Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
File:                     MxpRr9TLZoLCMN7WQGWMETxWL9I.cer (raw, json)
Hash identifier:          Zqb88MUpdTD4uSIYi4ZpDkLyosZZl5jMaLAgOeITATE=
Subject key identifier:   33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B22D4C5913F63D47C9E16BDACEAD45
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198378
                          IP: 2001:67c:7a0::/48
                          IP: 2001:67c:ca8::/48
                          IP: 2001:67c:cac::/48
                          IP: 2001:67c:cb0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:2d:4c:59:13:f6:3d:47:c9:e1:6b:da:ce:ad:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=331a51afd4cb6682c230ded640658c113c562fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:91:a7:e8:28:73:f4:c1:ec:d9:7e:a0:8e:
                    20:8e:7a:92:1c:a0:5d:dc:28:e4:f7:7c:6c:1f:c0:
                    76:14:f6:1a:2d:97:05:7d:e5:ca:e5:2e:e4:4e:63:
                    02:6a:bd:6a:6c:4c:c9:a1:fe:ea:24:ff:ad:d8:d6:
                    99:87:ca:b3:17:f4:6b:01:25:6f:88:2f:a0:53:db:
                    88:fb:d1:d0:93:4d:b9:f5:b6:08:89:a0:38:bc:d1:
                    46:f0:85:9e:6e:6d:18:e6:b5:10:fb:56:4d:9e:f5:
                    69:f3:f5:a1:eb:21:6f:8f:bd:0c:fa:97:03:0b:bc:
                    9d:43:19:7b:2d:f4:a2:6e:c1:af:69:7a:0a:d7:09:
                    5b:81:c6:35:85:ba:09:ed:0d:3c:49:38:f1:b0:24:
                    7f:94:9a:da:27:0b:02:7d:e2:a0:81:2f:49:05:e9:
                    da:7d:bb:1f:87:29:c0:de:f3:12:59:b0:d6:8c:f8:
                    b5:dc:8e:d9:21:0b:1a:4a:ce:91:19:6a:e8:16:8b:
                    c8:20:6c:d0:00:72:70:83:ee:72:61:23:c4:1d:20:
                    87:f7:b1:19:0d:7b:a6:39:45:a1:69:c7:af:83:14:
                    3a:16:b0:8f:43:ec:28:68:1a:a9:c4:d9:48:b8:5f:
                    49:87:f1:5b:4e:af:cb:d0:74:09:ce:6f:c7:9b:50:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:7a0::/48
                  2001:67c:ca8::/48
                  2001:67c:cac::/48
                  2001:67c:cb0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198378

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:bd:15:46:ea:c7:49:41:2d:b9:24:c1:dd:2d:20:99:90:
         32:71:9f:20:bd:ec:dc:e5:ff:cc:f4:04:08:9f:dd:57:5c:1f:
         1f:0f:96:d6:ae:aa:92:f7:e6:fd:48:fe:5d:04:ef:c2:b7:07:
         0c:17:e3:cb:60:3b:35:94:22:18:aa:60:81:54:ef:7a:57:52:
         83:ec:c2:e8:eb:81:70:5c:8f:33:ba:52:3e:d6:75:dd:34:48:
         ae:4a:b6:9f:a1:57:92:81:4c:52:ad:83:59:14:e0:9b:4d:cc:
         11:3f:7c:84:85:b9:1f:99:42:26:92:68:98:38:36:4d:18:77:
         27:c9:be:b0:3e:e9:da:0f:75:b8:b0:7c:97:d6:56:d4:82:0f:
         2f:09:f4:e7:6b:53:ad:2e:10:0d:89:02:24:f5:df:89:8e:f9:
         7e:ba:07:f7:26:b9:31:9a:01:85:14:70:d2:f3:4e:94:31:24:
         81:2e:19:50:23:31:3c:bd:c2:b4:53:18:2e:5c:53:a9:52:87:
         cb:02:bb:f9:eb:64:8e:48:2c:80:8c:46:74:45:b7:32:76:f8:
         18:76:a0:23:cb:05:01:5d:a1:2a:12:35:2d:b3:c2:eb:18:0b:
         db:f8:a6:f7:52:66:13:39:ba:71:9d:80:ae:b5:c7:5b:9e:5f:
         82:da:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----