Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
File:                     HwGmewzRspUViU7OlrUurL4EG9Q.cer (raw, json)
Hash identifier:          oBtOPAbwo4lwRbEh/zVKs5XzoA9btLZIhSRXdLXC04s=
Subject key identifier:   1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AD40FA4D7C23FEC55E11BECA04E5E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201114

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:d4:0f:a4:d7:c2:3f:ec:55:e1:1b:ec:a0:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:33:2c:08:09:c5:f5:75:ed:a6:35:65:6b:
                    b7:0b:5c:48:52:52:77:94:f2:2f:ff:cd:89:fd:97:
                    8a:e2:c3:b9:e2:05:f7:76:9b:54:f6:f3:fb:9b:f2:
                    6e:41:ec:e4:9c:73:38:45:ae:8f:5a:6c:13:68:89:
                    9a:ab:ca:00:cf:a4:94:82:ab:2e:80:f0:9e:14:6c:
                    04:2b:f0:14:66:77:10:7a:9c:e0:29:ab:ef:74:17:
                    19:08:de:ee:48:87:b3:76:22:50:14:b3:21:60:89:
                    d1:12:52:8c:42:38:02:a5:10:1a:06:69:f3:30:bc:
                    cd:26:5a:98:05:23:13:c5:be:29:2c:38:40:96:c2:
                    c6:2a:e5:84:09:e7:8d:f6:75:75:e1:96:e6:90:66:
                    ed:93:f0:a3:32:87:20:ac:a7:ac:5c:ce:3c:93:80:
                    08:20:b0:7e:35:e0:59:2b:62:27:d6:13:ac:82:16:
                    ed:ee:2c:36:a0:26:c0:3e:bd:a3:16:29:36:5e:be:
                    99:74:e1:c6:87:39:a3:df:aa:c3:a5:fb:48:96:96:
                    95:2b:8b:56:14:67:fb:aa:a8:c3:16:28:43:86:77:
                    ae:33:01:61:cd:90:b3:4b:e4:59:d8:cc:80:8c:d3:
                    84:cd:ad:ec:d3:11:4a:11:b7:a5:58:82:34:90:cb:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201114

    Signature Algorithm: sha256WithRSAEncryption
         26:43:be:9a:38:32:1d:77:3b:a0:e0:32:f4:16:96:43:5f:9b:
         96:84:a3:0f:b4:71:70:36:4e:27:b0:60:6a:d7:c9:35:c5:8e:
         16:df:1b:16:e5:84:0a:70:fc:0a:a3:6b:0a:48:45:30:95:ef:
         a3:e2:18:69:00:9b:02:59:37:0b:97:f3:22:22:05:c1:b5:9c:
         00:8f:af:d5:4a:4b:71:50:e8:e8:ab:8c:87:8e:ef:4d:33:e7:
         80:3f:df:1e:ac:bb:02:a4:aa:00:d0:4f:ea:ef:a7:7c:28:12:
         2e:1c:f1:f9:bc:f1:b6:34:50:d5:29:9e:30:c1:e0:77:39:8a:
         7d:b8:bf:76:b5:a2:35:94:88:6a:dc:d5:93:22:42:43:15:56:
         64:e8:ee:3d:bd:da:57:ad:76:25:8b:66:68:9f:ce:85:ee:6f:
         1d:fb:93:a8:57:d3:a5:db:d0:85:4a:6f:58:a0:02:30:e6:51:
         49:17:82:b8:f4:49:30:1d:d0:d7:ef:39:d5:34:99:3c:9f:3d:
         1a:57:17:31:af:2f:25:60:5a:de:24:53:c2:ff:ab:0f:16:52:
         03:16:46:fc:28:f4:cb:8f:9e:9f:53:0b:80:08:fd:c6:68:95:
         3e:0b:8a:d0:61:74:99:01:77:29:c0:7b:8b:8b:6a:67:5e:7e:
         cd:45:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----