Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
File:                     fKnhWNylWE83ofg0myiaaBLbkko.cer (raw, json)
Hash identifier:          /OkdcpGLd6tx4KIsMdE+GmQZnfRWFIjc9goyMKC90Xk=
Subject key identifier:   7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCC53DD1A2F56B118637B7A4D25E2C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204784

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:c5:3d:d1:a2:f5:6b:11:86:37:b7:a4:d2:5e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:dd:9e:0d:b4:3a:a6:48:81:20:06:d6:92:
                    7b:5d:ed:7c:d0:df:16:72:be:c2:69:e4:6a:56:c5:
                    a9:63:78:3e:1f:46:73:78:14:e7:d8:e2:c6:ee:cd:
                    34:ab:0b:07:28:54:5c:16:70:95:57:e6:a0:c7:12:
                    75:61:d4:b1:e7:b1:fe:45:c5:f2:cd:b9:3a:73:30:
                    13:9a:38:5e:ec:30:b0:37:c8:e5:a0:02:01:f2:27:
                    9d:a1:2e:2d:8b:23:c7:b6:a5:d7:47:2c:58:54:3c:
                    bf:67:a6:8c:27:bf:83:5b:ab:4b:c4:6b:cc:d4:84:
                    c2:cc:ed:ad:f5:39:11:7a:60:56:37:73:2e:b7:93:
                    a4:a0:d1:d2:18:2d:b2:0a:cb:42:18:91:3b:5f:6f:
                    71:a0:26:f9:71:2d:53:fd:68:bb:61:9c:9b:84:16:
                    36:60:e3:c3:7c:1d:93:e6:45:32:f3:92:35:80:dd:
                    35:c0:bf:cf:fa:4f:73:49:13:43:1c:6f:11:d4:b5:
                    bd:1a:c0:d1:a9:7b:7a:b1:d9:ae:47:ab:22:ee:79:
                    18:20:6e:e3:08:b5:3c:34:df:ba:c8:dc:64:9c:ea:
                    e9:dc:16:27:4b:dd:81:91:9b:02:08:b5:54:bd:18:
                    bc:f9:f8:db:ef:82:ed:46:dc:5f:18:88:5d:1d:67:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204784

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:86:c2:45:c9:5c:a4:35:27:78:cc:a1:2a:4d:e7:e7:84:
         68:46:d9:3a:1b:0b:ae:36:c4:01:58:25:42:83:dc:60:d5:91:
         18:8d:5f:a1:41:ce:dc:74:51:cc:63:df:4c:99:08:35:cc:99:
         36:ee:c5:42:bb:11:c7:2b:53:fe:e3:b1:6c:a6:84:13:57:33:
         1b:9a:c1:81:94:47:59:26:f6:83:05:9b:fc:c0:1c:2e:a0:cb:
         f2:2e:0b:cc:e6:47:a5:47:5c:cb:27:d6:8c:ce:d0:8a:4d:42:
         95:6a:ff:35:cb:37:43:62:db:e3:d2:bc:86:55:d8:53:3c:32:
         6e:08:47:56:70:35:1c:7e:46:ae:67:4f:be:fe:77:9c:ff:b4:
         c5:37:62:e3:47:f9:ed:7a:ca:34:66:f1:e0:99:bb:ea:5a:4c:
         e2:37:8a:5e:f0:63:78:ed:64:f6:1f:f3:72:e6:9c:49:48:71:
         ac:58:a5:a8:6a:e7:35:2a:c2:20:2e:27:0f:e4:aa:25:35:42:
         1b:c4:e2:5f:6b:fd:d0:a6:0d:c5:f6:8a:e6:f8:ae:d2:91:c2:
         de:25:bb:44:b7:5e:9f:d8:cf:53:c2:c9:0a:a6:0a:39:b1:26:
         bf:42:02:86:8d:9e:75:4b:7d:1b:9c:eb:99:31:6a:d6:68:0e:
         6b:7e:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----