Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
File:                     c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer (raw, json)
Hash identifier:          OUoTh9u/ugqLTIX0Wo22tOk0GmDlbWEEjlwFd2dZ+v4=
Subject key identifier:   73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194E25D26A96F32E3CE0DACCDDC4F5C4E1B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 07 Feb 2025 21:42:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214480

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:e2:5d:26:a9:6f:32:e3:ce:0d:ac:cd:dc:4f:5c:4e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  7 21:42:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=73d85f8438d73b5668e89cc692646f9487965fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:60:58:2b:e6:3d:1b:d6:14:7d:71:a5:2c:
                    f9:74:07:cf:38:1c:9e:b2:7f:58:3b:83:69:88:63:
                    13:cd:69:71:07:47:11:de:13:27:81:d7:38:af:5e:
                    8d:d8:db:ec:c5:dc:02:f2:89:fa:5e:0e:74:ea:55:
                    21:e4:8e:f4:1d:38:d2:2b:13:51:3c:e4:b3:ab:ca:
                    b8:d2:70:42:2f:f5:47:aa:94:21:44:35:aa:eb:9e:
                    7d:d4:5a:22:11:9b:1c:35:28:73:50:0c:8c:54:bd:
                    81:f3:27:00:22:82:e0:d3:59:bf:9f:6e:a2:a0:f2:
                    07:8e:37:47:c0:61:0c:b6:9c:2e:c2:73:09:9a:6b:
                    4a:3b:9e:d6:9d:21:22:78:85:78:b8:fe:30:b7:b7:
                    d8:aa:0f:a5:ce:81:e4:33:f1:5b:92:91:26:b2:cb:
                    20:0f:3c:28:a4:14:0a:75:fe:66:be:f9:23:fb:ed:
                    81:9e:d8:85:ad:08:b2:e1:94:a6:61:e7:61:44:d8:
                    9e:ce:e9:59:a8:f8:5a:72:9b:17:c3:23:35:27:69:
                    eb:2a:7e:d5:99:ea:32:57:3f:6e:ee:22:1d:01:a8:
                    44:a3:e7:19:99:09:a2:00:9f:41:68:fa:ef:7b:07:
                    00:01:cf:f0:ad:90:9d:0e:54:07:19:b4:38:d9:58:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214480

    Signature Algorithm: sha256WithRSAEncryption
         2f:7d:36:9d:e7:ea:5d:c2:fb:60:d1:a5:6a:a6:5a:66:9b:25:
         77:71:65:92:84:f7:f7:18:3e:bf:a3:ae:b4:95:f6:15:bb:9f:
         c7:4d:22:91:06:48:63:04:f3:80:f2:55:ce:d5:79:8d:b7:d7:
         7f:89:bb:f1:9a:5a:97:be:a5:b9:7c:74:af:78:12:8c:11:3f:
         64:f1:b6:54:27:43:c0:3a:ce:5a:5c:62:29:42:0a:f9:5f:12:
         06:32:72:a8:f1:2e:80:3e:b6:ae:cf:c1:5e:7b:f3:2e:dd:ca:
         c5:54:0c:ac:1d:87:1c:e6:cd:59:0c:5e:33:f9:f4:cb:df:5f:
         24:08:c1:77:c0:05:91:c0:17:eb:a3:08:7f:db:ed:dc:ea:34:
         ff:96:1a:9a:81:f5:42:7e:e7:2a:02:b1:bd:cb:8c:ec:d1:d3:
         b6:ac:3a:e4:10:0e:d3:f7:05:32:53:31:79:fc:69:21:e9:c0:
         ae:bd:78:86:82:89:1f:bf:cc:7c:7e:5a:48:52:91:31:7f:9f:
         14:d6:e9:e6:96:54:03:07:3e:0c:28:2b:51:2a:72:b7:85:f1:
         9b:cd:92:fc:93:c7:2e:a2:3a:2a:36:1f:73:90:1a:69:83:c6:
         4e:89:d0:55:1c:13:57:08:60:70:ff:38:2e:6b:5a:65:17:14:
         96:ba:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----