Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
File:                     CYYD8NRKkgRDOKLK3xiegQHDv18.cer (raw, json)
Hash identifier:          y0Eukar9CiM27eAlkCR+IydfSn3E9GezfUyzjD8uNaA=
Subject key identifier:   09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BC3376F921CA2FD03F7DA4A4F8276
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51201

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:c3:37:6f:92:1c:a2:fd:03:f7:da:4a:4f:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:f3:8a:fa:e9:fe:35:bd:5e:ba:9b:43:5e:
                    fc:a6:27:5b:8b:6a:be:f2:89:e2:5b:a1:bd:6b:88:
                    db:53:97:41:93:8f:a0:95:f6:07:ff:fa:6c:71:a0:
                    20:6a:cb:ba:a0:09:50:d3:18:be:06:3a:8e:c2:fe:
                    ea:6d:d8:e6:69:0c:e7:a7:ad:a9:bf:da:ac:7c:41:
                    a1:33:58:06:2a:0d:8f:80:53:98:62:cd:14:10:76:
                    18:4f:2d:e8:78:6e:8b:ba:6b:d6:87:6e:83:ab:89:
                    6e:ea:c3:fa:a2:f0:19:f7:bb:91:64:84:87:65:72:
                    88:31:c8:c2:bc:12:17:17:5d:1e:23:c7:21:c1:13:
                    9c:57:d4:27:ec:53:0c:99:a9:28:d2:af:a2:dc:f3:
                    62:56:8d:5e:0b:3b:d3:06:a4:f3:5b:30:9b:e4:c8:
                    27:3e:99:fe:f0:10:4c:17:6e:5e:f5:d1:cc:87:f1:
                    54:42:73:fc:0b:8b:c5:2a:84:c3:10:2d:16:02:73:
                    ef:db:be:02:49:9e:1d:6d:81:34:3b:5d:d0:d8:bb:
                    66:4e:b2:87:da:c5:05:6f:02:3b:4b:2f:c6:8b:76:
                    4a:75:07:67:9c:8c:ce:3f:21:03:ad:9d:c7:79:57:
                    1e:cb:e2:f4:9b:5b:2b:f5:5f:d9:e8:5a:cd:7f:b8:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51201

    Signature Algorithm: sha256WithRSAEncryption
         13:45:12:bd:de:0c:21:f6:53:89:ac:e2:0f:bc:b7:d2:bc:a7:
         a8:a5:8c:27:b1:da:4f:83:da:7e:93:98:cc:9d:30:86:ea:45:
         b0:e8:a8:fe:0d:d0:88:15:1e:fc:df:e3:0a:77:fb:c0:0f:77:
         4e:c3:3a:cb:22:b0:be:69:c1:17:c4:97:22:e9:9e:d7:78:8b:
         32:ca:57:5c:de:7f:25:57:c4:e3:0c:53:25:2e:ee:96:63:29:
         6c:df:77:bd:aa:32:93:86:df:02:2e:3c:18:45:55:e4:de:63:
         87:29:9d:55:8b:c3:fd:85:a8:a3:12:2d:79:3c:e0:f9:86:44:
         a9:ac:ef:c2:2d:08:c8:37:1a:6d:e4:6e:0b:22:41:10:6a:1f:
         f1:16:0a:25:cd:d8:86:b5:e0:bb:fb:b4:10:f5:e0:9b:7d:f1:
         4c:ac:75:12:86:d6:95:8e:af:70:20:a9:01:f8:9b:ae:2b:c1:
         46:36:3d:bb:91:c2:ac:3f:86:f8:33:90:21:56:d1:7c:f7:f3:
         54:85:ca:85:fc:fe:75:ca:94:83:bf:b4:7b:58:4c:e7:66:e0:
         a0:68:75:6f:fc:1c:4d:03:fd:ee:55:3a:a4:3d:bd:6d:5f:78:
         11:77:be:f3:da:86:b3:b2:b1:e7:97:f9:43:59:5a:6b:60:56:
         6c:38:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----