Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
File:                     u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer (raw, json)
Hash identifier:          HRSbeBx+1c69XOKa/GDS1nFc9lAmexEMkS0RowkYynQ=
Subject key identifier:   BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B4033F6F52137C78575537E501E87F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210271

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b4:03:3f:6f:52:13:7c:78:57:55:37:e5:01:e8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bc:6c:cd:9a:95:af:8e:c5:69:72:19:56:91:
                    63:d2:e2:32:e8:91:a0:7a:6b:ae:9c:61:7a:ee:63:
                    0a:a4:ad:74:09:14:9d:e0:60:ce:6d:02:9b:55:cc:
                    aa:19:a8:3d:fb:a5:79:b0:4c:50:b5:fe:29:15:6a:
                    8e:64:56:2b:8e:cd:b9:ff:cc:92:29:92:27:45:f9:
                    7e:df:8a:67:f3:c2:f3:d7:04:2e:28:37:14:be:a4:
                    4e:97:74:a6:50:90:e1:da:aa:d6:b5:b9:1e:42:ba:
                    8c:21:16:3f:73:e2:88:3f:c0:c2:9e:3b:eb:d8:89:
                    c2:de:08:dd:7a:ea:44:f6:e8:2f:13:84:75:67:4a:
                    72:83:81:94:be:42:42:9d:16:56:3c:a3:ed:bc:00:
                    f1:c9:59:7a:35:a2:c9:c7:ed:c3:72:88:48:8c:5e:
                    54:fb:2e:34:de:7e:40:5f:09:8b:65:25:c3:75:12:
                    4b:87:44:cc:35:82:bd:e2:9f:f3:8b:2f:65:bd:d6:
                    f4:43:85:af:d3:a9:1b:54:0a:25:2d:4d:ad:2f:1b:
                    2d:f9:7d:37:3e:6d:e3:3c:e9:c4:4b:0e:2d:8c:c3:
                    37:fe:f3:d2:47:6a:a0:e3:10:e9:aa:80:77:a0:2d:
                    ec:bb:a5:a4:0f:9b:af:21:d0:aa:6a:9e:6a:90:d9:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210271

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:7f:ae:24:08:b1:80:70:20:94:a8:7d:ba:48:55:b0:6f:
         70:3f:35:7b:08:ed:26:bb:bf:d1:6f:44:7e:f8:63:3d:88:62:
         ad:2f:22:6b:0e:ad:fd:b1:10:f9:ee:d9:b2:5a:9a:c2:8b:c6:
         e7:70:3e:30:a6:51:85:38:b0:c0:c7:8b:30:e7:60:57:a8:d3:
         b2:6d:ec:f0:a2:6a:26:0f:77:f4:cb:7c:99:5c:bd:0e:bb:69:
         6e:fe:7c:93:f8:c5:f3:fe:fd:73:57:af:6e:bf:3d:b7:30:5d:
         38:2f:18:3c:83:03:50:d2:76:cf:8f:91:83:08:1f:78:df:47:
         50:9f:3e:ab:9d:80:31:de:d4:a0:02:e4:9e:33:d9:22:38:da:
         d9:81:f7:ff:7e:84:44:b9:cf:71:5b:e5:6b:1d:1e:84:69:6b:
         a5:f3:4a:9e:ba:29:46:71:ef:3e:ee:6a:84:b8:c4:2a:06:bf:
         49:fb:8d:25:09:9a:41:2c:b6:06:be:4e:86:ea:f7:0e:00:88:
         56:f0:1f:41:8f:0c:a7:5f:a5:50:97:a7:c1:2e:50:c0:9c:4c:
         6d:35:8a:55:bb:d2:20:40:e7:8d:73:de:df:67:ca:7a:fa:d5:
         79:30:10:79:cb:07:cc:d5:a8:b3:eb:16:f2:bd:e3:c8:40:d2:
         a3:52:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----