Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
File:                     ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer (raw, json)
Hash identifier:          00UqTtEEqexIx+/fWcsJEfsLgcLzHnCyDJbyshTUjvg=
Subject key identifier:   64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA1775E6B41DA23BF0FDFB9C4079F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197649

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:17:75:e6:b4:1d:a2:3b:f0:fd:fb:9c:40:79:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6414775fdaeec7b0d5c927083988d555727c21b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:b0:80:3a:5a:e7:2a:c5:9a:87:78:55:d2:
                    c2:6c:7f:ba:28:50:89:86:e8:c9:53:87:c9:28:45:
                    a5:9f:53:bf:5a:d1:85:8e:d5:8d:8f:97:2a:08:d3:
                    df:92:6d:7d:13:8e:b6:75:bd:c1:ea:25:03:ec:ec:
                    e2:28:09:5a:b8:91:f8:92:a5:c2:08:af:5d:79:74:
                    09:28:38:8f:bf:95:20:88:99:8f:62:33:af:bf:4d:
                    d1:aa:0b:e7:e8:1d:f5:f5:2b:38:04:7c:e1:db:61:
                    bf:e1:79:b9:19:82:c2:8e:1c:20:b8:49:b0:87:ff:
                    81:15:0d:1c:ee:6c:23:76:4f:f0:5b:74:41:c7:79:
                    bd:a7:56:b3:18:c5:e5:b9:e2:63:97:21:e2:14:56:
                    66:fd:78:d6:45:46:50:60:d4:e7:66:69:94:d2:94:
                    f5:68:03:cb:31:86:80:24:db:11:9a:0c:f8:cf:eb:
                    ae:d4:eb:db:22:69:35:d0:8c:2f:d5:c2:85:87:5f:
                    18:65:ef:82:60:08:72:36:ef:d9:8e:76:07:87:32:
                    b7:ca:6b:bf:ea:84:96:01:c4:60:7e:54:05:5f:1a:
                    05:a6:f4:81:a9:1e:7f:41:0c:ba:24:74:4b:ef:5e:
                    ec:92:bd:80:fa:f9:0e:0d:04:0d:cb:ac:10:ac:35:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197649

    Signature Algorithm: sha256WithRSAEncryption
         0a:b6:da:65:88:d0:62:25:8c:ef:ab:1a:ec:41:38:ad:c7:17:
         ca:cc:90:af:b1:4d:1f:eb:8f:78:15:8d:3f:c8:4f:ee:3f:fa:
         36:37:e5:94:81:8f:3e:58:d9:fe:b0:67:10:77:19:2c:fd:59:
         eb:79:31:f2:53:33:7d:c9:3e:b4:f8:9d:1a:b0:72:6e:dc:8c:
         d2:7f:29:84:58:25:7c:19:c4:41:17:00:2c:84:02:47:4a:15:
         1f:e5:c4:20:9c:fe:8f:a8:a8:95:64:7f:a7:5c:11:7f:c8:b2:
         d3:01:5e:da:a6:56:e2:37:e1:08:35:e9:1d:0e:5c:48:ef:a3:
         1a:ec:9a:3e:ce:26:ba:46:50:d5:34:1e:f8:74:4e:a8:f9:3d:
         d7:a5:ed:38:05:73:78:95:ea:20:00:9c:14:c9:dc:5b:a3:d7:
         bc:a4:4f:2b:35:86:37:a0:ca:c7:77:8e:87:cc:e8:bc:ec:33:
         eb:3c:b5:32:cf:a0:00:03:f2:8a:5b:ee:8c:2d:5e:7f:02:62:
         71:a2:ab:14:a2:37:ce:77:d9:e6:a7:b1:bb:dd:31:4b:ea:61:
         cb:22:02:5e:f0:05:13:89:ac:e1:86:1d:e5:bc:93:8d:0d:ef:
         c2:f5:b1:77:6c:ac:1c:79:46:18:b4:26:d7:62:02:96:f9:09:
         3d:45:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----