Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
File:                     GYe7aFnJOMi2PlqqVtkHvQRE484.cer (raw, json)
Hash identifier:          qcQ1YLoh6guGUSjHo50Uj7MsZGW0yyCLnqGqCEz3FoQ=
Subject key identifier:   19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B2320F00839ABD9130E1D312637BB6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47574

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:32:0f:00:83:9a:bd:91:30:e1:d3:12:63:7b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:c4:30:04:90:ca:bc:4d:29:f3:6f:9a:7b:
                    6c:16:1c:71:63:e8:6e:dc:d8:f4:12:5b:5d:3c:65:
                    03:e9:cf:d4:c1:ac:d6:18:cc:e2:12:05:95:a1:11:
                    b6:3e:72:5a:5c:78:9f:56:c8:60:8f:0d:df:40:6b:
                    3f:53:16:77:d1:d5:2b:b3:96:6a:de:59:f7:ba:40:
                    b7:36:1c:29:6b:ba:6f:36:72:00:b4:69:e6:a7:a9:
                    22:f4:3f:0d:46:23:6f:64:da:ee:77:43:4a:aa:13:
                    a0:48:58:53:d2:0d:35:85:a3:a0:5d:5f:f1:4f:fb:
                    52:56:e2:9a:06:10:6d:36:82:d2:ab:53:dc:ee:bd:
                    23:59:5a:48:f9:bc:ef:8f:f4:47:07:79:c4:f6:90:
                    12:0d:ee:cf:45:2c:49:bb:e1:3b:0d:b6:ae:1d:53:
                    72:7e:83:88:d5:36:b3:ab:f9:43:c6:d9:1a:37:b1:
                    1b:61:a9:4f:5a:f4:7a:3b:f4:7c:e2:3f:84:5c:ce:
                    f0:e7:18:af:bc:37:f3:5d:0f:2d:b5:86:cf:8c:ae:
                    03:a3:04:a6:f1:1a:d4:59:76:65:d0:ba:41:b4:88:
                    77:9f:2e:b9:19:de:c5:1c:4d:54:dd:ad:8e:a3:1d:
                    57:b6:3c:af:7c:01:6d:9b:e4:03:94:d7:a5:41:19:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47574

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:d3:b0:06:90:79:29:db:ff:d0:6c:dc:23:72:cb:b0:a7:
         6b:72:8a:21:48:3d:12:47:84:8f:ba:4a:7b:0f:9c:93:a2:00:
         9c:c6:ca:7f:5e:0c:3b:65:24:9e:5c:7f:70:9b:86:4f:03:d9:
         b7:f0:56:a2:33:4f:68:69:7c:78:7d:2e:56:c4:af:8b:35:a2:
         fd:41:2b:cf:74:c5:28:1f:9c:50:16:f2:a6:79:ed:30:6b:86:
         a8:87:2d:4c:98:da:eb:69:26:b4:bf:72:aa:94:a4:4b:10:90:
         05:d7:9e:94:ee:17:0e:81:36:36:ef:97:ab:7e:cc:bc:37:23:
         f6:aa:91:f7:11:23:fd:b1:f2:07:c8:3a:1a:56:f4:db:cd:c4:
         ea:6e:26:af:3c:fe:15:9d:3c:55:16:ad:d2:b4:de:95:ca:11:
         a6:5b:8e:bc:b5:6d:eb:66:93:a4:e7:ca:5f:84:37:29:6d:f4:
         13:f1:2b:49:d6:12:e0:2c:1d:ee:36:12:5b:80:41:4d:74:0c:
         bc:1c:71:1c:87:2b:03:22:60:14:88:6f:09:ee:8c:ed:e0:83:
         c7:ea:16:b0:a9:3b:6c:b6:37:5e:2d:64:93:8e:e6:40:6b:43:
         27:1a:31:0b:ff:fd:28:8f:a9:e8:6c:f5:df:d5:44:ba:2a:be:
         a9:68:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----