Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
File:                     MnBggp7MaE-ln4VaoKSEAbwX8tE.cer (raw, json)
Hash identifier:          O2ERKDzzgrmh1vvHFyBDfJN5qdjDCYP3V0j5vbNket4=
Subject key identifier:   32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DD48C07161FDC547B4C1875692490
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44299

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:d4:8c:07:16:1f:dc:54:7b:4c:18:75:69:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:0f:2e:94:c1:48:4e:4e:a2:60:51:c9:34:
                    e9:5f:1b:7a:51:8d:a0:25:66:13:66:d7:c4:0e:f1:
                    1c:5c:c7:2d:4e:a1:3e:a4:a6:1a:0e:f1:9c:9a:b7:
                    56:f6:21:de:b1:31:f0:68:15:4a:80:18:3c:8e:48:
                    91:4c:31:e9:89:01:57:89:74:c4:a8:e1:14:87:06:
                    79:6a:47:70:14:b6:29:e8:df:bf:b5:e6:ea:ba:a0:
                    11:ae:8f:4b:dc:d4:de:50:63:3d:65:1e:0d:cd:97:
                    c3:ba:7e:27:e1:17:92:c9:eb:2d:c5:e7:1f:31:44:
                    28:61:ad:e6:2f:88:4b:24:6c:0f:1f:30:5e:7c:43:
                    33:11:c3:e1:ab:95:74:c8:ef:74:06:86:df:98:ff:
                    00:e7:e3:ec:33:95:67:44:1c:eb:f9:b0:1f:5b:bb:
                    07:71:9a:bc:f7:16:2b:d7:d0:fc:cf:52:00:ea:e7:
                    f7:d2:fe:10:32:5c:f6:f2:6b:2a:18:9b:12:b7:ee:
                    9c:13:6f:99:36:c9:e5:98:4b:20:4c:e7:ad:3a:4f:
                    ac:5d:b7:c8:72:4d:4f:45:09:e1:cf:83:ac:4c:40:
                    25:78:2f:0e:5e:b8:60:87:ae:0a:5d:b0:5a:db:15:
                    8c:a1:de:74:e8:d9:74:90:52:39:f0:52:44:15:d8:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44299

    Signature Algorithm: sha256WithRSAEncryption
         42:c0:17:eb:2e:d2:f4:ec:c7:d2:17:39:7a:d3:4b:af:3d:9d:
         3f:b5:47:3a:df:b0:34:e5:84:d6:32:92:4b:6e:f5:f7:7b:e2:
         7a:9c:a7:c8:40:fa:1a:da:b0:99:9a:1c:96:40:b5:74:c1:f5:
         f6:2f:2e:94:d1:d2:c6:ca:f6:4a:54:94:f2:a4:d8:47:d8:0e:
         3e:eb:2b:0e:ed:29:97:4c:43:ed:f9:01:48:cc:70:c5:f2:5a:
         90:bf:27:6d:e6:2f:dd:e1:e1:3d:a8:4f:56:e5:04:f9:42:0f:
         5a:18:a2:b9:50:aa:3f:c3:99:f6:a2:44:6f:f0:6b:2c:ef:5d:
         40:22:19:e1:e6:5b:3a:2a:1e:2b:68:8e:7f:3f:36:04:60:fc:
         88:42:67:7f:03:aa:c8:63:37:df:2f:96:a4:1e:8d:bf:44:99:
         c8:a5:0b:90:29:7e:9c:a6:7f:65:04:15:a1:25:b5:04:8c:dc:
         7d:43:87:75:2a:40:99:d7:f7:0a:88:2c:fa:a3:71:bb:7e:0c:
         3a:ce:82:a5:08:a0:df:fd:c6:6f:05:f3:61:14:1d:9a:16:4f:
         27:27:36:ae:f7:2b:25:b7:fc:ed:5a:64:18:5c:95:1c:e1:e7:
         21:60:9f:d2:fc:bf:f6:f9:4e:9e:b6:59:9a:0a:37:20:e3:a5:
         e1:f0:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----