Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
File:                     HRAqymzxNRE4UpTnfb4nN2jAoEs.cer (raw, json)
Hash identifier:          QCn4iVdws/B7NVLiig8PjlWrQDiA/uHNwZMyvbrMX8w=
Subject key identifier:   1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D70546AB1EF062109735A01B89405C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202408

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:05:46:ab:1e:f0:62:10:97:35:a0:1b:89:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d102aca6cf13511385294e77dbe273768c0a04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:c9:4f:d4:73:5f:d7:dc:d6:e8:e4:30:3b:
                    a3:1f:19:d0:a0:c5:38:46:8f:3e:2a:a7:36:29:83:
                    18:f2:43:8f:08:1a:64:db:fb:63:5d:94:79:b1:3c:
                    11:40:fb:3f:53:bf:a1:d9:66:2f:0e:dc:72:62:ef:
                    7e:1c:e4:92:cc:f0:23:a5:7a:3f:5e:81:33:31:f4:
                    76:cb:bc:14:a5:7a:90:6c:0e:15:9e:25:a8:f5:ad:
                    df:41:4d:28:4f:07:4a:d0:49:11:60:bc:8b:68:1d:
                    b7:a9:08:f4:49:3d:32:4d:34:92:fd:71:9f:38:3a:
                    1e:01:15:58:71:e7:31:fc:02:83:c9:9d:e6:3c:b1:
                    4c:f3:3b:ee:1c:84:f2:32:ae:9e:0d:52:24:a9:fa:
                    e0:01:f7:13:70:e4:dc:1a:eb:d1:2f:11:10:93:35:
                    1b:1e:71:9b:86:e2:16:b6:29:4e:34:9b:a6:87:0e:
                    8e:c3:ae:60:13:33:32:ab:11:2d:d0:1f:7c:29:44:
                    8b:3e:3f:8a:6f:69:37:a0:0f:19:d5:81:84:05:fc:
                    5b:41:97:9c:ae:92:d0:a9:57:36:ae:ba:31:4c:b2:
                    3b:8f:54:8a:d8:5b:ea:5c:e1:a0:bd:07:5e:a3:32:
                    fb:7a:57:3d:69:95:c5:57:60:b2:70:4b:81:35:eb:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202408

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:b4:5f:f1:0d:3b:a5:b6:e4:cc:91:c4:13:ee:28:a8:47:
         e5:36:c4:f4:fb:55:eb:e3:ce:29:d9:fd:a7:ec:41:2d:88:27:
         31:d0:e4:a4:31:97:70:ff:4e:be:45:ad:c4:30:c7:01:da:18:
         a4:09:f6:53:57:e9:40:44:db:f8:8f:81:74:6c:6d:b7:ee:ee:
         79:61:2e:03:2e:cd:82:12:c1:7c:9f:e8:28:97:45:fd:47:64:
         1c:13:1d:f7:e5:34:f8:a1:67:c6:84:af:b5:95:0f:b3:0a:54:
         ae:4f:b9:d6:16:66:e4:4f:4e:45:f8:49:c5:5d:78:7b:d6:6c:
         f3:12:c4:6d:72:2c:7c:43:a5:09:7c:f4:56:8c:e0:40:ea:2d:
         94:0e:17:ae:7a:f6:cb:c8:45:15:e6:88:00:eb:89:06:df:fd:
         e1:6b:11:11:ff:ad:81:90:7e:16:06:15:ef:c0:c8:96:5a:51:
         03:7c:a9:6c:6b:e0:37:67:b1:56:8d:9a:db:c5:e1:04:b6:b4:
         a0:9f:c5:a7:54:a2:8f:0b:43:dd:54:9b:8e:75:b1:f6:2f:a5:
         54:33:c6:bf:5d:ad:7e:00:85:a3:d9:64:61:d7:15:6c:29:59:
         83:dc:41:f5:5c:01:28:fe:92:c9:ed:5a:f0:7e:f8:72:9c:83:
         c8:a3:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----