Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.cer (raw, json)
Hash identifier:          wDGrvABOMwtedUdB1QXpkIR4Aa1qy1FfZzEE2NK18NM=
Subject key identifier:   F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA1A036B69A699A2921545923115E7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35484

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:1a:03:6b:69:a6:99:a2:92:15:45:92:31:15:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:89:c0:c1:fa:f9:6e:bf:53:e8:26:d7:7c:
                    a1:81:3b:f5:81:dd:6c:d0:ad:60:31:34:23:45:47:
                    7c:cd:91:30:47:fb:2c:58:ac:54:34:d9:df:53:3f:
                    3b:39:39:45:05:56:59:84:ed:17:99:86:53:6e:57:
                    66:b4:40:8e:b9:f6:5f:12:91:e5:ee:41:99:0a:56:
                    c9:4e:4c:39:2d:c8:e1:fb:32:75:92:fb:5a:e6:61:
                    dc:7a:60:d2:ca:63:de:04:49:96:8f:67:92:b5:18:
                    5f:b1:26:2c:62:b8:e4:5b:f6:54:dc:e8:29:16:c6:
                    02:c9:80:bf:64:09:c8:f1:96:d8:91:8f:f8:21:38:
                    ea:57:94:b5:47:e0:39:19:6f:cf:4f:15:c3:f0:fd:
                    b4:be:51:16:62:8b:ad:ef:45:7f:31:b7:26:68:ae:
                    b5:4e:de:73:54:3e:3f:22:d1:7a:c4:c4:8c:2b:42:
                    01:03:b1:89:9b:cc:23:d9:69:0f:de:7f:bf:db:db:
                    27:91:63:57:5d:29:5d:0b:b8:ce:0c:04:2a:45:19:
                    32:99:8f:60:df:2c:61:22:70:7b:fe:bc:da:23:7f:
                    23:16:84:99:cb:21:11:f0:83:48:d0:a1:d4:f9:68:
                    83:f7:04:3f:df:43:a8:74:e2:e6:d7:d2:c8:cd:5d:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35484

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:0b:8c:ab:a8:94:1c:da:f1:89:f4:f0:da:6c:f4:48:2c:
         ba:29:fd:fc:7a:74:f6:7e:8d:cf:c6:63:0c:c9:15:14:92:25:
         e7:2a:28:c5:fd:86:a8:4f:6b:7b:0f:5e:73:70:e9:4c:3b:ef:
         63:10:62:2b:8c:2d:5d:7b:13:27:fd:ac:e9:09:8f:ee:b7:d0:
         42:4e:38:06:88:81:5b:4f:8f:89:f5:7c:76:f0:e9:58:29:21:
         a1:aa:e8:bb:3d:1f:50:11:78:0c:82:f0:bd:a5:34:14:cd:ca:
         9f:0c:f2:ed:61:c6:6a:5c:cf:09:32:01:83:55:f8:6c:84:da:
         e4:78:85:a1:65:cc:d3:f1:bb:a0:bc:25:c7:bc:b1:ac:2d:ed:
         2b:a9:4f:21:20:8f:1e:77:51:ee:0d:14:63:2d:de:17:88:2a:
         ad:04:dc:85:20:f9:63:5b:e3:25:a1:8f:63:2e:73:aa:19:10:
         86:8f:e7:7a:e0:4b:3e:35:f6:ac:4c:2c:e7:4a:ba:2e:f4:c1:
         d5:ba:c0:fd:e2:aa:1f:a6:73:96:84:06:0d:c6:94:da:82:31:
         1e:43:64:2d:17:ca:70:bd:f5:b2:e8:5a:b0:02:ae:68:1f:87:
         f9:c0:0d:e3:41:3f:55:f6:e9:bc:78:29:ee:e8:80:32:ac:8a:
         cc:6a:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----