Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
File:                     HzkK-DPX1CaQQsJJvPSWSFcglbY.cer (raw, json)
Hash identifier:          EFv+bdpFfvdmqCt1L8Koma9PADO4fS4Cqwo7z8p2BeQ=
Subject key identifier:   1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206839EA8E0AD94C4144F0F806800890
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211242

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:39:ea:8e:0a:d9:4c:41:44:f0:f8:06:80:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f390af833d7d4269042c249bcf49648572095b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:5a:4b:df:62:02:81:d8:44:e4:4d:be:53:
                    ea:54:a8:ba:9b:ae:7a:d6:79:6b:de:ef:92:f7:07:
                    2f:2f:8a:8f:91:a3:f3:70:22:27:48:53:8e:6f:51:
                    4e:58:b9:72:5e:ac:08:0e:32:3a:16:e3:46:c6:24:
                    e3:d6:e9:97:84:b2:65:2e:ac:2f:24:b7:f8:31:e2:
                    ea:ad:7d:f4:fa:f4:2a:a7:a7:34:86:d7:da:e3:a8:
                    b6:94:3e:f2:24:cd:cd:3d:97:bc:a3:7d:f7:dc:58:
                    25:a5:77:53:f5:01:c0:0e:5a:d2:23:e8:f6:7e:77:
                    b8:83:dd:68:58:d6:e6:0e:09:d3:20:40:8e:b8:2d:
                    82:47:81:2a:3d:48:24:d7:a5:12:77:1a:a3:98:0c:
                    01:ac:44:13:93:4b:63:d4:8d:ef:b6:23:3d:fc:50:
                    e9:4c:f1:30:7e:08:eb:c7:ad:d3:e6:8d:b2:3a:59:
                    02:9f:63:db:51:3c:4d:e2:49:18:11:d6:ae:a2:ed:
                    72:a0:1a:43:0b:74:7d:34:fa:6b:9d:90:a8:39:28:
                    4e:cd:de:29:dd:35:fa:a2:5d:99:29:ea:a0:2d:39:
                    86:e0:99:72:6d:d6:1a:be:68:39:75:e3:51:10:bb:
                    b7:50:15:4e:53:44:83:49:ed:33:54:4c:23:24:fb:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211242

    Signature Algorithm: sha256WithRSAEncryption
         80:19:4c:5a:27:3d:7d:17:1c:b7:f1:2b:3c:31:48:57:7d:e7:
         26:f8:d6:e4:48:f4:e0:29:56:e6:51:1c:aa:09:ac:29:02:8b:
         83:c1:c1:3c:26:6e:e0:d6:50:62:5a:d2:aa:42:70:3d:c6:42:
         fa:02:76:7c:d9:52:f9:10:e2:91:71:0c:8f:b3:33:c9:cd:7d:
         0d:bf:e0:a2:9c:a0:c1:71:4e:fd:88:a7:2b:48:99:34:b8:e6:
         8a:49:df:00:43:98:db:3c:3f:7c:ab:56:32:0c:5e:fd:c7:25:
         6f:a7:cc:00:b1:10:10:01:89:9f:73:cf:3f:a3:49:a6:fa:81:
         50:70:ca:ac:ee:5e:b6:f1:3a:29:e1:52:94:db:e3:df:1c:f3:
         41:64:08:9f:7e:9b:fc:62:17:f7:b0:60:94:49:18:c4:fd:d0:
         d5:c1:b5:db:63:f3:79:9b:5c:7b:f3:2b:0a:d7:08:ea:36:a1:
         bb:9e:e6:a8:16:75:87:2b:00:21:26:f0:e7:b5:a6:27:b9:d0:
         7b:95:a1:28:ea:03:3a:c8:34:12:da:98:dc:cc:73:d9:2a:4c:
         91:98:bf:a7:2d:8d:09:b7:e1:ad:04:04:99:d7:96:f0:68:33:
         86:d4:d8:6d:0b:a5:00:46:90:47:ac:fe:cb:1c:c8:5e:5f:33:
         8b:c7:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----