Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
File:                     LONOJrtlYwuGk29JaTU-18hplcg.cer (raw, json)
Hash identifier:          siBCTxYTWRR6gL3nhlQMP2OuqKva5aBjUR99AQ9Ba7Y=
Subject key identifier:   2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D650F6A382E866049C0CB8C1D5D6C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204543

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:65:0f:6a:38:2e:86:60:49:c0:cb:8c:1d:5d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:4a:45:17:1a:b4:03:15:a5:ac:73:ed:df:
                    09:72:cd:20:0b:e3:47:d0:f1:3c:7f:3d:35:c6:17:
                    b9:03:98:8a:0b:a6:d2:40:b9:88:2c:c1:59:ee:6a:
                    19:19:8a:97:d4:0d:ed:7a:b4:09:d3:2c:ab:83:0d:
                    51:52:ae:5b:c0:5f:c9:2c:23:09:65:09:cf:f4:01:
                    a0:23:e2:2f:a6:90:c3:69:45:74:2d:49:2a:b8:a6:
                    6a:90:0f:43:5f:bf:0f:05:91:85:5c:00:b0:90:f7:
                    c0:62:c2:23:0e:f8:44:8a:59:41:8a:a3:26:c7:d5:
                    ea:8f:ab:b5:3c:64:11:c2:13:cd:5f:74:ac:49:27:
                    e1:3c:d7:26:fa:e8:0a:c6:d3:0e:ac:4e:18:59:4f:
                    74:f8:50:8b:f9:56:07:d2:41:62:74:2a:dc:c7:d3:
                    35:bb:bc:50:60:e5:3f:18:9f:2a:bc:a0:6c:84:82:
                    ae:97:e9:3a:a2:84:87:4b:90:3d:a4:16:c4:f3:9e:
                    73:54:6b:df:35:67:17:0b:b8:a0:70:bc:43:9d:13:
                    ef:c3:47:07:49:45:46:00:ce:75:20:6a:cf:fe:f9:
                    2b:f5:15:e9:7d:04:b4:7c:69:cb:85:12:c7:cb:d8:
                    01:bd:56:f5:44:4a:08:36:c9:42:a2:c0:61:62:e6:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204543

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:06:15:82:4b:e5:74:43:f3:99:67:0c:39:4b:f3:3f:37:
         c1:3e:f6:ac:ab:fb:bf:5a:f6:1c:15:34:78:97:64:78:37:18:
         3b:41:6d:6c:b2:cf:ae:9a:b4:bb:ae:cf:7f:6a:8b:f1:bb:52:
         96:01:eb:c0:ec:13:86:ea:b3:4c:e5:60:ec:05:bf:3f:4e:1b:
         23:7a:49:66:36:0b:87:31:b1:6d:72:d0:70:64:fd:b2:bc:f2:
         60:fc:7d:eb:76:80:37:28:47:c8:f0:0c:d0:db:62:81:b3:c8:
         ca:be:79:10:1f:c2:5e:03:c1:ce:d3:ea:f9:2f:64:55:c5:ae:
         b7:af:1f:02:70:41:43:6c:82:e7:10:9d:35:95:0e:8b:0a:12:
         7c:9b:ca:ae:14:8e:2b:a6:35:b7:02:36:92:ad:dd:4f:ab:17:
         19:99:43:a4:20:07:0d:17:b0:08:f9:a0:e0:55:58:5b:96:17:
         77:df:e4:a1:fa:2b:65:c1:86:71:f8:e4:fb:2e:72:1f:12:af:
         36:58:43:e1:c9:32:f8:c7:32:ca:14:0f:24:86:b0:83:c5:dc:
         2f:a4:b0:70:f8:ca:5f:c1:ff:2a:cc:51:fc:c7:4c:ac:01:b9:
         7b:93:cc:4a:d0:37:7e:0b:12:97:2e:15:5b:63:ed:59:0f:4f:
         53:16:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----