Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
File:                     y8Zg8DJNjLG2E3ednoMON9UuqrM.cer (raw, json)
Hash identifier:          IjNcWh2avblv0vW96uzZhaRqiYOG/KEnW1yaLbLmi3w=
Subject key identifier:   CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1985F41F4BD16FD9E40E1987E6D48
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56619

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:98:5f:41:f4:bd:16:fd:9e:40:e1:98:7e:6d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:25:ed:aa:66:f7:55:a5:32:d8:6d:33:92:1f:
                    bc:86:e1:a2:eb:3a:b2:d3:5b:7c:82:80:76:26:99:
                    9f:9d:ca:c6:10:a2:ab:9f:cc:1d:b1:dc:9c:3b:ee:
                    c2:6e:e8:04:46:30:f4:ac:35:9a:92:85:b8:41:7e:
                    23:32:e7:d3:c2:a6:f1:c6:7d:74:cd:3e:b6:e6:a5:
                    3f:dd:df:f3:a2:32:c2:ac:ca:90:15:53:6c:55:69:
                    d6:30:f6:33:ce:70:65:cd:07:d6:df:02:69:95:fd:
                    a8:22:5d:4e:0a:54:7c:ef:67:4f:e2:27:e0:b8:39:
                    40:17:7d:f0:b0:08:1f:8b:86:9c:a3:1f:f3:fa:20:
                    0c:ed:3d:af:06:40:84:4d:74:80:b2:73:3c:b1:f5:
                    ad:bb:8b:fa:20:36:5b:ff:8b:08:bb:5a:e5:6a:46:
                    cd:b7:27:ad:85:b2:a2:c5:a6:ac:9b:bc:d7:87:67:
                    7b:20:ad:29:15:99:62:59:be:98:23:cf:dd:e6:02:
                    13:95:ef:98:7b:3d:d2:e8:2e:19:38:9c:7a:88:aa:
                    97:f3:af:dd:91:9f:be:09:ac:a5:48:55:80:11:56:
                    e2:f0:6a:ee:87:4c:95:43:34:d5:94:3c:60:65:6e:
                    a4:ce:25:28:42:11:fa:cf:d4:a3:a8:d9:71:82:11:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56619

    Signature Algorithm: sha256WithRSAEncryption
         1f:38:a4:3f:cc:df:df:c6:1b:b0:58:bd:f7:f8:ee:7a:21:f5:
         3b:24:ef:2b:cb:7a:62:c4:58:77:2a:48:46:26:01:a8:e8:b8:
         02:4c:f8:3e:a8:50:eb:10:ba:dd:0e:62:a0:bb:02:0f:6d:41:
         3c:c5:6c:e0:32:0b:eb:32:20:c1:a2:6b:7f:92:63:3e:1a:28:
         80:b9:2d:1c:98:f3:6e:ad:06:2a:37:7d:5e:7c:24:b3:2a:69:
         80:9d:82:42:9a:95:60:4e:07:2c:db:05:9b:f0:67:b8:05:a7:
         93:31:ca:23:e9:82:a1:d0:82:7e:43:db:5a:cf:f5:fc:c9:6a:
         82:fe:b4:55:17:ab:38:b0:0c:7f:94:2c:28:be:13:6c:ce:88:
         d4:22:08:5a:82:f1:9b:ec:40:4b:96:5c:4a:02:ed:4d:d0:28:
         e1:e2:78:b2:22:9f:d7:b8:89:41:6d:a4:6a:f2:13:34:44:1b:
         c9:3b:2e:f4:1e:22:0c:e7:0a:59:2b:c8:ff:58:22:f0:3c:38:
         c4:30:d1:70:69:a0:d6:9d:de:50:2b:54:4d:6f:53:06:f6:04:
         2b:38:bb:97:97:af:48:79:4a:96:67:ec:0c:f6:8b:aa:ce:ff:
         f3:5a:e6:5b:49:56:6d:d0:dc:10:d7:be:24:fc:3f:15:ca:04:
         61:11:46:29
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQhsZhfQfS9Fv2eQOGYfm1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmM2NjBmMDMyNGQ4Y2IxYjYxMzc3OWQ5ZTgzMGUzN2Q1MmVhYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SXtqmb3VaUy2G0zkh+8huGi6zqy
01t8goB2JpmfncrGEKKrn8wdsdycO+7CbugERjD0rDWakoW4QX4jMufTwqbxxn10
zT625qU/3d/zojLCrMqQFVNsVWnWMPYzznBlzQfW3wJplf2oIl1OClR872dP4ifg
uDlAF33wsAgfi4acox/z+iAM7T2vBkCETXSAsnM8sfWtu4v6IDZb/4sIu1rlakbN
tyethbKixaasm7zXh2d7IK0pFZliWb6YI8/d5gITle+Yez3S6C4ZOJx6iKqX86/d
kZ++CaylSFWAEVbi8Gruh0yVQzTVlDxgZW6kziUoQhH6z9SjqNlxghH2cwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMvGYPAyTYyxthN3nZ6DDjfVLqqzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2EzZDNi
Yi1hYTk4LTRjZWQtODBhNi0yNjczNzA3ZmQ4ZTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYTNkM2Ji
LWFhOTgtNGNlZC04MGE2LTI2NzM3MDdmZDhlNS8xL3k4Wmc4REpOakxHMkUzZWRu
b01PTjlVdXFyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDdKzANBgkqhkiG9w0BAQsFAAOCAQEAHzikP8zf38Yb
sFi99/jueiH1OyTvK8t6YsRYdypIRiYBqOi4Akz4PqhQ6xC63Q5ioLsCD21BPMVs
4DIL6zIgwaJrf5JjPhoogLktHJjzbq0GKjd9XnwksyppgJ2CQpqVYE4HLNsFm/Bn
uAWnkzHKI+mCodCCfkPbWs/1/Mlqgv60VRerOLAMf5QsKL4TbM6I1CIIWoLxm+xA
S5ZcSgLtTdAo4eJ4siKf17iJQW2kavITNEQbyTsu9B4iDOcKWSvI/1gi8Dw4xDDR
cGmg1p3eUCtUTW9TBvYEKzi7l5evSHlKlmfsDPaLqs7/81rmW0lWbdDcENe+JPw/
FcoEYRFGKQ==
-----END CERTIFICATE-----