Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
File:                     U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer (raw, json)
Hash identifier:          85WbKczBlZpcfz+wLapnoUNqct7c/YnXzuqoQNeTHfc=
Subject key identifier:   53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9F16435C4D840928A036C58EF85F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212450

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:f1:64:35:c4:d8:40:92:8a:03:6c:58:ef:85:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:62:4b:8e:81:58:81:82:25:b6:dc:b0:08:
                    c2:b4:5d:1e:1b:af:f4:46:42:f8:39:af:33:d0:b4:
                    fd:83:85:b1:ed:a9:18:ad:b5:e6:dd:d2:41:97:45:
                    86:a7:37:df:95:f6:f2:9d:93:74:22:a5:23:dc:77:
                    83:5a:2b:01:01:b8:23:3c:26:d0:02:99:fe:e2:0c:
                    e6:bd:33:f3:f1:d3:13:3d:c8:da:cf:02:e9:d8:2e:
                    84:04:5a:54:ce:30:9c:45:37:6d:1e:3e:cd:45:9a:
                    a1:74:cf:0c:87:64:48:b0:70:14:a0:a5:82:57:b0:
                    ff:8a:61:3e:0e:30:08:75:f0:59:5d:b1:ec:3d:6e:
                    d5:24:de:7f:36:58:4e:8a:53:a8:37:45:79:37:64:
                    ee:55:33:0a:fc:60:3d:b4:ba:1f:39:ef:cc:e0:cf:
                    4a:98:ec:7f:1e:e9:8e:9f:24:b8:ad:dd:f9:10:08:
                    f1:1f:4b:e5:99:94:23:7a:47:da:f1:24:46:70:b0:
                    8a:1d:00:55:77:62:29:ea:e1:db:12:ec:8d:c0:ed:
                    b4:cb:0c:96:4f:5e:81:1e:cb:a2:3d:48:9f:00:64:
                    10:6a:cb:fa:f3:7a:46:ea:cb:61:6a:fd:77:71:7e:
                    e6:a3:fc:67:c2:f1:57:5c:6e:d6:81:03:5b:a6:af:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212450

    Signature Algorithm: sha256WithRSAEncryption
         09:58:24:9a:87:6c:81:30:0a:31:d4:72:49:78:63:8d:e3:db:
         d8:20:5b:8a:0c:14:e7:29:e8:91:8c:fb:f5:5a:8c:d5:61:62:
         fa:0c:68:de:07:fa:0a:18:30:99:f6:2b:b7:07:c8:2f:e5:11:
         92:b0:9d:e6:f9:91:ef:c3:5c:cf:00:29:d2:c8:bb:3f:07:5c:
         76:d9:2c:94:9d:ff:10:cb:23:64:62:6f:22:02:56:d5:ff:cb:
         be:43:f7:6d:1c:42:b9:f0:c3:2a:f2:dd:1a:f7:11:a9:86:28:
         2a:86:69:f7:c9:92:0e:75:65:6e:3a:cd:b7:5e:11:4f:b1:53:
         69:e5:34:c4:a4:9e:1a:1f:59:24:29:13:57:8a:97:49:e7:4d:
         1c:22:75:1e:6c:f6:43:84:08:3b:9c:67:b9:a5:c7:c3:ea:2a:
         88:42:72:6b:dc:0b:2e:4a:8e:89:ff:b4:cb:6c:01:cc:da:b6:
         5a:af:db:6c:01:19:d6:c3:34:0e:c3:a0:b2:a3:4a:5e:c3:8f:
         f1:38:d8:f4:72:5a:05:8d:33:f5:98:34:35:e0:ac:b3:50:46:
         36:a0:0e:dc:5e:cf:a6:2a:26:18:b0:59:e1:cc:48:e1:62:90:
         3d:61:26:92:f5:a6:1f:15:4c:3c:a3:5e:dc:4f:22:74:0c:e5:
         bf:3b:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----