Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
File:                     zQwDKJL2la9ME_sKyoBD0Xsbl78.cer (raw, json)
Hash identifier:          +dWfUsgoUGr0pwJPqVmJQtTyHAnROjKyUSfKcJzsEKA=
Subject key identifier:   CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194EEFFD852310BB795C0473409C7942F05
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 10 Feb 2025 08:35:32 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200010

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ee:ff:d8:52:31:0b:b7:95:c0:47:34:09:c7:94:2f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 10 08:35:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d3:c0:a3:47:2c:02:f4:fc:a3:fa:aa:7b:5f:
                    78:cd:2f:c1:8b:b7:00:c7:da:1d:96:7a:98:14:d6:
                    3f:1c:ac:bc:6c:f1:a3:bd:55:86:d3:d4:3f:e7:70:
                    d1:56:16:4d:28:6c:9f:5b:cf:9e:49:ca:d8:74:ba:
                    bb:87:12:94:45:e1:26:10:c9:cc:9b:88:45:a0:22:
                    d4:59:90:69:48:b0:b1:f6:d9:51:d8:ac:79:6a:d3:
                    71:09:e2:e9:29:c2:18:34:c7:24:cf:ef:4c:b3:c8:
                    50:f2:6e:73:54:5c:9f:42:7b:73:fc:cd:9e:1b:f3:
                    93:e9:be:e9:94:61:58:f3:f5:83:f4:54:70:7e:38:
                    f2:85:5e:cd:70:3e:1c:be:88:6d:61:7d:d7:39:2d:
                    86:b8:dd:9d:a5:fe:05:c9:62:2e:fd:d7:c2:71:65:
                    c4:e1:07:cd:72:42:48:dc:23:39:c7:0b:f0:f2:39:
                    35:59:3f:1f:9e:da:7e:d2:c9:42:9f:5c:9e:51:80:
                    19:24:ce:49:ab:bb:04:0c:34:57:8f:56:62:1b:d4:
                    20:37:d5:9f:92:fd:19:3a:d1:bc:27:5c:be:ef:5b:
                    77:aa:87:84:01:04:7a:8b:e6:a3:45:47:64:5a:79:
                    88:78:09:82:21:7a:05:94:69:c1:a0:4d:bd:06:99:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200010

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:b4:12:2d:92:83:ce:10:5e:08:6f:86:c8:cf:42:32:c0:
         76:68:11:58:be:a4:82:3f:81:a3:34:0d:e2:79:a9:84:12:d8:
         d4:3f:84:a8:29:41:81:af:13:6b:e7:c1:31:71:65:fd:ef:8e:
         ce:85:34:b1:60:ef:2a:17:e8:86:1b:5f:98:97:7b:76:28:6c:
         ee:38:06:14:63:34:b3:4f:2f:7b:14:53:47:2b:80:40:dc:7c:
         61:8e:4d:24:c6:6b:8d:38:66:f8:9b:e9:09:cb:76:ba:37:1a:
         2a:f2:75:14:a9:c6:f5:93:77:71:c3:53:4f:9e:a2:44:7d:70:
         56:99:8d:46:23:51:4d:5f:05:01:79:a5:96:13:1f:07:c1:12:
         03:f8:3e:00:0d:26:ae:1b:77:d5:0b:0f:9f:2d:04:9c:6c:af:
         6a:3c:cb:f3:17:92:5e:ea:d2:c8:c3:11:dc:9b:e8:88:ce:2f:
         b6:14:23:3f:f1:f6:b5:ca:98:65:c6:01:c8:1e:23:e5:0d:b9:
         24:00:41:e4:a0:69:fe:7b:c6:64:fa:83:02:b4:7c:8b:6c:92:
         e5:63:8e:b4:c1:66:f4:93:ed:28:be:15:cd:48:d9:b1:42:20:
         01:a3:cc:dd:17:2d:aa:ad:d5:d9:05:e6:06:a4:fd:fe:48:e6:
         2a:02:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----