Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
File:                     sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer (raw, json)
Hash identifier:          RpesrLRaSNUxf7qxncnJByeoYiA12FSXtLRbBN7Z++U=
Subject key identifier:   B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5FFFE2CB2B8FD40853F301345E7EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208127

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:ff:fe:2c:b2:b8:fd:40:85:3f:30:13:45:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:35:3a:57:a7:7c:d0:8b:e1:d6:c8:f2:ba:
                    6e:fb:80:f7:7c:bf:30:51:31:f9:0d:da:db:1f:e4:
                    6e:09:4f:ed:a6:b9:2b:0f:78:f6:a9:9b:0a:e7:9a:
                    ba:61:3d:46:c5:1d:27:ce:e2:e5:5e:b0:17:ea:0d:
                    e4:9c:01:13:48:bc:78:6f:e8:24:bd:5f:6f:3a:63:
                    05:bf:79:d3:cc:43:d7:10:7d:10:24:7e:ec:98:87:
                    26:21:a6:60:b9:1d:e2:0a:eb:01:c1:c7:6d:4f:75:
                    37:03:ab:61:9a:a8:b9:45:a1:08:03:0e:c1:ec:69:
                    81:1a:f4:e5:72:b0:8d:de:c9:6c:98:27:33:b2:dc:
                    02:ae:4f:4a:f2:97:e6:9e:f3:52:02:a2:39:54:67:
                    1f:a9:3f:db:bd:6c:e8:49:65:03:41:4b:11:9e:10:
                    75:62:28:03:fa:80:5d:03:3d:53:90:90:00:de:ff:
                    cd:f2:b5:2f:fe:af:b0:9c:a2:55:24:1b:df:75:23:
                    4f:b1:f0:77:64:4d:0f:dc:5d:ba:b7:a8:a6:e1:33:
                    eb:b5:5c:2b:52:f3:27:3a:25:d2:16:b3:b4:50:97:
                    82:c9:91:87:1b:24:6b:a5:0e:2d:52:65:e3:15:00:
                    3f:c1:9a:00:97:cb:76:b6:d3:e9:1d:e5:df:f7:ca:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208127

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:c0:33:0c:e7:1e:f1:dc:48:ea:1f:f0:1b:b5:e1:0d:1f:
         72:33:26:6d:bd:ee:ee:04:86:68:6a:6f:3a:b5:1a:e5:f3:36:
         a5:e6:1a:82:01:a8:26:62:46:0d:cc:76:b2:e0:a4:aa:3b:b0:
         bd:50:79:cf:c2:a8:bb:71:ef:e3:57:f2:b2:f9:d1:dc:7a:eb:
         93:1b:f5:81:33:40:6e:ac:d7:34:41:16:b7:27:d8:5e:fd:81:
         fd:70:a5:83:2a:5d:f4:9b:eb:bf:d9:6d:60:01:39:93:39:6b:
         66:d9:2f:53:37:5c:61:9f:ba:6d:c5:9a:f7:a7:7d:e1:d8:32:
         3a:ec:4e:23:62:d1:3f:bb:99:fc:0f:3b:af:e1:f0:68:cb:f0:
         ae:47:2f:78:55:9f:31:ac:c9:35:74:0a:53:db:58:db:70:0c:
         cc:4a:9d:93:e1:6a:49:e6:fa:ea:ec:fa:70:72:9f:23:de:49:
         1e:79:d1:81:e8:d7:cc:15:8e:f6:5b:03:a3:b6:8f:0b:ef:96:
         37:2b:42:7d:a4:ce:20:76:d1:c4:50:da:81:a2:f7:9f:2b:a1:
         cf:5a:f6:36:25:d0:2e:e0:89:2a:79:1a:cc:6d:37:af:43:be:
         b3:f2:20:be:b0:b7:f8:91:a6:57:86:8c:3c:75:16:d0:a6:99:
         d9:fa:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----