Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
File:                     JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer (raw, json)
Hash identifier:          mUEQdi0lZ+FTMdpexsL+FWCtB5rMM3LIHEUcgZlmClE=
Subject key identifier:   25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961483BDB91C76272CD5BECE9D1E5B7797
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 08 Apr 2025 08:28:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50104

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:83:bd:b9:1c:76:27:2c:d5:be:ce:9d:1e:5b:77:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  8 08:28:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:36:c5:da:22:04:41:d0:f2:96:c6:81:ea:ab:
                    be:72:d6:da:90:98:e0:00:d6:b8:22:b9:87:68:b1:
                    85:77:11:20:07:6d:b7:9a:de:f3:79:2e:ce:47:1c:
                    0e:4f:ca:7a:24:02:98:a1:38:10:99:fb:27:85:e1:
                    31:21:91:11:01:d7:93:5e:82:29:3d:36:55:f1:ac:
                    c9:5a:32:b8:bd:f6:29:0e:54:e1:fe:08:b1:85:ef:
                    06:45:19:08:b6:41:1c:3e:90:a2:20:46:4a:36:36:
                    f9:1c:65:c6:26:a6:6e:3a:80:3c:65:dc:9f:7a:50:
                    22:5c:2c:ab:f9:5b:4a:2e:03:20:7f:94:f1:53:9b:
                    83:15:02:cb:4c:1f:01:a5:b5:d4:72:07:3d:61:71:
                    57:54:06:30:50:72:14:2b:06:71:5c:67:62:26:43:
                    7f:26:73:ed:62:c8:88:55:19:82:25:af:b3:4a:68:
                    5d:27:8b:ea:d5:e9:2f:5e:5e:f1:b0:4c:81:0c:e1:
                    ef:d7:b4:94:52:18:09:cb:e1:c2:66:7d:7c:bb:4f:
                    f6:2d:e9:0e:ff:57:64:01:2d:40:b0:0d:1a:14:4e:
                    48:55:81:42:40:6c:44:6a:85:0b:24:53:82:46:31:
                    da:95:80:55:d7:82:23:49:ed:2c:59:ea:22:cd:5d:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50104

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:43:8d:de:db:ae:aa:ea:00:54:c1:f2:04:e7:92:11:e0:
         a7:92:31:e4:06:9d:30:a6:92:2d:7a:e3:96:9c:62:17:5c:d5:
         65:89:4f:2f:d8:c2:bd:90:4e:6e:27:37:ea:5b:3f:e6:c6:5c:
         dc:03:0c:5e:60:f2:14:69:c8:be:ed:78:a4:0e:b4:42:52:68:
         cd:ba:f1:20:fc:32:ad:86:28:21:95:39:a8:e9:fe:68:74:da:
         99:d1:32:e8:21:eb:92:57:96:e3:86:10:eb:34:d4:78:cc:c9:
         0e:3a:2c:57:8f:43:51:67:53:c5:74:8a:ec:dd:9c:22:76:89:
         40:28:c3:57:e0:1a:da:dd:eb:53:6b:7a:7c:23:00:db:62:5c:
         fc:ef:75:3a:f4:48:bb:c6:d3:99:54:ed:40:0f:da:ef:ec:57:
         66:be:ac:44:78:35:e3:fc:4a:b4:d3:ce:03:e7:41:57:92:f2:
         09:e6:35:83:39:d8:73:44:84:0a:fe:1e:d6:d9:a5:f3:3c:a1:
         68:21:f1:ec:e0:a0:19:26:2f:1e:cc:68:0d:59:fa:8f:c0:db:
         28:56:0b:75:d9:d3:fd:99:c6:3c:5c:e7:03:4b:6a:b5:c4:c2:
         0f:31:bf:fc:26:13:77:de:20:eb:cb:ef:31:ee:d9:42:f4:2b:
         e1:0b:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----