Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
File:                     ycbGTWd6yWSqxmbrrLnRf6jIq80.cer (raw, json)
Hash identifier:          hkX0/eqMTzKxHZKI0Decw5OmD4qYnPI/ltLi+XMwNw0=
Subject key identifier:   C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420684CFDE886A1C587BB7E3CCF055729
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 206439

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:4c:fd:e8:86:a1:c5:87:bb:7e:3c:cf:05:57:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:d3:b9:8e:54:26:56:0f:ce:05:39:14:80:
                    41:0f:2f:3c:71:fd:6d:09:4f:5b:c8:8c:15:dc:79:
                    eb:88:28:81:80:61:11:5f:f9:60:ac:91:b3:bd:8f:
                    2d:f8:31:c5:27:a9:aa:99:1c:19:06:ed:5b:ec:76:
                    f8:6c:6b:51:e9:a9:dd:bc:94:e7:19:7a:d0:9d:af:
                    f1:24:9a:84:a8:03:d5:0c:0c:53:ee:ac:27:73:f5:
                    69:6d:dc:7a:1d:d5:34:f3:77:8c:bb:18:d9:e4:0a:
                    69:03:ab:f0:e3:6d:99:27:89:3c:d5:89:b1:66:31:
                    6b:1a:0b:8f:1a:fa:1d:fb:82:67:ef:fa:52:81:08:
                    fc:e5:ff:33:8a:ea:98:95:c3:4f:bb:74:c0:60:c0:
                    92:f5:fd:49:4a:37:51:32:f2:5f:41:24:2f:c1:9b:
                    10:8e:d8:44:62:10:e3:88:a0:cf:e0:7b:1e:2e:eb:
                    9f:a0:b0:e5:37:c6:1d:54:ee:47:b6:fe:7d:b4:ef:
                    75:7d:7f:23:f3:7c:4b:b1:88:ec:80:2a:55:c4:e1:
                    7e:47:d5:3c:89:b7:05:59:0c:b9:67:59:12:b9:33:
                    8d:7a:a6:d9:d7:7c:a8:fd:fd:93:82:c2:a8:8b:48:
                    4c:55:24:ba:5c:8b:fa:b1:85:fd:0a:e9:27:31:34:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206439

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:7f:ad:f5:4a:78:5c:43:52:9a:e0:5d:38:a4:7c:de:c7:
         d8:71:e2:53:b5:eb:16:1b:0a:0e:ee:d8:3b:ac:aa:46:7d:d4:
         44:30:0e:d2:15:46:ff:aa:42:54:b0:d6:1b:92:80:12:9d:ee:
         04:db:c3:5d:da:67:8e:34:38:5e:7a:f0:f4:9e:a1:73:0c:10:
         b6:aa:f9:c3:ca:25:ae:46:01:18:9f:4e:b4:9d:18:4a:65:8e:
         22:74:96:32:d3:23:d7:e0:dc:8f:33:fc:9f:89:8c:1c:16:b7:
         71:16:cc:7a:30:63:63:2a:80:b5:42:31:18:c1:f3:60:ac:28:
         93:9b:d3:33:a6:04:4e:5d:92:92:0d:41:07:69:2b:59:71:71:
         36:54:e9:a9:4d:a6:ac:de:67:cc:9b:95:1e:c4:87:c1:76:e4:
         19:42:3f:ac:cd:22:1d:78:65:12:e6:40:11:9f:56:a4:36:5d:
         fa:96:59:4e:53:de:4e:e6:03:4f:9f:75:5d:9f:57:ca:06:a9:
         a0:e3:4a:dd:2a:04:79:86:66:9c:56:0f:92:e5:d2:3c:bf:a1:
         0d:67:98:8f:67:0e:4f:de:13:a6:38:1f:85:84:4a:fa:87:a7:
         42:a2:8b:0f:48:78:87:02:7b:91:74:52:cc:45:3e:b4:31:e5:
         2b:6a:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----