Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.cer (raw, json)
Hash identifier:          5QuXrE0xpWnqP/Ouq10da1HyVPuQMwo5xZnjISgWRg0=
Subject key identifier:   79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C16153AA764B5FB079237600C3315
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210069

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:16:15:3a:a7:64:b5:fb:07:92:37:60:0c:33:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:8f:0b:83:31:f3:19:90:3f:58:cd:31:c9:
                    0c:a3:4c:b2:c6:f9:f6:f2:71:f1:33:ff:ec:b3:1d:
                    1d:eb:78:c4:c0:dd:87:2b:0b:38:ae:14:4b:3a:92:
                    0f:26:4b:23:9c:d0:75:51:f2:61:51:6c:b9:83:3c:
                    1d:39:70:95:f6:31:46:37:d4:d2:5c:bb:e8:bf:aa:
                    22:b6:53:e7:76:65:7b:3f:5f:37:b3:f8:54:8c:44:
                    cc:9f:1f:27:cf:e5:7c:88:c5:1e:4f:4d:99:4e:5d:
                    98:ed:3b:f8:7e:31:c5:62:01:d3:8f:f4:43:6a:8f:
                    53:83:63:ab:9e:c4:d7:ca:72:e0:08:cb:be:45:f9:
                    5b:ff:45:0d:f3:ac:a4:0d:5e:c1:43:be:fd:0e:d6:
                    8a:77:d8:fd:b2:dd:f8:20:27:a1:64:f2:5e:41:cf:
                    78:2e:a3:37:99:78:fc:56:a7:58:96:76:f3:f4:19:
                    d3:a3:72:1d:3e:c1:9e:e8:36:f8:7f:28:9f:39:d2:
                    72:c1:50:93:c5:6d:51:58:4c:2e:1e:57:56:20:95:
                    fa:5a:b0:e3:07:4e:ca:ca:6c:5e:3b:b5:a0:97:06:
                    94:3b:e9:b0:60:6e:f0:31:69:12:45:b0:28:bd:bd:
                    c2:f0:83:14:c8:df:57:88:a3:1f:a2:6f:8c:5f:ab:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210069

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:2c:e8:20:a8:32:cf:92:1d:28:9c:74:37:56:63:b6:6a:
         ab:aa:0e:ee:2b:07:ac:d3:39:44:53:0b:0c:d2:9e:35:da:d3:
         e7:74:53:b7:d1:0a:75:c6:f1:e9:c1:4c:a6:8d:d2:44:9b:28:
         03:58:5b:bf:90:0d:9a:42:80:03:b9:16:d0:63:08:f4:9b:68:
         5c:f2:f4:3f:51:e8:15:1f:08:3b:12:2c:b9:0a:36:b9:32:39:
         fb:40:b4:12:95:d6:dd:02:b5:cd:b4:40:ba:2e:49:dc:e2:c8:
         c0:4a:3f:0e:ea:6a:bb:1a:bf:e6:e1:5c:e1:1f:c6:53:36:8b:
         4a:08:fc:a4:26:d2:59:63:2d:3b:b4:2b:b2:9f:cc:3c:b2:9c:
         62:51:f2:51:a8:0f:0b:7a:e5:e8:ab:7d:57:05:98:6e:ab:8b:
         68:f8:d8:e2:51:a0:bf:58:24:80:5c:2a:d6:db:87:55:72:6c:
         34:3d:f5:27:dc:7d:cd:48:c6:fb:29:4f:f9:4c:f3:7d:8f:ec:
         b7:5f:82:10:ef:40:d2:eb:88:d2:b8:be:8e:ce:d3:ad:21:18:
         cf:49:63:1f:a9:69:c8:b6:3e:3d:b4:65:35:da:fa:5c:4c:8a:
         5f:1f:4a:28:14:f2:f4:7f:ac:5a:b7:f0:03:a6:6f:1e:19:94:
         4d:56:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----