Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
File:                     mvVxMWwmKI4O1BawE3ofZIp9IAI.cer (raw, json)
Hash identifier:          UkLkEvVz+dTx94DrAABRcSf/uO52NFtS+MDWJGsjZFE=
Subject key identifier:   9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195DD50153712F09181DD34D0DD7B4F4554
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 15:12:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211038

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:dd:50:15:37:12:f0:91:81:dd:34:d0:dd:7b:4f:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 28 15:12:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9af571316c26288e0ed416b0137a1f648a7d2002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:f3:86:f7:41:a9:a7:72:7e:d2:ea:bf:8c:
                    9c:e3:fc:92:0f:d1:22:09:ed:cb:47:be:74:12:27:
                    20:8e:a7:39:8b:f6:79:5c:19:da:45:6c:b7:be:f7:
                    78:25:03:64:b9:88:e2:35:7c:98:25:8e:1e:21:13:
                    32:3a:c5:25:ad:47:59:08:df:ce:60:09:9a:60:64:
                    5e:8f:ee:cf:28:34:b4:f9:91:0a:d3:94:22:8c:c3:
                    a5:cf:f6:8f:47:e6:46:fc:e0:f8:60:aa:ab:e4:41:
                    99:21:f3:7b:23:df:78:d7:01:7f:e3:33:d9:69:32:
                    67:67:64:8f:4e:5d:47:50:77:36:83:76:05:cd:5c:
                    26:f7:ec:f0:d2:81:ba:00:c2:5f:9b:4b:fb:7c:eb:
                    74:26:33:3f:de:fd:e6:e5:1e:8f:0d:ad:fa:89:3e:
                    c3:66:c1:01:2e:3f:2b:1d:7e:1f:0c:cb:dd:5b:9c:
                    31:05:cb:7c:05:4b:e7:b0:ff:27:a0:c0:ae:6b:18:
                    2c:ba:37:cd:08:ae:94:fe:c7:d8:6d:df:9f:41:5e:
                    44:d6:e3:f9:74:83:5c:29:ec:c7:e8:6e:ae:65:3a:
                    ab:31:06:f4:ee:24:0b:ca:ab:c4:76:c3:e4:df:13:
                    0f:14:9c:11:79:12:e0:72:a8:3a:d0:a9:f8:34:f1:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211038

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:1a:83:1d:14:68:de:f1:52:a4:e6:b4:4a:ac:77:71:50:
         87:8b:f3:e5:7d:0d:ce:23:1f:eb:da:ec:66:e9:35:54:11:f2:
         2a:f2:f0:47:be:fb:57:aa:de:af:1e:4f:66:7f:24:7f:bc:78:
         cd:45:31:b7:f1:46:7b:69:11:97:a4:8b:d3:68:37:7c:3e:02:
         6a:39:45:95:46:cc:56:4c:dd:58:06:a0:5a:66:d6:ce:77:d6:
         dc:a4:55:56:59:3a:56:8b:68:2a:14:b3:c5:fa:df:a5:c2:0c:
         01:15:3f:72:92:69:b4:da:c4:74:c1:b0:97:6d:10:ec:1b:15:
         90:e0:0f:b5:9c:e7:d3:4a:f0:55:4e:51:d5:bf:ee:f7:3e:80:
         90:d9:5a:4b:9e:7b:5b:50:47:e0:ef:e1:9a:de:2a:09:19:65:
         86:84:fa:99:f3:24:5b:d8:e1:0b:25:e2:22:e6:40:fb:ae:61:
         b8:0a:9f:e2:c4:6e:40:b0:00:87:f3:a7:c2:f4:ff:1d:75:69:
         f3:57:62:80:44:44:7a:ed:02:45:36:55:0a:33:c9:bb:6b:97:
         6b:e3:ad:19:40:ba:a1:1d:ee:39:2b:2b:95:43:a4:11:ab:f9:
         cb:33:1b:be:27:dd:1b:d5:d1:03:a8:36:94:91:2c:9c:6e:9d:
         87:5e:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----