Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X23Mdld_mvUKfYmaWt4IgV8KVXE.cer
File:                     X23Mdld_mvUKfYmaWt4IgV8KVXE.cer (raw, json)
Hash identifier:          7FFis8yu+RDt13QZyZg4GAoOvplvjv1tU89rLLZzMtE=
Subject key identifier:   5F:6D:CC:76:57:7F:9A:F5:0A:7D:89:9A:5A:DE:08:81:5F:0A:55:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0191F6B8615C7FF998F3EFF6B06D2A5D62C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/9d2017-3555-47e6-87b3-5a1d40747b09/1/X23Mdld_mvUKfYmaWt4IgV8KVXE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/9d2017-3555-47e6-87b3-5a1d40747b09/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 15 Sep 2024 17:26:04 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 215681

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f6:b8:61:5c:7f:f9:98:f3:ef:f6:b0:6d:2a:5d:62:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 15 17:26:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5f6dcc76577f9af50a7d899a5ade08815f0a5571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:d6:42:02:67:aa:a7:47:e0:2c:18:49:25:
                    20:c8:4e:34:fb:73:5e:38:79:96:f0:bb:e8:23:c0:
                    4f:27:51:a9:18:f3:1b:8b:3a:96:11:15:6e:a8:81:
                    a3:60:cc:b5:13:63:a5:1b:9b:83:26:2d:59:7c:ea:
                    eb:b3:9c:4b:ad:33:22:6e:f2:85:d2:31:f1:a1:95:
                    a5:04:2d:73:da:d9:b0:dd:80:f2:d1:04:e5:d1:92:
                    57:4f:99:a9:69:02:44:e8:36:4a:dc:7d:9a:b2:57:
                    aa:db:c6:3c:83:36:60:ef:07:b4:b9:0b:0a:d3:87:
                    9f:bb:67:b4:48:de:06:cb:55:50:35:2d:75:79:d6:
                    24:75:ca:a6:a6:de:12:f0:fe:66:5b:2e:3f:ad:f3:
                    c1:11:71:d3:90:1a:dc:10:91:21:5e:41:6a:9c:ba:
                    6c:f5:d4:e6:a6:9a:59:53:86:f3:f6:a7:8f:7b:ac:
                    36:86:db:97:32:8b:b7:2b:de:18:0c:e6:94:05:78:
                    0e:aa:28:b3:7a:4e:6e:14:fb:5c:77:69:ef:c9:6b:
                    91:c7:a4:90:41:77:4d:b9:0b:a3:af:5f:fb:b8:64:
                    6b:9d:7e:d5:12:f1:b8:43:05:87:b2:b8:11:16:3b:
                    cf:55:85:0c:1b:fb:d9:e0:98:14:9c:9b:1f:db:da:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:CC:76:57:7F:9A:F5:0A:7D:89:9A:5A:DE:08:81:5F:0A:55:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d2017-3555-47e6-87b3-5a1d40747b09/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d2017-3555-47e6-87b3-5a1d40747b09/1/X23Mdld_mvUKfYmaWt4IgV8KVXE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215681

    Signature Algorithm: sha256WithRSAEncryption
         57:55:a9:ef:b9:83:f3:59:db:2d:c3:7a:ea:e5:4d:48:a5:3a:
         a3:f4:83:b9:35:07:0b:bd:d2:8e:c4:08:63:0b:b0:bd:45:a1:
         8e:b7:01:a4:69:94:01:ed:a6:7c:9c:96:33:01:34:bb:5b:ef:
         4b:15:37:c4:51:61:b5:4c:af:89:33:01:6b:06:0b:e0:25:16:
         89:99:db:98:ba:75:e9:af:c6:7b:74:29:fa:12:a2:4b:e6:db:
         b8:cd:8e:e3:01:f3:e5:25:02:8a:a1:fe:4d:f9:6c:2f:28:be:
         79:c2:27:d0:38:b2:e8:0c:c3:26:bd:4b:12:ea:ce:15:8c:cf:
         bd:46:1e:60:e1:5f:fd:e9:10:f4:2f:7e:2b:f6:01:fd:d6:d4:
         05:a8:b9:aa:fb:c7:10:dd:a6:0b:55:6d:27:98:62:ea:16:a4:
         69:b8:07:b0:8d:4b:bb:c7:ee:3d:f7:e9:7b:25:6f:20:ff:ee:
         9a:78:72:e3:f8:dd:01:4c:6b:5f:63:50:7d:73:64:b5:e5:86:
         ac:4a:c6:a0:d1:43:e9:0f:e2:5f:14:56:0f:97:4d:f7:6f:8e:
         da:ef:e7:7d:e7:a0:28:40:21:ee:9a:09:bd:2f:1c:e1:b0:26:
         b5:c0:1f:ab:ee:93:10:1b:40:e3:60:a9:b0:71:6c:4f:ef:cf:
         41:20:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----