Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
File:                     GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer (raw, json)
Hash identifier:          ssv98vXX033yL12D11irdIkK2hbVXDPFpXOHdImVp6Q=
Subject key identifier:   19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B17564AFF2427DF99B5626B390FA86
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198978

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:75:64:af:f2:42:7d:f9:9b:56:26:b3:90:fa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:df:5e:01:bb:ce:fd:6e:58:fa:31:7c:ca:
                    e9:b6:d3:cc:8e:82:b0:ad:2e:a7:bd:33:28:2a:64:
                    e1:35:5e:ed:7d:fe:26:64:49:d1:43:e5:37:c3:81:
                    0f:ac:cb:fc:08:5b:28:5c:69:0b:dd:19:4e:3e:2c:
                    72:e6:52:c1:e4:fc:8d:f1:88:bf:00:47:ca:4b:86:
                    ab:77:9b:6b:be:0a:88:a4:c5:01:0c:9d:72:ab:f1:
                    7c:34:66:a8:c0:e6:37:0b:01:3c:33:72:23:ca:e7:
                    c3:a5:47:64:24:38:85:7d:6f:20:96:82:aa:7f:6a:
                    af:fe:aa:e4:59:5d:c0:e4:91:2a:eb:f9:e4:66:ee:
                    2c:6c:9f:7f:3b:ae:89:c6:34:2f:f6:6a:38:8d:1a:
                    13:f4:5a:1f:5f:24:8a:0f:09:34:19:ba:08:4d:ac:
                    88:f1:1a:bc:eb:55:63:21:0c:f9:0a:80:26:58:06:
                    e1:2f:56:74:7b:35:1e:d7:ed:db:28:83:e5:0c:6e:
                    9d:e2:d5:f7:82:a0:e3:87:f6:93:2e:81:92:70:90:
                    7b:1e:7e:bb:f5:d0:0d:5c:f2:49:56:24:d7:3b:00:
                    97:17:d4:29:3b:36:45:a4:99:5a:4b:a0:3b:e8:67:
                    c1:40:28:00:c3:a3:75:a3:95:36:d3:a6:4a:14:1d:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198978

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:e6:bd:60:29:19:bb:37:91:4b:f8:c6:53:0f:d3:8d:bc:
         1e:a5:7c:ba:14:00:7f:1c:16:20:c7:ed:07:b3:54:d5:20:35:
         fb:b0:5a:20:79:a0:61:0c:5f:5c:1d:54:ea:cc:67:20:51:95:
         43:3e:18:39:88:ee:95:12:59:04:6d:bf:f4:5f:33:ac:42:42:
         f9:68:dd:1d:cb:b9:b9:b6:5e:d5:7d:e3:7c:4d:d3:7c:f2:f8:
         7e:b9:7c:7e:1d:1c:93:3a:0d:88:7f:b7:b9:15:cb:6e:1d:f0:
         90:31:a1:4a:7d:17:70:24:28:1f:2a:7b:5f:2f:85:b4:fb:74:
         98:ac:80:fc:ef:a4:df:03:cf:d6:dd:af:26:b4:f7:25:95:24:
         e6:4d:d8:2c:89:13:72:a4:59:72:90:a1:36:a9:ef:d5:b1:77:
         a0:b4:5f:22:6f:9f:e8:1c:1e:7b:7e:09:fc:6d:ff:2b:fd:bc:
         5e:a0:ca:04:66:d7:2b:9c:49:9b:5c:e1:98:83:ad:17:e1:f9:
         0a:1f:10:69:2e:86:7b:3f:ff:ec:d5:7e:e9:ac:26:21:da:e5:
         ca:4e:ec:61:b3:42:03:f2:cb:60:11:6e:ae:a3:da:02:27:94:
         99:5c:05:6b:2f:3c:6d:b4:a9:6f:6a:c9:6d:93:d2:0a:0d:b8:
         b4:bc:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----