Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
File:                     w6cK1_MmhXM1l8Zj4CziijMG-SM.cer (raw, json)
Hash identifier:          9UzFO4stlLIlVv4l/pQ1+6PBGjCdsv+/BAcseiYX8nM=
Subject key identifier:   C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019504ACD8B7FF142875BE03D718BE448043
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 14 Feb 2025 13:36:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59449
                          AS: 198923
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:04:ac:d8:b7:ff:14:28:75:be:03:d7:18:be:44:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 14 13:36:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3a70ad7f32685733597c663e02ce28a3306f923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:77:9d:66:15:3f:0e:ea:86:1f:d1:a1:20:
                    d6:00:47:6d:aa:0c:e5:3e:0b:55:12:f5:94:45:ca:
                    a1:39:96:26:44:d4:8e:99:9e:e5:6e:41:ed:83:fb:
                    f7:2a:e8:b3:5e:fb:0d:f5:98:9a:2b:1a:55:89:f5:
                    d9:25:99:ff:11:7f:ca:ce:82:b2:c1:6e:3d:c2:eb:
                    1d:8f:c2:4a:ca:95:45:41:6e:ac:4c:2c:03:95:e1:
                    c4:02:e6:b9:24:bf:3c:54:4a:43:40:9d:fd:84:4f:
                    46:65:0d:33:3a:34:5c:9d:32:f3:38:1b:9b:df:dd:
                    cc:93:d9:2a:84:50:a3:83:ee:63:34:b5:71:a6:8d:
                    86:bc:b5:c4:7a:01:7c:59:6b:6c:8e:88:dd:14:04:
                    fa:0c:ad:45:af:18:51:f3:fd:51:21:e0:10:72:93:
                    26:de:7d:5a:32:96:7a:7c:d7:79:ff:12:12:7d:1d:
                    9a:e1:cf:27:07:98:1a:4b:35:5c:bc:de:b0:c0:5f:
                    ae:a7:ae:fd:90:fc:5c:a3:3c:80:71:c4:db:2c:a1:
                    d8:d1:6b:d0:d8:05:60:e7:df:23:35:66:67:b1:36:
                    d3:b5:75:83:b9:df:f0:2a:2b:96:37:42:85:e4:da:
                    c9:80:8f:b8:47:bb:2e:0a:9d:0b:07:b5:40:84:59:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59449
                  198923

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:fe:89:98:f9:bb:19:0c:ea:37:54:42:cd:64:79:a0:7a:
         70:f0:f6:4f:4b:f9:41:f0:ac:7d:fd:57:5d:68:72:5f:d6:1e:
         f3:f0:7b:f6:8e:8a:da:a6:df:c6:d2:36:a5:88:e3:1e:7d:69:
         d1:68:fc:ed:68:1b:bd:bd:8a:ef:f5:df:39:3e:77:89:f3:7b:
         0c:f9:d6:93:0c:7d:6b:cb:62:77:18:1d:e5:76:71:b7:47:dd:
         27:eb:43:e6:d3:13:51:66:84:bc:54:b7:dd:77:f5:4a:53:77:
         ec:74:46:32:67:3e:4e:55:5c:94:0a:1e:07:f2:7d:13:f9:ee:
         1d:d7:4d:a4:ef:26:2b:55:6a:26:b2:ed:85:76:c9:81:29:33:
         ec:ce:1e:b6:94:8c:b9:7f:47:dd:20:3d:88:0c:bc:e4:42:fb:
         3a:cc:b2:36:ad:17:94:0d:2f:f2:6d:5f:4a:c9:69:44:42:96:
         92:fe:e0:3c:26:47:15:05:88:bb:58:24:f3:10:47:78:88:48:
         35:60:65:8c:15:07:a1:cb:14:6c:de:a1:eb:94:e1:8a:cf:83:
         a6:cd:83:af:6d:fd:e4:95:05:2e:43:a3:8f:4c:81:c9:61:84:
         80:80:11:20:6d:0e:d3:2c:c5:c3:ce:c0:eb:19:24:9b:d0:87:
         a1:15:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----