Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer
File:                     VRfJBSP1ZkGA9x4wYN2iMXLkz3U.cer (raw, json)
Hash identifier:          lfiyvYYYEbKExoi/gF3KMimCtTrREUQFtrzHTEJXmH4=
Subject key identifier:   55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F719E5EEB81A8DA8D1FD701745E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210546

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f7:19:e5:ee:b8:1a:8d:a8:d1:fd:70:17:45:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5517c90523f5664180f71e3060dda23172e4cf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:6d:e8:f9:79:3b:af:42:aa:fd:52:56:65:
                    a4:86:2b:78:d9:b2:e5:f9:29:08:a6:e0:a7:94:42:
                    da:7b:0f:6b:19:3b:d8:12:a1:b5:3e:7c:2c:75:13:
                    0a:8a:c1:ab:59:72:26:60:27:1d:c8:c8:1f:67:ad:
                    5b:5b:e0:4c:b5:1b:67:11:aa:93:2b:22:93:2a:13:
                    21:db:b2:68:c7:5a:ee:85:5c:e2:57:5d:42:58:86:
                    46:8f:fa:c7:8b:97:67:e2:3a:d8:c1:2b:e2:11:03:
                    e9:06:b7:10:6b:84:e3:e7:5d:14:50:b3:76:81:e0:
                    00:ad:37:28:02:1b:b9:92:5b:49:05:86:9a:d2:a9:
                    a5:f7:4a:d8:09:7a:f2:e6:cb:d7:e9:79:f9:9a:8d:
                    f8:14:38:cf:25:3b:60:68:e1:18:62:c2:92:2c:ec:
                    a8:a5:b0:94:bd:28:00:8e:cc:79:f2:b5:fe:80:37:
                    86:9b:8c:27:3b:1a:cc:cf:a5:36:d0:4b:01:2d:c6:
                    8f:70:df:aa:05:e1:9c:3c:38:1f:a4:32:3f:56:a3:
                    09:5c:d6:eb:e1:43:7b:cc:73:fe:67:db:38:d7:03:
                    7b:63:c9:40:1f:75:f8:05:93:0f:73:3b:60:b8:54:
                    2b:ae:66:c9:2b:09:ad:dc:c9:b8:37:2a:ca:50:f0:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:C9:05:23:F5:66:41:80:F7:1E:30:60:DD:A2:31:72:E4:CF:75
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a31b25-e927-4ea2-a8a0-20f44b9f4ee7/1/VRfJBSP1ZkGA9x4wYN2iMXLkz3U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210546

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:04:6e:79:ef:bf:79:b1:6e:e9:1b:dd:ff:bc:3f:d0:e8:
         52:95:1a:af:d8:02:79:c0:59:58:83:09:93:95:6c:32:a5:2d:
         e2:0a:7f:a2:5f:41:f7:ba:a6:97:74:b6:03:a1:df:a5:3c:b6:
         27:55:cc:32:a8:f0:3f:57:a0:f1:89:2b:3d:42:e3:96:b6:53:
         48:28:ea:a2:47:33:be:d8:0c:85:fa:5d:b9:0d:ee:52:3f:67:
         bb:7a:8b:b6:75:36:2f:01:99:f8:02:fc:a8:2a:9a:ba:37:cb:
         2d:56:e9:46:16:5b:a6:d8:e9:be:48:9c:33:55:16:9f:d3:bb:
         8e:03:8d:d0:1b:85:9f:ee:e0:47:b7:5f:33:85:21:c6:75:e7:
         a6:11:3f:9d:76:fd:6c:0c:27:97:2f:d9:97:cf:0b:7d:26:32:
         db:63:fa:56:b0:6c:9d:13:4c:d6:1a:e9:1b:9d:3e:31:49:97:
         8b:e3:7a:33:0e:4f:3a:86:80:16:0f:68:25:30:14:8d:10:97:
         82:67:63:f4:62:d3:49:c3:5e:b5:17:8b:cf:ac:c9:9f:76:d3:
         c3:b8:56:47:ad:04:1c:69:5f:5d:d2:31:1a:0a:19:9e:6e:b0:
         62:7b:f5:d1:1a:af:ac:da:91:06:76:dc:82:a0:04:10:05:e4:
         0f:de:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----