Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YHE9sXNxkpe4_FKLXEM4RKFaMgs.cer
File:                     YHE9sXNxkpe4_FKLXEM4RKFaMgs.cer (raw, json)
Hash identifier:          scLvU5qdjb3VNMolX6B59y75fs934gNQQeneDzhzTzA=
Subject key identifier:   60:71:3D:B1:73:71:92:97:B8:FC:52:8B:5C:43:38:44:A1:5A:32:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C8B372706C50EC5594F3E69050C01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210632

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:8b:37:27:06:c5:0e:c5:59:4f:3e:69:05:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=60713db173719297b8fc528b5c433844a15a320b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:9a:24:18:60:d5:75:36:24:70:dc:b6:5d:
                    66:c1:4c:b6:70:26:c3:3f:e2:c6:ce:74:90:e6:a8:
                    83:e9:95:e2:a1:b6:78:5a:b8:b0:02:f0:6a:a7:47:
                    98:a6:fc:9d:a7:33:6e:d0:2f:e8:4e:09:1f:60:e9:
                    29:d5:bd:89:d1:9b:b7:39:97:cd:cd:69:35:06:aa:
                    5f:e0:b0:f3:48:bd:04:44:29:c7:2e:36:98:63:13:
                    d9:4f:9d:06:e5:a4:2b:df:5b:c7:e4:cd:bc:e7:a5:
                    eb:b2:b6:73:f6:79:4c:07:03:fa:c6:ff:30:8b:4f:
                    37:9a:cf:d6:f5:35:e9:0f:a7:aa:48:7d:50:88:f7:
                    e0:d2:2c:28:6f:c9:2b:13:ca:86:0c:61:c4:a4:18:
                    61:4f:68:09:ed:2f:99:3f:55:07:74:0b:9c:7c:01:
                    ab:07:c0:19:d3:4e:fa:c4:85:00:a9:d9:9f:ca:c6:
                    cb:dc:70:08:ac:d5:9d:23:12:d0:e1:5f:07:59:a9:
                    fe:88:8b:67:db:63:ab:8d:5b:8a:9b:a1:a0:40:88:
                    1e:65:8b:21:e6:fb:cd:21:ae:da:0e:ab:a7:c5:ea:
                    7f:49:05:d7:b9:01:61:9a:de:01:d6:64:20:0d:0d:
                    68:b1:1e:18:dd:b0:b1:93:c5:17:74:66:b5:10:c2:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:3D:B1:73:71:92:97:B8:FC:52:8B:5C:43:38:44:A1:5A:32:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/da0c64-9128-4eeb-a35a-90cd53d6732e/1/YHE9sXNxkpe4_FKLXEM4RKFaMgs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210632

    Signature Algorithm: sha256WithRSAEncryption
         04:82:31:d2:95:bd:70:8f:b4:f7:43:11:84:21:b5:73:93:2d:
         0f:d8:42:d9:7f:72:b5:17:a0:58:52:24:04:f9:d7:63:19:9a:
         63:9b:07:c5:7f:1e:da:50:56:61:8c:92:49:83:9c:0b:05:b0:
         4e:cb:85:eb:79:46:87:9d:3c:cd:d4:af:cf:1a:a5:f5:b9:ea:
         0e:c1:67:c7:e2:e5:aa:a4:a7:84:1d:58:28:bf:63:27:b8:02:
         02:34:1b:6f:fa:b3:c8:ac:20:16:25:5a:5e:a2:3e:15:bd:21:
         2c:0c:97:ba:dc:31:75:f8:5a:1a:b6:8e:e6:3f:0a:a2:b3:62:
         66:23:f0:6f:c8:bf:a2:70:63:69:b3:ca:68:cc:b8:91:4f:53:
         f4:a8:85:5b:2d:38:4e:1c:d1:c8:00:b5:02:3c:0f:e4:d4:b2:
         93:fa:2f:9a:d4:ab:50:a1:8b:92:6f:f3:a5:b1:51:f1:33:d6:
         66:0c:60:43:b8:ff:99:32:1b:08:72:d9:a2:d7:00:b7:2c:95:
         69:b3:cd:39:1a:a3:98:22:a0:02:dc:2c:a5:87:9f:55:e6:4d:
         0a:98:f3:75:39:b3:bc:11:15:7c:9b:ae:e7:ec:a0:d6:61:98:
         52:65:77:5e:dc:cf:86:34:b6:95:25:b6:7e:e2:43:39:b8:4d:
         53:a7:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----