Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
File:                     xIzPWOSy4trdSoSDPAZ87iuXRek.cer (raw, json)
Hash identifier:          +CGq2RUomve3zY3SIz/uIg5hpvjM55Vn0vBK/ONAfAQ=
Subject key identifier:   C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B19F477E6DBDCBB1524FDE138F2DA9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198209

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:9f:47:7e:6d:bd:cb:b1:52:4f:de:13:8f:2d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:d6:88:03:07:ee:9d:57:51:cb:f6:36:e5:
                    91:43:c1:a7:81:12:4f:ff:85:be:bc:de:b4:48:e2:
                    0e:83:b1:7d:26:af:79:f7:17:6b:d2:df:1c:3b:55:
                    95:8a:dc:d6:0e:19:0f:8a:b6:f5:9b:c0:27:20:f9:
                    b5:52:7a:ab:7d:f3:c7:a5:91:49:11:ef:b8:6e:e4:
                    89:24:95:68:9b:7c:98:6f:b4:ad:e6:c8:c6:46:06:
                    37:52:76:36:d1:9a:01:85:d2:a7:2f:95:fa:35:b0:
                    e7:e6:a0:61:7a:cc:fe:78:54:3f:9f:de:5e:16:fd:
                    4c:9e:ec:e8:a1:4e:11:4e:d3:de:c1:15:46:c6:0f:
                    dd:3f:3c:6c:9e:79:4c:e9:cf:5a:4d:1c:53:0e:82:
                    c7:16:46:2f:d4:2a:42:d3:35:a7:4e:82:07:c8:9a:
                    66:f6:a1:11:58:15:d4:f0:71:b7:d9:fb:18:57:95:
                    10:5e:4c:a0:51:b6:4c:a0:40:81:ba:1d:b8:15:ed:
                    37:07:15:f9:3a:8f:26:0e:eb:a6:53:bf:59:29:e7:
                    04:09:62:86:db:58:58:2b:88:8e:3b:05:bb:ce:06:
                    4f:9b:02:c5:b8:84:65:1b:e3:44:c5:4c:8e:05:8d:
                    d0:e9:03:25:99:8f:b8:18:f4:d8:7a:2f:9c:fe:b1:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198209

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:9f:05:7e:bc:8e:92:c7:c1:61:4b:4e:9d:aa:cb:3f:d4:
         02:ae:5b:c1:a8:8e:d6:96:f2:cc:75:74:9f:47:fe:a2:9a:37:
         41:54:99:77:76:79:3f:19:04:27:a4:71:b3:3f:0d:99:fe:d5:
         7b:87:ae:07:ea:ec:a0:78:e1:e9:67:6d:2e:d1:1e:ff:80:45:
         37:b6:3d:2d:8d:b1:72:d6:da:de:a0:7b:47:60:9a:12:7e:6a:
         f1:83:60:db:a5:d4:a8:fc:59:05:4f:44:cd:0f:20:8e:b4:38:
         0c:90:72:98:9a:b0:c8:ad:b4:7d:40:fc:f6:f9:32:87:3e:ed:
         16:17:5a:8f:89:32:84:68:87:0d:57:2a:55:49:bf:24:45:48:
         b8:c5:89:26:3b:89:4f:48:b0:b2:73:05:af:ab:5a:c9:41:44:
         20:63:bd:38:4c:45:54:71:e8:41:73:86:ea:1d:0d:9e:7b:37:
         d2:bc:24:4d:bf:b7:17:7c:d3:df:80:81:ca:e6:1d:25:54:c2:
         77:fb:8c:34:3c:a1:c6:cd:43:f1:6e:e8:f4:97:c3:7b:a8:bf:
         dc:c2:3f:a1:65:21:33:68:9d:bd:87:1c:50:ef:8d:fa:64:f7:
         d1:7a:0e:e8:78:7d:f0:8b:94:c9:89:4f:51:73:2c:d1:d0:61:
         c2:3d:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----