Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer
File:                     WFRbn70B0owOptCPW0cts0-tLqM.cer (raw, json)
Hash identifier:          HNWeeEOZbzdBRQEZAm8GbQxyons8hJdybyzwzOL0X18=
Subject key identifier:   58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067B53A1FE72BD423C0A994FA5A5494
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41129

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:b5:3a:1f:e7:2b:d4:23:c0:a9:94:fa:5a:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:86:38:09:1d:4e:60:90:9e:7f:6d:f4:98:
                    fb:95:de:27:68:66:9c:fd:2a:91:3a:60:c8:6a:4e:
                    84:a0:ea:53:da:50:7d:13:f1:5f:14:bc:1e:0c:99:
                    30:f8:48:f9:ce:78:4f:cc:da:7b:76:a8:cd:71:ed:
                    b1:ec:75:92:5a:15:1d:e1:1a:67:bf:59:4c:9d:70:
                    d9:49:7c:d4:fb:3d:da:9d:b3:bc:7f:70:f9:56:7b:
                    51:9c:4d:6d:7b:19:90:80:ca:2a:f5:17:a1:32:15:
                    50:5b:da:33:6f:03:a6:a8:f0:26:46:09:90:87:ce:
                    94:38:eb:23:3f:8d:1d:fd:31:ee:fd:fd:6b:07:df:
                    39:10:8b:3e:b9:15:24:6c:d0:84:22:a6:6c:65:1c:
                    e5:db:cd:dc:6a:6c:07:32:4e:62:5b:48:7b:63:e8:
                    d9:d3:c3:b2:40:da:ff:53:d2:5e:0e:0b:12:94:96:
                    b7:ff:26:e8:ba:81:c3:68:6f:22:0e:c5:84:2b:ae:
                    06:10:48:31:9c:47:ee:80:a7:15:1e:45:41:4c:89:
                    8b:d2:8b:aa:a6:75:e8:97:16:30:18:56:e6:5d:31:
                    c9:f0:b3:64:dc:91:ce:03:b0:78:62:1b:6a:70:52:
                    64:06:4b:2f:11:71:b2:84:92:d2:53:8d:05:2c:18:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41129

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:0a:f8:df:22:22:24:75:98:0b:80:d1:78:23:b6:16:3a:
         48:bc:9c:d3:9e:18:a4:2d:c0:14:90:55:60:41:ce:ec:ea:f5:
         b3:0e:dc:85:e2:e5:e4:b6:70:ed:28:ac:36:6f:cf:b5:d3:95:
         14:f5:3b:e2:c9:66:95:b1:1c:43:a6:c7:a8:e0:2d:bd:16:f8:
         05:a2:7b:99:07:b0:91:a8:a3:40:74:c2:db:40:11:84:64:73:
         7c:66:c9:ae:07:8d:01:24:37:4e:a4:b5:6d:08:6c:62:32:a0:
         a9:fa:a5:b0:3c:f1:25:d1:c6:29:2b:57:4f:00:ec:1b:a0:89:
         2f:f4:0d:7b:62:c8:19:f0:98:79:91:0f:7a:ff:d6:55:c5:6c:
         c6:9d:49:21:c0:f8:1b:3b:a4:9a:7f:07:a0:85:9d:05:40:88:
         d7:29:8e:b5:5d:5e:6c:64:f5:18:d9:8c:7c:c9:24:07:80:64:
         0a:7f:60:22:0e:57:93:b8:11:b9:dc:69:3b:88:4f:aa:fc:21:
         bf:b7:6f:58:e7:54:b8:59:8f:16:d2:7f:21:1c:38:11:8e:32:
         1a:05:58:0b:f7:8d:e8:08:8a:54:6a:e9:87:a6:5d:29:dc:94:
         eb:83:78:bc:e0:3b:2e:50:40:26:1d:26:e4:6d:08:2b:ff:8f:
         78:fd:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----