Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
File:                     _JNLA3cwXsv-ODshuHR0EGoeTdg.cer (raw, json)
Hash identifier:          rFTaOIx7IQ4JYc7G05iLTyUeA167VeMAkd/A38psMq8=
Subject key identifier:   FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9D6BA50B026AE6C9059165E37A565
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49461

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d6:ba:50:b0:26:ae:6c:90:59:16:5e:37:a5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:4f:ae:43:bf:bf:6f:b2:81:8a:47:ab:35:
                    09:fb:75:0e:11:0a:28:c2:7c:52:69:e0:e4:cd:7b:
                    c0:44:f8:37:5a:6f:e7:4b:7b:6c:f4:48:8a:79:33:
                    e2:34:c5:83:28:ee:1f:91:86:21:90:cf:77:a4:5b:
                    ff:97:68:07:0f:15:3b:95:00:71:67:11:62:3e:05:
                    76:a1:f4:50:e0:03:58:c0:f0:9e:db:18:a7:11:23:
                    8a:60:4b:a4:2e:6a:39:78:db:b2:16:91:64:69:28:
                    22:33:db:69:a9:a0:19:59:09:d1:ae:d6:2d:eb:27:
                    4e:2c:9c:9a:5e:bc:da:24:e8:47:aa:d0:c1:de:a9:
                    f1:66:cd:f6:7d:59:e0:74:29:8c:92:61:43:56:71:
                    3c:84:5d:a9:e1:88:99:68:32:5a:12:00:05:38:b4:
                    e4:38:31:c1:1e:6f:20:e7:ee:f8:21:66:7f:89:1b:
                    09:6f:74:80:e0:21:1b:62:6a:49:70:56:d4:3e:12:
                    3d:58:84:81:39:64:22:07:6a:69:b8:e0:82:b5:1f:
                    49:1f:3c:45:1e:4d:6a:d2:9e:47:12:f8:1f:ab:0c:
                    9f:82:9b:22:01:0b:d0:95:30:b9:e3:3a:03:14:08:
                    d2:8e:ab:f5:a7:e9:47:ae:08:20:10:a5:1c:56:43:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49461

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:90:2c:2c:21:4e:02:5d:31:a0:d6:dc:fe:9a:69:6c:95:
         71:6d:13:37:09:9f:37:59:7e:34:35:8a:8e:15:ec:f0:77:5d:
         d8:8f:11:af:07:f6:96:19:e9:15:44:5e:7a:84:15:04:f4:3c:
         5f:10:29:47:10:b1:4f:8b:3d:29:2f:bc:26:70:59:e0:77:00:
         2e:f1:a3:ea:86:a7:9a:76:76:e9:c1:d2:8d:89:81:46:63:f8:
         ff:98:8d:27:51:00:fe:ac:46:cf:23:64:12:04:02:47:49:59:
         c1:2e:a0:1d:8d:e0:88:3e:cb:45:51:7c:7a:2c:7a:96:2f:05:
         42:ad:94:27:eb:8b:2c:52:d5:6b:16:27:a9:45:34:39:84:95:
         c6:42:c3:75:f0:c7:2b:4d:2e:c1:6e:fd:ae:80:55:f6:32:0f:
         a6:33:62:6a:98:e2:54:2b:48:b3:28:ad:a3:2c:f3:c9:f0:46:
         95:1b:80:78:12:7e:8c:03:f1:27:45:ba:ee:ae:84:f1:a0:56:
         b9:ac:ae:fb:7b:fd:20:1f:b9:a2:c2:c0:62:e9:17:15:d6:4e:
         a8:cc:ec:47:52:7b:5c:92:ba:d8:c8:c0:bc:44:76:ce:30:18:
         36:f4:32:2a:5c:26:c9:cb:e3:64:64:66:0d:5c:15:85:24:02:
         6b:f2:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----