Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
File:                     jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer (raw, json)
Hash identifier:          sUUWteUlPYdVwdaqJR/xavAmeqg3mLHzI/yqdC98rm4=
Subject key identifier:   8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F3EC91B894C26ABE4E5B9953D0D31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 20907

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:3e:c9:1b:89:4c:26:ab:e4:e5:b9:95:3d:0d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8cda93a702f03d6034b02c4637212a743a472c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:45:71:4e:1f:56:e1:05:f9:94:f2:93:a4:a7:
                    ea:27:db:f6:00:35:22:01:21:37:f0:b0:fe:25:42:
                    e8:1c:d7:e3:a1:63:ea:d1:fc:a1:95:57:08:ed:2a:
                    f3:75:9a:c7:e6:e9:4d:4d:78:7e:79:a7:b7:d8:65:
                    3c:ff:fb:cb:0d:fa:cf:cd:d9:fb:57:30:b6:ff:e9:
                    d6:96:b7:7b:d7:11:0f:47:10:2e:93:32:0f:d3:0c:
                    21:ba:98:57:37:82:cd:ae:eb:4f:8d:d8:f7:a7:ed:
                    20:0c:f1:7a:56:a2:c2:3b:33:a5:ba:73:b9:aa:27:
                    cb:8e:61:ba:01:83:81:b5:01:1f:0e:96:00:e3:a3:
                    35:c3:75:81:c4:0e:86:b2:ee:37:f6:8a:9b:0d:c4:
                    77:65:4e:55:f5:95:f1:cc:ea:0b:54:29:36:1f:ae:
                    73:2f:0a:af:21:f4:23:05:e9:f9:a7:bc:07:11:58:
                    6d:cc:6a:c3:d7:a3:d5:91:41:f4:9c:37:90:d4:e6:
                    87:13:05:a7:23:d1:f5:40:ab:0d:f5:f9:81:02:60:
                    57:28:82:6c:01:42:45:85:9e:9f:2e:10:98:96:26:
                    9d:b7:a8:c5:3b:e0:1d:d0:9a:4e:f1:e5:59:d9:dd:
                    db:a9:fc:84:4c:22:e8:bf:1c:e2:50:b0:56:01:9e:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20907

    Signature Algorithm: sha256WithRSAEncryption
         18:72:16:76:c8:4b:72:b6:f2:fb:e4:97:3f:a6:cf:1d:d9:d1:
         09:61:8c:d0:b8:49:b1:5a:78:cf:4d:7b:fb:64:3f:59:bb:44:
         19:5a:81:4e:77:aa:73:d9:24:8b:3c:38:9a:38:c8:c2:51:86:
         d3:d7:51:1e:79:18:87:65:0a:82:b4:0b:64:67:ef:3b:b0:16:
         56:83:fd:e6:bf:5e:88:2d:cb:d5:e0:e7:32:55:46:1a:9a:3b:
         f4:8e:c1:6a:84:05:d5:68:2c:a7:ca:76:cc:d9:41:e6:2d:9a:
         eb:31:1c:b6:34:17:91:3d:08:7b:c2:c7:55:5b:6f:30:b9:f1:
         7f:8d:17:d8:b5:6b:83:34:3e:27:c3:68:5c:b4:07:5d:37:e4:
         1a:e0:44:f1:66:28:0f:a4:5a:bd:ce:f2:91:b4:87:c3:0c:5b:
         99:ee:a1:f5:5e:45:b8:15:a0:cf:65:d2:41:da:1b:c2:b6:6a:
         20:d4:45:86:00:91:ba:33:6c:2a:8c:6c:ba:dc:8e:83:77:a1:
         38:e0:7e:ed:43:f8:d4:1e:bd:1b:d2:2c:8c:20:23:cc:81:86:
         c8:ad:9b:01:ec:4c:3b:23:5a:4a:d9:f5:45:18:9a:d5:74:3f:
         b3:c2:37:4e:ea:d6:46:8b:f0:cd:19:11:e7:71:aa:85:0e:a9:
         94:c1:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----