Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
File:                     bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer (raw, json)
Hash identifier:          QHP8zU8Ss2n+aQEBjPO04+e8QVvTU6PZpYm3ipPw8yg=
Subject key identifier:   6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F6B7BF5F58639424475E6A7112A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215512

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f6:b7:bf:5f:58:63:94:24:47:5e:6a:71:12:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:ed:9d:0d:cd:31:8b:77:28:af:f2:a3:fc:
                    0d:fd:85:0b:63:8e:a8:c6:71:2c:aa:45:e3:c4:32:
                    a5:60:71:54:81:cf:c4:69:49:33:70:80:9b:3f:26:
                    8f:b1:95:61:b4:ed:04:43:68:42:eb:d7:95:3e:cc:
                    55:29:d4:a9:e8:59:96:32:09:13:de:ae:9e:78:22:
                    a2:d7:43:da:d7:58:21:6e:da:1b:ea:14:5b:38:59:
                    1e:8c:cd:2c:a7:5a:d2:44:6e:98:ba:db:fb:97:9c:
                    d6:63:74:77:4a:b0:78:71:d0:f4:ca:a9:08:a5:f7:
                    2e:1c:78:d5:f7:3d:59:ba:83:52:0c:60:a5:8b:d5:
                    eb:1e:5a:cd:7e:38:e0:ce:93:35:55:0b:22:7f:d2:
                    5f:bd:31:80:43:fb:d1:a6:90:4c:0c:32:2f:21:3d:
                    7d:e7:5b:5d:4f:a5:86:f0:73:47:60:87:6d:e4:9b:
                    8e:aa:ea:ef:b1:e1:f7:c0:a7:26:19:9e:ae:9a:37:
                    1f:90:3c:62:f5:e3:d5:9c:56:6a:df:a9:64:0d:ac:
                    13:ad:37:96:70:42:dc:89:7a:da:53:83:55:fa:c7:
                    a7:b8:4a:f9:3d:1d:b5:63:b4:73:38:4a:a1:fc:cd:
                    44:88:17:d7:de:7d:83:1c:a0:53:45:f9:2b:4b:bd:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215512

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:99:59:6e:95:73:7b:ad:b1:75:c4:3a:92:e8:5e:0b:1e:
         ea:ac:ff:2f:f0:e7:3a:16:44:fa:d0:68:a6:ef:b7:b3:23:ff:
         4c:2b:20:a4:67:a0:da:92:b2:36:2b:44:67:74:da:15:d7:77:
         0b:1d:4d:31:39:73:90:be:17:56:b2:df:1b:c9:6e:6e:0a:35:
         32:a2:65:e3:c1:cd:33:93:42:a7:d5:2c:e5:a9:c4:f9:af:b8:
         85:3e:34:47:2e:bc:4c:35:de:ca:ae:52:ac:35:00:02:99:61:
         4c:03:a9:e7:4f:3e:f6:2e:af:83:0b:c9:67:fc:65:de:cf:c4:
         5e:84:e3:66:f4:81:95:4c:1a:be:8b:48:8d:e4:e9:fb:a5:60:
         da:88:d7:5d:bd:f9:18:e4:2b:eb:f7:32:f8:84:ab:52:fe:3e:
         ca:91:6d:9b:1d:ea:b8:00:69:b4:25:cb:75:e7:68:d5:c1:47:
         09:30:6d:cd:08:10:37:88:5c:81:75:97:d2:a0:dd:20:ca:e5:
         af:7f:93:f2:8d:2f:40:e6:09:48:e1:40:c9:82:82:01:12:5c:
         5c:16:4d:29:68:ee:fc:3a:11:a2:a5:0b:d3:4e:37:be:7b:74:
         95:08:07:b9:c1:2c:a6:04:47:1a:2c:05:c1:12:ee:a6:43:da:
         fd:e0:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----