Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
File:                     _-W67rcNfV5-7SxR09WEe7NhtFU.cer (raw, json)
Hash identifier:          5wgQOlr7rxnawS1qseWPTTeM8msMk4WoJez4+cvhAuY=
Subject key identifier:   FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019566C4C27054EDCEA4C63EE4FFFAC9C942
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 05 Mar 2025 14:45:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211979

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:66:c4:c2:70:54:ed:ce:a4:c6:3e:e4:ff:fa:c9:c9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  5 14:45:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:63:6d:68:7b:ea:bb:67:35:60:17:96:df:
                    b0:a1:c7:65:d8:86:4c:47:ab:a3:03:2a:36:1f:00:
                    fb:a7:ac:80:25:bc:62:cb:e3:30:b0:69:27:e2:a6:
                    3a:e1:df:34:aa:ac:8d:8a:41:c2:17:d1:8f:eb:d8:
                    15:cc:85:b1:cb:7b:c8:8c:0b:3c:97:43:3e:47:cc:
                    a3:1e:79:f7:50:d1:6a:28:22:fd:cc:ba:12:17:54:
                    3f:4b:c4:b3:32:d8:f0:c9:74:f5:b0:86:c4:6d:c3:
                    8a:e2:68:ad:33:c9:3a:42:4a:6e:19:39:bd:32:a4:
                    4f:f8:db:05:5b:be:f7:e6:d6:20:e9:47:5c:f9:a5:
                    d3:6a:0e:5d:ac:a9:71:02:3f:3c:94:dd:b0:b2:04:
                    4a:a5:53:41:56:0f:c6:64:60:df:48:17:26:67:fa:
                    1c:37:d5:2f:e5:85:20:0b:c6:19:78:77:a3:be:92:
                    23:ee:bc:7a:c9:e4:20:55:63:24:0a:9c:b4:4d:27:
                    ed:25:d3:84:cf:32:0e:5a:be:f8:73:d1:2a:7f:d7:
                    d3:35:04:cb:1d:a2:07:3f:1d:23:e2:da:f5:f5:ea:
                    46:92:a3:26:37:57:63:f6:d9:c0:c4:14:ed:65:87:
                    87:63:40:b1:95:0d:0d:54:8f:a4:f3:97:2a:1f:a5:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211979

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:d9:83:93:f1:88:68:70:2f:18:32:fc:8e:ce:57:d3:fb:
         e1:86:59:14:a3:a4:df:56:c7:1e:cf:47:42:57:27:12:17:b6:
         19:b4:40:42:fb:75:33:18:8f:1c:e5:c9:2f:8c:75:3a:9a:3b:
         6d:75:11:d1:10:de:4c:aa:f7:82:e9:43:55:40:63:96:d1:85:
         63:f5:02:2e:44:34:0a:ca:f5:14:2c:fd:b1:1e:60:ca:7c:bb:
         cb:58:3c:c4:dd:fe:6c:69:09:83:7b:b8:85:55:3e:ef:d4:ac:
         39:b5:96:37:e4:38:3d:76:f1:55:46:4b:1d:d1:3c:e9:ac:2e:
         9c:64:c8:8d:3a:60:d9:08:20:df:bb:70:91:d5:b4:28:f4:66:
         6f:b6:a7:41:ae:31:4f:70:b4:64:a5:e9:b4:a8:50:38:67:c7:
         dd:12:85:15:67:68:bd:67:97:83:c6:aa:31:31:12:c0:27:c5:
         7a:8b:4d:db:b7:c6:12:8b:d9:0a:78:e7:1c:d7:1f:12:70:e9:
         ec:b6:d2:c6:78:02:0d:df:a3:17:72:a5:55:2b:89:18:02:9e:
         7f:02:d0:3a:cc:cc:92:3d:5c:73:c8:e4:52:44:7b:0a:05:5d:
         2d:c2:30:72:0d:79:76:17:37:e7:c1:0d:8f:d9:78:ad:87:14:
         9a:92:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----