Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
File:                     U5UGCcqN1_bG-jzsrHeUIexsAQA.cer (raw, json)
Hash identifier:          zTOBdA3fBlVTaOR3GJLoMIKp0rdxQzlA06CxS34OiNM=
Subject key identifier:   53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424448BAD8C400BFF1B982DBEC88C5C85
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215034

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:8b:ad:8c:40:0b:ff:1b:98:2d:be:c8:8c:5c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:15:a7:91:34:df:d1:f5:03:4e:ff:c3:c2:
                    aa:50:c9:e8:c3:05:3d:56:68:ed:84:42:1b:45:75:
                    70:22:d3:20:de:fa:32:41:3c:cf:14:e8:4f:3d:e8:
                    df:a0:f0:c2:6b:fd:de:b5:6b:b7:c7:bf:fb:7e:19:
                    a5:34:0d:cc:be:d5:56:ab:0b:01:3f:34:43:aa:2d:
                    e7:df:dc:db:83:db:ec:0c:fd:50:fc:5a:4a:47:8b:
                    cb:e6:c1:76:0e:78:fd:b3:2d:e2:9f:78:af:b4:d5:
                    18:18:b2:1b:86:34:14:ca:46:e2:57:b9:16:a5:62:
                    1f:95:b2:18:08:53:8f:fc:21:0b:b5:da:ff:ba:81:
                    85:ab:22:8a:56:6b:86:b7:6e:17:c2:e5:a4:b8:6c:
                    52:00:18:81:8b:18:4c:ae:08:03:a4:69:ae:eb:f8:
                    57:6d:4a:d6:54:89:f0:de:7d:88:f3:2f:d7:8c:89:
                    9d:33:89:1d:55:d7:5a:63:03:25:76:3f:79:15:df:
                    c5:59:9f:26:d2:f4:c1:93:2e:5d:40:45:70:fc:19:
                    c0:a1:a7:71:38:16:80:17:d4:a2:a9:a5:b8:51:b7:
                    ee:35:76:fa:c5:02:58:4b:70:bb:21:2e:0b:08:49:
                    a7:56:54:36:e2:ff:51:cc:66:df:cf:3a:7a:1d:76:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215034

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:fb:88:19:6f:38:c5:85:b9:35:cc:20:56:52:3f:ec:91:
         7a:8a:e7:e6:fd:26:e4:b5:ec:e7:22:2e:46:e9:3e:fd:ec:9f:
         95:59:27:01:f0:12:86:03:97:04:81:74:de:29:32:5f:77:4d:
         90:21:18:b7:76:31:25:0e:c5:9b:33:fe:88:cc:1a:98:c1:3f:
         2b:c0:a8:6a:47:5a:8d:4d:8e:59:f3:37:74:cc:d7:18:3d:64:
         e7:3f:2d:aa:8f:2a:5c:25:d2:0b:3a:54:72:8d:a4:95:c8:95:
         8d:bb:cf:e2:5a:cb:c5:e0:8b:f3:76:ff:60:db:81:0b:f9:49:
         04:4e:4f:d5:b1:ff:ba:bc:02:a8:60:3a:8e:0b:a2:37:99:96:
         7c:5a:a1:2d:7d:3b:82:74:f0:80:64:7f:95:b1:1e:45:ed:0b:
         aa:c5:54:70:ed:b4:4d:a2:a3:10:c8:a9:e5:69:07:f1:b0:f0:
         fd:e7:b5:79:38:23:da:75:32:35:66:c9:e8:92:1b:0c:b0:45:
         01:cb:51:e8:c0:ee:c6:cb:b6:4d:8d:7b:e9:c8:d4:01:07:85:
         bc:8b:e3:e0:a4:60:28:41:a2:12:29:38:93:81:c6:a2:25:ca:
         fa:84:80:0d:c4:2f:e8:09:31:e4:64:7c:82:ad:5c:60:f0:3d:
         f7:46:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----