Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.cer (raw, json)
Hash identifier:          7c8dzMowUXf+7iWv04Ex5ybCtDwAQN9jhHqQeG7QwDo=
Subject key identifier:   57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B18F50660D6AFEB35D23D8CA03C56C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212762

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:8f:50:66:0d:6a:fe:b3:5d:23:d8:ca:03:c5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:fe:ef:e2:70:24:c2:46:b8:5f:2b:c6:13:
                    94:67:76:eb:b7:3a:fa:6e:23:28:01:f9:f0:b4:8a:
                    b3:f7:86:5f:a2:47:01:e8:f1:a1:91:e7:0c:7d:72:
                    3a:e2:2d:96:fa:9d:34:99:03:65:f8:1e:64:dd:6e:
                    49:c1:7a:af:1d:4a:1b:eb:6c:bb:7b:ba:4e:0f:48:
                    8c:0f:e6:af:7a:cf:bc:fc:dd:91:61:8b:60:65:fb:
                    97:74:01:57:28:96:2a:de:16:38:a8:cb:a1:84:30:
                    b0:e6:fd:5f:dd:2c:2a:bb:6b:26:4d:ae:4b:b3:9a:
                    52:53:59:0f:b3:d3:d9:b4:74:9b:e4:31:2e:c6:29:
                    fe:ec:97:98:aa:df:97:1f:c6:f1:c8:09:58:82:1a:
                    15:4d:d2:29:b1:9d:21:a1:a4:3f:e1:62:3c:2d:bd:
                    6e:d5:d7:c7:2e:d1:1c:db:cb:8f:f5:9a:c6:9d:e9:
                    11:93:de:31:41:a9:7a:0c:18:46:65:81:29:cc:9a:
                    b9:d4:5f:75:3b:e6:f5:11:60:ff:1d:56:6b:78:28:
                    fd:79:1d:1d:8a:ce:72:61:a1:45:07:cf:e4:26:39:
                    e0:23:e2:53:05:4d:3e:19:89:ab:10:20:83:7e:4f:
                    b8:52:31:cc:5a:98:1c:80:90:62:16:de:b0:e2:77:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212762

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:ad:ac:f6:4a:8b:65:b4:c2:af:28:34:72:4c:81:1c:0c:
         c6:0d:c8:4f:34:bb:de:c5:a7:2e:12:1a:d0:fb:98:0f:26:a9:
         77:b5:a0:78:be:6b:c3:4c:f4:bb:3e:84:d6:ca:2a:9e:11:89:
         b7:85:3a:81:f8:7b:46:39:b6:05:0b:15:c7:c8:ca:83:6d:d0:
         8a:38:b6:8f:1e:ba:3e:a9:14:c5:c8:32:f9:19:a8:1a:b1:81:
         d0:9e:ad:04:03:5a:b6:7e:8b:f0:17:37:44:3a:8b:16:0c:96:
         aa:6e:1a:c2:f0:4b:ef:23:5a:a6:e3:1d:e8:c7:28:95:dc:3a:
         dd:ce:5e:a7:77:38:85:97:93:fa:ef:bd:5d:05:40:7c:3e:74:
         51:fe:43:ec:18:03:3c:0e:5d:73:83:77:fe:dd:6c:32:a4:e6:
         13:b3:b3:11:07:13:f4:f7:a7:f5:20:98:0e:85:87:e9:f8:ef:
         85:41:d9:a3:32:1c:cc:e2:51:6d:04:c3:42:30:35:0f:5c:82:
         24:e7:e6:af:50:56:c2:b0:d2:c4:de:e1:5d:79:51:bc:1d:ff:
         80:a1:69:a1:ca:cd:92:cb:0a:08:ae:31:0d:3d:46:34:f4:af:
         bf:0b:60:5c:8d:de:3c:f1:e8:dc:cf:6c:33:20:6b:53:93:89:
         ff:a3:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----