Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.cer (raw, json)
Hash identifier:          jfFq9795EYSxiRi3tXT2SemBOeRnXsnob2jePQcBppM=
Subject key identifier:   19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421440F5D0274B3C4BDA59CD97257A3CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41633

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:0f:5d:02:74:b3:c4:bd:a5:9c:d9:72:57:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:58:88:91:fb:76:62:56:e5:8e:2d:46:8c:
                    2b:9f:c3:7d:bd:b7:20:c7:da:84:a0:66:df:2d:bd:
                    04:16:d8:c8:8b:bf:45:67:ce:41:50:a7:e4:9f:7d:
                    8c:59:4f:28:45:a3:93:87:b7:76:10:1f:eb:eb:68:
                    67:33:db:47:3d:d7:cb:02:f8:ab:ec:10:e7:31:be:
                    d8:ce:8b:a3:78:32:76:1b:93:45:8c:d0:39:27:48:
                    66:d6:4f:4a:9c:23:f7:7b:d1:09:0d:e6:74:f7:9a:
                    df:a7:a4:f4:b8:1d:16:97:87:dc:51:66:90:d2:73:
                    b3:bc:34:e9:f1:98:0f:e3:17:87:10:a4:d5:97:c1:
                    51:01:ae:f0:93:69:42:c3:a8:3a:c8:1f:70:45:ed:
                    57:d0:d6:c4:6f:06:e2:05:71:a0:0c:c3:d5:7c:91:
                    6a:f2:f2:ce:e5:37:f0:b4:bd:06:ac:1e:95:66:df:
                    9e:ea:d4:f4:26:81:bd:f8:84:97:1c:46:16:10:f7:
                    a5:5e:8e:7a:18:9a:1a:eb:4f:96:fd:30:b2:e2:1e:
                    13:1b:e1:e4:20:c7:71:0d:67:d7:de:51:da:86:e7:
                    e7:d5:78:cc:80:a3:6d:0e:16:49:f0:ae:dc:37:62:
                    61:05:ce:5b:18:79:20:e0:92:8f:88:ef:17:d7:18:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41633

    Signature Algorithm: sha256WithRSAEncryption
         a2:b8:08:db:d6:85:56:d7:ed:1a:ec:0d:f5:57:12:36:91:8f:
         bc:d4:da:e5:0b:e9:44:49:81:f5:92:41:88:05:c7:8d:11:89:
         86:44:28:73:84:12:88:18:1b:52:68:31:86:79:0f:3f:d3:ec:
         cc:0f:f2:a1:d9:c9:18:7c:de:45:9a:61:c0:8e:f1:41:a8:b0:
         f5:c3:fc:09:6a:40:8c:74:f3:30:54:a5:c2:c9:2e:44:8c:e5:
         26:50:ec:2f:38:07:c5:95:79:98:f3:31:f3:ba:09:58:c3:2c:
         18:80:22:f6:84:e1:56:0f:7d:e1:e5:a1:a8:7a:50:1c:ae:1b:
         74:81:c9:ab:30:39:c2:65:b4:ac:73:e2:52:90:58:66:ca:af:
         29:86:8c:9e:fa:5a:2b:59:14:1d:46:52:28:07:37:4e:7f:62:
         c7:76:5b:3c:a0:5c:51:18:1d:2a:d5:aa:b8:41:4a:e5:4a:ee:
         c6:0e:28:35:87:8c:50:52:34:c4:f0:92:8c:31:4e:3c:43:ff:
         1f:43:ac:96:dc:1a:22:4d:15:67:b2:f4:18:8c:c2:40:d7:d2:
         75:69:61:0a:45:74:36:e7:3a:0f:d7:69:da:fb:06:75:e3:f9:
         80:88:1e:f8:63:9c:8d:73:c1:7c:e4:3c:cc:59:e1:df:1c:58:
         9f:8c:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----