Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
File:                     IgTxXPMNc4SLB038rCYTgAYVatQ.cer (raw, json)
Hash identifier:          b4KB0AMgLSpd5j51hhdP5j00jzvLAh2ZWgV3qgP2BBg=
Subject key identifier:   22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424448745721E908DAAA01C9E94C1FDB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206018

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:87:45:72:1e:90:8d:aa:a0:1c:9e:94:c1:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2204f15cf30d73848b074dfcac26138006156ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:2d:fb:37:3a:f1:b0:82:35:d0:f4:f0:7d:
                    01:c7:5c:b5:00:ed:de:fa:fe:f8:ec:d5:be:7b:52:
                    30:5a:b2:3b:65:4f:73:58:a9:21:8e:eb:b9:98:0f:
                    47:24:04:04:73:3c:cb:b6:87:8f:a0:eb:bd:ee:9c:
                    e7:86:01:14:35:ce:55:7e:32:39:73:c0:e1:67:42:
                    7e:f9:d6:79:2f:f8:97:0a:c9:5a:53:36:5d:e2:4c:
                    0f:a0:f1:ab:f8:b9:8b:95:d3:fe:86:57:32:88:8a:
                    b9:68:da:98:f1:83:7e:5e:45:f7:40:09:70:25:63:
                    bf:f6:b1:11:25:70:35:bc:8a:fd:8d:e4:60:9c:f1:
                    42:a0:ca:7a:9a:9e:82:df:bf:b5:56:85:f1:43:3b:
                    9e:89:28:0d:2b:ab:8b:b4:81:b1:ba:61:c8:9a:4f:
                    e1:66:ec:fb:ba:90:b4:41:e0:6a:6e:8a:56:40:d0:
                    82:28:95:29:95:9f:f6:56:82:4a:79:b9:96:51:79:
                    b3:a5:f9:2e:20:d2:92:f5:25:41:20:46:33:fe:c5:
                    b9:57:ac:50:fb:45:06:01:96:73:ed:02:f5:74:52:
                    ab:e7:21:1b:64:30:85:64:68:23:0a:40:53:6a:2e:
                    61:9f:7d:f8:cd:06:bf:92:a2:79:20:36:c6:ff:da:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206018

    Signature Algorithm: sha256WithRSAEncryption
         87:49:75:7a:fd:98:e0:d2:49:62:b2:5d:e6:fa:77:26:12:c9:
         32:d1:f3:18:40:83:ee:8b:f6:19:c2:0f:51:f3:2a:69:80:5a:
         7d:a3:38:20:e3:ce:01:3c:c3:23:5f:b9:24:f6:9a:35:8a:18:
         ac:f2:60:d2:19:be:22:75:74:4c:13:c7:a9:eb:9b:3c:d7:80:
         7a:8f:28:12:ef:a0:25:f7:fe:93:60:5b:71:d5:02:0d:23:2e:
         66:a9:de:3a:4d:39:e2:c1:f1:13:94:ab:14:10:0c:85:a6:d9:
         55:ef:25:b2:2b:3f:2c:56:fd:ad:e0:26:ee:91:5b:b8:fd:f0:
         73:c7:18:e4:f3:bb:3c:ec:5f:21:d0:18:1c:51:d6:85:63:f2:
         0c:16:c6:c4:e1:1c:af:83:cb:f5:36:0c:81:43:25:fd:f5:81:
         ad:07:50:92:cf:7f:58:cc:69:96:13:42:29:54:cd:b0:41:93:
         3c:eb:ab:72:48:96:5b:31:f8:a5:6b:19:79:cd:9c:ae:24:38:
         08:d5:d9:77:5d:d4:d7:bd:12:21:93:fd:f4:92:2f:57:08:8e:
         f2:0b:c2:3f:bf:77:c3:9e:41:a8:78:3d:2e:f3:7a:29:f5:92:
         f4:e1:c3:6b:b7:72:cd:df:af:87:dd:5a:fb:0e:05:3f:2b:2e:
         70:49:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----