Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R37BXKT5JNlmlnVFEk9lUxDSyXM.cer
File:                     R37BXKT5JNlmlnVFEk9lUxDSyXM.cer (raw, json)
Hash identifier:          ybPX5epttcyKO/opA7K9g5V8KMtZN5uCls65PURgS0s=
Subject key identifier:   47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428272B6A3E80E4B38F1B10FAE8E4585E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:54:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204592

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:2b:6a:3e:80:e4:b3:8f:1b:10:fa:e8:e4:58:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:54:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=477ec15ca4f924d966967545124f655310d2c973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:81:5b:a0:96:a9:6d:85:50:a6:8f:23:d1:
                    62:b3:a8:c4:5a:9a:60:1a:82:c3:df:43:79:ea:34:
                    95:5c:34:ba:32:1a:26:cb:d6:28:9c:9b:a9:a0:7a:
                    3b:07:c5:a9:c9:fa:e1:10:1c:13:d1:69:8e:83:e7:
                    62:06:9b:74:a6:f1:64:44:85:1a:e4:68:5d:99:06:
                    bb:d3:ba:1f:f4:ca:ed:b5:12:19:e3:04:af:02:59:
                    6c:76:78:7b:2a:c5:3f:21:93:55:9c:15:01:ea:9c:
                    97:4c:19:66:f6:0a:4b:4e:c2:98:5f:34:08:9f:15:
                    59:c6:4b:94:56:52:3c:35:19:ee:d3:b1:5e:e4:eb:
                    c6:0a:71:66:f4:58:a1:05:c1:41:5e:70:a0:94:80:
                    01:73:55:89:46:53:aa:d6:b3:bc:33:37:45:b1:62:
                    9a:75:c8:5b:e2:31:42:e8:42:23:e3:69:ce:a6:a1:
                    d1:eb:49:34:9e:7f:c0:99:e4:63:05:30:80:4d:24:
                    ff:6c:8a:6e:07:49:92:22:d5:f5:f7:69:49:53:ea:
                    a2:7c:b5:8d:c4:78:95:05:25:42:b1:c6:f7:97:e6:
                    b7:7f:2a:7d:9c:f6:b9:dc:04:9f:3a:03:ea:b7:65:
                    2f:5a:d7:2b:91:e7:d3:e4:52:9d:17:bf:da:89:d6:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7E:C1:5C:A4:F9:24:D9:66:96:75:45:12:4F:65:53:10:D2:C9:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1a3e49-c5d4-469b-8e85-3c9a66bac395/1/R37BXKT5JNlmlnVFEk9lUxDSyXM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204592

    Signature Algorithm: sha256WithRSAEncryption
         49:62:bf:b0:31:62:9c:36:58:1b:44:d3:5a:41:52:47:83:e1:
         f1:c8:1f:9f:31:3b:3b:fc:aa:9e:01:a4:d5:37:80:db:10:9a:
         ec:e2:f6:a8:9b:99:da:61:cd:f3:ea:60:47:c2:a3:ab:6b:0c:
         cb:62:7b:11:23:c9:07:15:91:52:9b:16:73:3e:01:a2:e4:f9:
         97:54:91:16:27:c8:a0:2a:f5:8f:be:47:4f:df:96:22:6a:03:
         7f:18:64:40:5c:b5:98:33:ca:55:29:f4:41:64:4c:cc:4b:fb:
         0f:cb:d2:d3:8c:f7:c9:6f:4f:c7:e9:32:2e:62:e9:7b:66:96:
         87:03:f2:79:f0:1a:2b:66:e1:b6:98:b6:2a:a1:9e:e2:94:ee:
         1c:bd:ed:ef:26:ee:91:96:a3:d7:3a:ae:9c:e4:ee:08:82:7a:
         e1:39:24:59:90:ae:f6:58:02:82:ad:76:c1:e6:4c:3f:87:87:
         71:bf:eb:76:55:e4:ca:b5:b8:0f:39:31:72:d6:71:1c:f9:6a:
         51:1b:bb:af:a8:9e:dc:d4:6e:ea:ac:1b:9c:83:a7:7d:bf:e7:
         cd:60:48:da:8d:a9:f6:b7:3a:68:0c:ae:4a:11:ed:86:78:a2:
         50:82:47:43:3d:3a:7a:36:b1:88:82:a2:7e:e9:85:98:35:99:
         9e:a1:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----