Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.cer (raw, json)
Hash identifier:          FDhtIS7CqmWrJ/iU/yVylAZYL84feQ3A/DlpMJX75lA=
Subject key identifier:   78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DDCDC80CF7E2945A0A9F5A949B717
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44710

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:dc:dc:80:cf:7e:29:45:a0:a9:f5:a9:49:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:7a:91:a7:82:61:80:47:c7:f5:6a:2b:dd:
                    18:ec:85:b3:a5:5d:1f:20:94:eb:de:62:84:7f:a0:
                    15:d3:9c:84:bc:6d:d4:c8:c4:af:3a:f6:18:89:02:
                    b4:ac:64:31:3a:4b:16:66:a9:29:f6:87:f7:f2:48:
                    7a:a1:ee:cc:93:01:d1:6c:1a:d1:22:1f:a5:2a:76:
                    ab:6d:c2:ae:a8:9e:c8:e7:3d:19:8b:e9:6b:91:d3:
                    b4:b6:fe:d2:31:58:ad:f1:1d:a0:71:4c:89:b8:68:
                    49:b5:eb:4a:cf:a6:2d:e0:61:9a:23:3b:48:41:c9:
                    04:ff:7a:fe:f0:22:f5:ba:20:e5:66:04:f1:94:1f:
                    32:59:18:e5:70:cd:b6:ed:e2:0a:5b:38:b3:85:e4:
                    56:5e:64:96:8d:13:aa:ad:e3:a3:d2:8f:d2:f6:94:
                    32:8f:3b:4a:e3:d2:29:b1:1f:44:28:36:a3:d1:00:
                    6d:f4:f7:01:2d:a3:f0:40:7c:0a:85:3f:bc:ed:a0:
                    77:31:51:97:d4:e7:b7:d9:70:98:01:5e:7c:03:05:
                    b0:0b:2c:d6:21:96:81:1e:16:77:89:8f:03:af:df:
                    8a:7e:92:88:11:48:02:dc:7a:4b:e8:92:81:93:7f:
                    02:e6:be:3c:b1:2d:fa:2f:6f:37:cd:e1:7f:7d:1f:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44710

    Signature Algorithm: sha256WithRSAEncryption
         30:63:56:79:2e:7b:24:88:c6:10:0a:1b:f1:81:7d:eb:7b:4d:
         93:84:52:44:8a:4f:f2:65:b5:e8:2d:0a:0f:52:8e:7e:f6:38:
         bf:7f:7a:c6:49:52:ad:ef:87:31:94:32:6d:b9:e7:5a:0c:78:
         c9:00:dc:7a:58:7a:84:c1:d6:85:da:a9:b4:99:45:3c:39:cb:
         c3:fc:05:c0:13:73:b1:08:c8:a8:58:d8:91:e6:0d:44:a9:8b:
         0b:d2:6e:62:3b:1c:69:5c:94:27:d4:9c:a3:6f:11:2e:ed:98:
         e8:ed:90:2e:6f:39:78:4a:b6:f3:9e:df:06:39:ed:05:f6:a2:
         5f:56:01:bb:ad:43:32:f4:a1:71:7f:0a:4b:a8:e6:cd:01:5a:
         44:c0:9c:ec:dc:90:c5:56:63:f3:74:98:aa:5e:b7:f6:1e:4b:
         4a:9f:fe:db:00:1f:09:fd:d1:c1:28:bf:e2:32:60:b1:11:12:
         2b:aa:e1:18:16:b4:d7:b4:47:95:5a:2b:90:b5:1b:03:d5:c4:
         3b:b0:35:74:0b:32:0f:ff:ed:98:99:58:95:57:52:e3:1b:b6:
         48:84:7b:6a:c9:49:3a:bf:43:9d:26:19:f9:06:7b:3d:b8:fa:
         de:0e:b1:b3:cd:58:21:46:d3:2b:92:f4:c4:25:c9:42:a0:22:
         bd:97:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----