Right now, we maintain the Red Hat CA cert file manually in the AIPCC builder repository on Gitlab.

It'd be nice to automate that task by pulling it directly from the Red Hat server, and verify the content is correct (SHA, etc).

That way we wouldn't have to think about it anymore and we'd always get the latest one.