Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
File:                     xGtE1wczJKsoQWNn3gQPDkYzSNE.cer (raw, json)
Hash identifier:          5Ti7KNaGDMI2018pX15cdVDsAp6hnMyCqWD2rSCaxiE=
Subject key identifier:   C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244480F764AF4CD7D3A25E4AF6148DA4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210168

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:80:f7:64:af:4c:d7:d3:a2:5e:4a:f6:14:8d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c46b44d7073324ab28416367de040f0e463348d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:3c:a3:a4:91:99:cc:96:ea:d8:e0:21:e5:
                    c8:c2:58:69:5c:90:2f:5d:d1:06:db:b4:73:68:15:
                    00:f5:25:3c:aa:79:41:30:1c:10:98:0b:4a:70:66:
                    a9:0a:4f:1f:52:ae:74:e0:b6:67:6f:d3:f3:87:14:
                    93:02:e0:f9:4a:81:7f:9a:3d:5c:0c:c9:5f:90:47:
                    03:2a:c6:2e:68:90:ea:23:02:9b:a1:e8:70:66:28:
                    07:46:da:fc:36:51:7b:c9:8e:2f:bd:fe:b3:6f:16:
                    a4:73:ef:c2:13:ad:79:ee:49:13:30:e9:52:f5:d6:
                    b2:fc:9e:5d:3b:13:f0:f3:43:3b:f6:4a:b6:5a:63:
                    97:b4:74:37:6b:7b:db:a2:40:72:b5:fa:e5:48:91:
                    37:23:56:f7:ef:7d:f0:63:b3:8b:bc:cf:92:ef:d6:
                    ba:54:7a:de:3e:4c:9c:3e:95:5f:0d:e3:7f:0e:71:
                    2e:0b:62:bf:b1:8c:c1:a6:15:70:c5:e3:f4:ca:da:
                    04:c3:e0:a2:65:3c:2b:e9:ea:43:05:a8:9e:32:cb:
                    95:b0:6a:0c:5c:26:29:fc:be:dd:53:1c:bb:c3:4f:
                    bb:b8:9c:14:78:d3:61:f1:d4:40:65:70:5c:cf:08:
                    8f:58:53:ee:17:c2:e2:a0:b2:32:4f:b5:a0:36:13:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210168

    Signature Algorithm: sha256WithRSAEncryption
         86:75:96:ca:21:18:2b:b9:fc:79:30:6e:76:13:92:89:d3:fb:
         fe:88:93:1e:f4:b8:f5:36:a8:75:3e:a0:be:ea:c8:52:0f:e7:
         8e:b6:f7:99:7f:e9:92:30:9f:9d:1d:11:31:27:f2:eb:e5:42:
         8c:99:76:e4:50:9b:09:63:c5:4a:e3:3a:cc:3b:9c:fb:7f:51:
         bf:6b:cd:f9:71:35:bd:c9:ce:f4:8b:3b:c2:26:2a:48:a0:d9:
         80:ec:a5:91:ca:dc:fc:81:a3:ba:20:5d:45:9d:f2:c1:ab:69:
         60:8a:56:47:b1:fc:d0:06:5b:b3:96:13:82:cc:46:ac:e6:44:
         d4:f5:6a:99:b7:44:1d:dc:cc:75:bd:1a:5e:c2:ef:72:d7:99:
         da:37:d9:66:3b:f9:69:95:bc:a4:89:88:e2:af:a0:72:2f:d8:
         af:fd:43:7b:3b:b5:eb:02:bc:ea:36:60:a2:02:5b:6c:1d:b9:
         19:a9:e3:a7:6b:c1:9b:c1:37:88:7e:7a:54:65:d4:9b:89:03:
         6d:62:87:e7:07:2b:d7:ea:f4:67:37:5b:55:b3:99:fa:3c:d5:
         8c:9e:c4:40:ea:76:ca:5c:d5:0c:f2:7f:1c:14:93:6f:88:ee:
         f2:61:49:85:11:89:9b:f0:19:8b:87:64:c8:ac:33:73:6d:8f:
         cb:0f:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----