Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
File:                     tw22gGmMiscKfLfKYHVB5VQkkxc.cer (raw, json)
Hash identifier:          gxy0eFuMGDW3ffO06nto5YmrTOGYgWlc8GqX1lFETns=
Subject key identifier:   B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5CEF8DBD78B23E6574DFE591B5FD4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
caRepository:             rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/
Notify URL:               https://rpki.as207960.net/rrdp/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209245

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:ce:f8:db:d7:8b:23:e6:57:4d:fe:59:1b:5f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:58:fc:8a:30:cb:3e:b8:44:59:94:ff:d9:
                    24:46:2e:30:89:d0:ee:1e:a7:86:52:22:c4:fc:63:
                    ec:32:9b:94:ea:6d:55:c4:19:ae:84:69:c1:ca:2b:
                    13:2c:c8:2d:2c:32:99:8e:2e:5e:ae:48:62:07:4c:
                    d0:54:7d:9d:03:d7:85:7c:5e:60:c1:8d:1a:69:d0:
                    f5:11:50:be:a2:79:ef:d0:9c:85:40:f2:6b:89:e3:
                    eb:09:57:00:36:da:1a:c7:43:e2:7f:ae:93:0f:0c:
                    9a:5d:ce:6b:82:47:fd:1b:10:b8:8a:74:2d:80:53:
                    5d:64:55:c5:f9:d4:96:c3:3e:7f:fc:c5:54:5e:f0:
                    4c:18:e8:fb:02:01:83:e5:9c:31:e4:3c:3c:11:90:
                    40:84:5e:82:1d:7b:b2:78:62:13:4e:e0:2e:2c:64:
                    15:a2:b6:9a:9f:ec:d0:76:71:28:47:f6:96:8d:92:
                    52:cf:0d:e0:13:0c:2a:94:0b:35:7a:f8:47:1c:da:
                    d9:e7:c0:c3:0c:86:d9:37:7a:e3:b4:25:d0:c3:c8:
                    73:76:5b:4f:2c:7d:92:b6:68:55:c8:04:e2:65:29:
                    7f:76:8d:d5:27:4d:f8:6c:e1:f5:69:43:f3:ab:ca:
                    0e:f7:ea:8a:ed:5e:09:03:2c:2d:87:63:10:39:f1:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/
                RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209245

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:ed:0d:2d:1a:c0:ac:16:60:10:fb:31:14:0f:9d:e4:97:
         8e:10:af:e6:40:96:df:c3:25:3d:a7:a0:46:09:31:ab:54:57:
         69:69:94:49:9c:0d:3a:a3:4b:24:1f:44:ab:a9:d0:ce:c7:7d:
         7b:29:28:bc:5f:b8:b4:8e:97:42:41:b8:2a:65:29:db:16:bc:
         c6:37:52:85:d6:91:cc:e7:7d:7e:06:3e:f0:69:d9:a3:32:15:
         65:a6:cd:28:c3:b9:f4:80:fd:17:d5:08:5d:c9:8b:e1:f9:0f:
         2a:1f:f2:d8:33:95:e3:e3:36:92:90:dc:56:93:8a:40:52:10:
         1f:ea:99:33:79:fc:47:1a:0c:bd:3c:21:19:5a:31:38:09:a5:
         5a:ca:34:83:66:0d:59:6b:e7:ef:b4:39:9b:c6:f8:8b:00:e8:
         22:e5:3b:62:6c:76:e6:86:24:7f:81:42:38:6a:cc:74:1f:8b:
         f3:16:38:4f:b6:55:d6:61:ed:ae:6d:dc:47:c2:0b:5f:2c:32:
         e7:5c:bc:c5:3e:80:6a:a4:cc:02:e7:27:c8:ce:58:f3:54:eb:
         64:77:88:85:e6:d3:2e:20:f5:34:0c:52:5d:8d:92:33:c1:1b:
         a0:0f:2c:55:f1:c6:fe:d6:dc:2b:e4:e9:74:3c:fd:08:02:a1:
         50:53:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----