Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
File:                     x8_M1olXoPcEOajWD_PIuNkRowg.cer (raw, json)
Hash identifier:          vOOC2fiZfNOyPb7OQ7zuIcgjzKlOeGAMeK5lwlY0tHg=
Subject key identifier:   C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D652C81AADF80958E29D8283E3874E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:1368::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:52:c8:1a:ad:f8:09:58:e2:9d:82:83:e3:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:08:65:c6:d0:1f:49:76:29:d3:fd:eb:47:
                    79:6e:8e:38:03:bd:62:b5:dc:85:54:67:96:7a:15:
                    f5:34:99:93:1b:b8:ed:49:09:4f:83:2e:2d:0b:a0:
                    b6:af:3a:3d:b7:f3:43:ac:69:ad:50:a5:1c:63:59:
                    61:97:04:a6:6a:e4:12:1e:75:3d:0f:c4:17:d9:a6:
                    57:f6:18:f0:88:e4:5b:2e:67:1e:ae:63:bb:5d:c2:
                    6b:0f:dc:8b:dc:6d:fa:82:1c:04:77:41:16:22:9c:
                    f6:19:5d:f8:08:0a:e7:9c:c8:64:f0:ed:a7:39:00:
                    d5:82:1a:59:e9:12:9c:65:8b:69:29:8e:73:a9:29:
                    b9:e3:5b:d1:f0:b6:da:b2:8d:a3:f7:bf:03:d1:0f:
                    0f:e8:e9:fe:e3:0a:14:85:e4:4c:1e:2a:e4:19:b3:
                    d4:45:49:47:6a:38:6b:73:0a:83:04:47:09:f2:bc:
                    e3:5f:1d:49:73:12:66:c0:83:bb:c6:df:bb:a7:05:
                    da:f4:9f:2a:4b:28:94:34:8e:b7:24:15:07:1c:93:
                    80:ed:85:68:65:ee:44:c6:ba:52:19:d1:96:0f:19:
                    6a:ef:d8:df:56:43:f1:81:3b:2e:ac:58:89:67:79:
                    6e:89:c2:53:75:06:3c:24:d6:a3:d0:74:f3:d9:65:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1368::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:67:54:b3:4a:c1:f5:3e:69:9e:92:71:3c:5b:d3:4f:8d:92:
         be:c1:e2:6b:85:37:39:17:f0:0a:b3:4d:42:47:08:42:21:52:
         d8:86:2e:bd:68:2c:4a:2d:24:91:eb:e6:90:55:66:a8:c4:c5:
         e6:7a:3c:fc:95:ce:94:d7:e3:fb:f1:bc:1d:35:e2:73:34:18:
         59:3a:ba:80:1e:bc:e8:74:1f:d6:7d:34:9e:14:3c:61:90:77:
         de:61:8d:97:66:18:06:0b:16:35:75:bd:0d:a9:ce:10:54:3c:
         2e:a2:4b:bd:8a:b7:51:15:d7:13:b9:37:69:69:8f:fb:22:9f:
         cb:ac:87:4e:e9:c4:68:dd:5b:ab:2c:eb:dd:91:e6:09:3e:8e:
         df:9b:d4:e5:c7:7d:47:b7:6e:13:98:3f:28:37:2c:c8:2c:f7:
         c8:d1:cb:4e:94:dc:72:bf:c7:23:52:14:53:65:f0:17:ed:fe:
         5d:5b:ff:e1:7e:df:43:6c:1b:98:cb:27:00:41:9c:22:10:dd:
         6f:df:6e:6e:43:bb:89:5a:67:32:de:f3:9d:fc:48:6e:6f:f7:
         37:e3:35:fc:61:67:37:c6:0b:5d:25:ba:e1:a9:99:4e:e6:19:
         ff:51:16:ee:5d:6e:e2:58:07:c6:17:68:a8:a6:4a:66:d8:2b:
         b8:37:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----