:d8:6a:09:90:6a:66:
                    3a:46:81:82:8a:9c:be:4d:bf:b0:23:fe:92:a5:80:
                    fc:c7:33:61:47:00:14:49:04:ea:35:5c:49:85:95:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41376

    Signature Algorithm: sha256WithRSAEncryption
         63:48:57:05:45:c9:34:bd:a5:df:60:55:d0:81:1d:b9:2d:5d:
         be:37:03:84:d6:3f:75:0d:74:39:f4:ea:9a:5a:3c:37:30:80:
         a2:11:dd:97:07:f4:0e:ca:62:63:50:44:a3:09:a8:6d:82:0a:
         1e:8e:4a:64:c0:91:de:d8:a7:e7:41:ed:f5:99:21:34:8d:54:
         a7:b2:78:ea:6d:9e:db:78:69:47:39:2a:98:53:e7:d8:b4:71:
         fa:be:1e:a4:db:0b:c5:e5:b3:8d:b6:05:33:a2:9a:aa:b1:9b:
         18:71:08:47:cb:13:ac:ef:8b:e9:6f:72:47:86:9d:8b:79:06:
         0d:9a:bb:f9:7f:5c:69:6e:ef:39:54:44:1a:3a:3d:e6:d7:33:
         8c:49:89:81:93:41:ce:de:5b:8c:9c:40:58:05:ad:61:67:c9:
         36:03:bf:ee:79:b0:6e:38:04:d9:39:35:dc:8c:40:b0:18:eb:
         d2:2d:a4:b1:36:91:ff:04:b0:91:24:8c:16:3e:13:04:4b:51:
         39:df:64:5b:f0:f7:63:da:af:59:48:70:91:f3:c1:b2:3b:af:
         01:ac:3a:be:a4:46:d0:3d:61:0d:de:d5:51:cc:7b:4f:f8:43:
         9f:d5:f7:d3:ee:0c:08:b7:d0:51:f7:23:8d:ee:5d:e1:f3:07:
         a2:79:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----