Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer
File:                     soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.cer (raw, json)
Hash identifier:          Q8mSYAZYBhjJRueFfWlMhQYh8ufVNGxVvut50qvu69A=
Subject key identifier:   B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194222005ACDE229486684163EE4370E051
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213073

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:05:ac:de:22:94:86:68:41:63:ee:43:70:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b284cdf0507443e16e509d57a229e914f73566a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:3a:72:05:1f:3c:7f:f4:ee:11:22:a2:6c:
                    e6:ff:6a:72:b7:53:a2:f4:80:25:f3:f2:1b:0d:59:
                    87:87:cd:d0:2b:00:fa:40:5b:0b:5b:ce:d2:41:cc:
                    e7:35:13:cb:fe:62:e8:62:09:a4:06:9e:8c:97:59:
                    7b:70:ab:a3:5b:df:6e:94:91:99:b5:03:f5:19:bd:
                    f7:10:4b:5e:22:66:5d:90:ee:47:a5:33:04:1c:d3:
                    78:b8:c8:b8:95:cf:d4:84:02:f7:1a:b1:b4:67:59:
                    46:93:8f:d4:3e:f6:59:2d:ca:2a:6a:ac:5b:e3:5a:
                    bf:dc:f5:e2:51:c9:bc:6e:4e:0e:f1:6a:69:4e:f9:
                    51:5b:4d:c6:7e:3e:f2:1e:ca:76:16:66:04:95:20:
                    2d:b6:db:db:fe:3b:64:54:a7:d9:0a:33:7e:17:56:
                    c9:33:a6:2d:b1:58:6c:18:c1:ee:9c:2a:3d:02:aa:
                    78:e5:e1:16:be:17:b1:3c:cb:7d:9f:5d:88:9e:b2:
                    e0:cd:d4:d4:d9:e3:f9:cc:4f:1a:e7:8d:97:e1:a2:
                    2d:c4:34:4c:0f:16:83:be:1b:f5:a9:be:44:b1:73:
                    d2:a1:c9:c1:f2:77:06:d4:73:2f:e2:0e:90:0d:b6:
                    3a:b6:35:97:56:0c:eb:49:8b:f8:aa:c8:fd:d8:eb:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:84:CD:F0:50:74:43:E1:6E:50:9D:57:A2:29:E9:14:F7:35:66:A4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a3828d-0f51-4da0-8433-df56a241098f/1/soTN8FB0Q-FuUJ1XoinpFPc1ZqQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213073

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:10:0f:35:17:51:06:11:02:bb:f2:2d:d6:36:ab:1e:01:
         21:b4:23:b5:92:35:cc:d5:a5:89:54:f4:47:4f:8e:85:41:ef:
         11:8b:75:2b:89:48:16:e0:57:b0:5a:ac:56:4d:c8:ba:b5:1c:
         5d:ee:46:88:e8:a3:56:f5:d6:47:42:67:18:15:45:75:91:68:
         54:31:9d:3d:54:ce:57:2f:b0:8f:bd:9e:eb:76:dc:e8:fd:f4:
         bb:0a:42:5d:c7:3b:40:f1:10:64:e6:a0:f4:66:00:9b:e6:1f:
         46:50:ee:62:22:56:e2:8b:25:26:48:71:34:a1:15:63:05:a0:
         af:56:6a:d3:1e:b0:16:dc:99:e9:0b:20:fd:46:9f:a5:6b:c7:
         33:4e:6b:b4:bc:62:fe:c1:90:f3:59:30:15:2a:dc:e8:f6:77:
         6a:c2:9d:9b:d2:f7:50:e2:fb:09:46:d2:2c:1c:37:e0:d7:1c:
         d0:cf:27:2f:18:c1:1c:c5:9f:c9:c0:a9:bf:25:45:23:58:ff:
         70:68:03:e3:a3:1e:94:56:99:7f:3a:57:0b:01:f9:a1:16:38:
         87:e5:85:f7:65:5d:af:2f:9b:b2:55:4e:11:6f:50:5f:f4:85:
         af:d9:93:49:94:c1:71:55:7c:67:00:62:75:4c:b8:77:6a:08:
         71:f2:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----