Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
File:                     pO9xMrnCMYeert1cpNwysWXwx_M.cer (raw, json)
Hash identifier:          5hXmDI9OVyYZQE8RGGWPtRQMxpE7clZSFIcbW+N1N6o=
Subject key identifier:   A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747778812CEBF1BDE63449A4EDF2F37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 64436

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:77:88:12:ce:bf:1b:de:63:44:9a:4e:df:2f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:c7:b4:59:05:46:07:7e:19:55:9e:d9:0c:
                    7a:67:5d:ae:18:6b:b5:c2:ae:ff:25:2b:8d:83:2f:
                    b5:45:84:3f:c0:53:34:56:00:ff:a3:6c:1f:51:c5:
                    45:1b:82:38:eb:5f:a0:b7:ba:61:62:bc:9d:a6:a3:
                    74:08:67:e3:14:a6:77:09:a9:87:7f:a6:50:e9:03:
                    c6:66:49:f3:c3:10:3d:be:6b:50:43:3b:26:5b:e4:
                    d1:e9:92:23:46:a2:20:09:44:26:c9:a9:5c:fd:5e:
                    8c:95:16:58:18:df:ec:aa:67:23:77:e1:f3:f8:1a:
                    00:dd:56:72:5a:ef:92:95:e1:24:c7:6d:69:14:28:
                    92:23:62:36:15:1e:7b:be:65:af:01:f2:75:e5:04:
                    d0:92:c2:2b:f7:d2:55:b9:9c:96:18:c7:29:2c:56:
                    e2:36:5d:10:58:ec:ce:ee:b9:86:58:d1:ff:e5:32:
                    99:01:8a:04:f3:c0:35:a2:d8:6e:29:a3:fc:74:92:
                    cd:96:a1:bc:f2:87:c7:f1:9c:3b:fe:f6:17:9f:ab:
                    13:87:48:fc:21:54:1d:35:b7:59:6a:06:d7:da:1d:
                    1d:7d:d0:43:ca:4c:8a:20:34:95:77:d0:80:7f:64:
                    b5:93:1e:12:b1:e9:f3:0d:67:f3:6d:39:bb:1b:03:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64436

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:0f:65:93:bf:70:b0:51:65:5d:7d:26:58:57:e7:79:19:
         8a:8d:21:4a:c5:5e:07:d3:01:7c:a9:8f:a5:0e:44:7b:28:59:
         39:27:18:63:e5:2e:f6:45:44:9d:83:9e:3d:6f:4b:12:ef:5e:
         f3:82:f7:e4:21:e9:c3:68:fc:54:6c:db:c2:9c:a4:75:82:13:
         de:48:a6:f8:7c:e6:ff:7c:b5:8f:49:96:1d:7e:cf:1f:a2:29:
         ad:09:58:d0:38:ef:64:16:ae:02:93:c3:d0:de:71:ab:6b:25:
         c3:e6:01:84:ed:67:40:6d:fb:a7:37:12:59:3c:53:db:82:da:
         b7:0c:23:9c:23:7a:10:c9:34:65:3d:7d:dc:6b:02:f6:ef:22:
         4d:a8:94:61:9f:79:8c:da:1e:9c:96:69:78:6e:f5:a7:ab:9a:
         4b:e3:b2:03:4f:8f:24:5f:28:24:44:41:37:f8:ba:bc:67:30:
         1d:49:fe:db:bf:de:79:0d:fa:68:72:8e:f2:f8:d8:3f:41:b1:
         ff:db:5f:4d:9e:b0:26:19:3e:c5:9c:01:ca:c4:f6:4a:c4:54:
         0b:0e:a3:77:3e:fb:48:a1:23:1a:a3:59:99:d2:20:6b:f8:94:
         cc:d0:06:3c:d4:6e:50:96:91:f7:28:00:08:b9:db:61:2d:32:
         19:bf:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----