Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
File:                     yh3vhAA2XhysFuj3iHCS2smDtz4.cer (raw, json)
Hash identifier:          TF/393jRIc56kQxUirkrHuxiUlB8TTu5nZ+xb92Jp+M=
Subject key identifier:   CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195A4219D17B70206971C3A76F9B46DCDCA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 17 Mar 2025 12:43:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43109
                          AS: 44519

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a4:21:9d:17:b7:02:06:97:1c:3a:76:f9:b4:6d:cd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 17 12:43:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ca1def8400365e1cac16e8f7887092dac983b73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:89:80:e1:c3:5e:4c:a8:05:84:81:85:84:
                    40:10:4a:bc:14:0f:21:e9:54:d7:66:5a:fa:3a:b4:
                    59:f1:cb:b8:92:88:5b:58:ff:10:b6:94:18:ee:00:
                    45:04:cf:29:b4:0f:22:6f:44:51:5b:83:ff:3d:77:
                    c3:36:c4:c1:69:87:62:81:57:23:84:e6:35:f8:24:
                    27:25:9b:fa:35:cf:06:ec:fa:28:31:03:7f:4a:49:
                    f8:2d:bd:1e:43:6b:07:40:cc:8f:c9:90:27:6e:e5:
                    7d:5b:98:cb:42:6e:01:6d:41:fe:27:44:6b:2f:34:
                    c6:bc:cb:b3:98:ae:ee:ba:d3:ae:09:66:54:e1:17:
                    04:8b:5c:3d:90:d9:b9:6e:35:a2:6e:2b:1a:be:64:
                    62:5c:76:db:3f:a0:ba:86:d0:bc:f5:75:a2:65:ea:
                    e8:7b:6b:86:4f:cd:4a:5c:bb:27:86:6b:f7:cf:5a:
                    3b:e1:27:73:7f:44:6b:8c:71:fb:a1:bb:f7:e0:6d:
                    52:c5:fe:77:f4:ae:51:78:6d:00:8c:ce:0b:d7:1c:
                    09:8f:d5:8e:c1:14:1e:97:fe:49:5b:08:02:97:45:
                    ac:f4:f6:c5:77:64:c7:d3:0f:0e:99:3e:06:77:bc:
                    88:12:55:61:29:94:10:7c:61:71:92:c9:8e:da:4a:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43109
                  44519

    Signature Algorithm: sha256WithRSAEncryption
         40:08:65:d2:6a:b4:31:45:d1:15:25:86:65:07:29:19:dc:7f:
         32:a9:11:44:53:32:2c:74:80:c1:11:c3:55:ec:df:e8:af:fb:
         22:78:1a:23:58:ec:1a:68:91:ce:c3:e9:59:85:00:6b:04:b1:
         76:cd:e6:c5:2e:44:27:03:a0:b3:9c:f3:6c:3b:7a:9b:5b:d7:
         a8:dd:4e:b6:a2:93:e2:b6:0a:39:50:7a:06:90:05:7e:1b:b0:
         34:15:35:25:d4:2b:ec:80:ff:5e:be:57:ad:a0:36:a7:6e:d5:
         21:3f:d9:e3:42:bf:9f:6d:3b:10:ec:75:5c:e3:41:dc:01:bf:
         1a:b1:d1:8e:57:6f:16:47:e2:ec:7b:35:d5:38:61:6c:e8:68:
         0a:cd:b0:3c:ec:61:57:7b:3b:78:c6:83:5c:bd:e2:93:38:6b:
         8a:af:fa:d9:8e:3a:1d:40:27:d2:7d:4a:70:25:b3:c6:a8:cf:
         2c:a5:22:04:5b:c7:f3:f8:41:30:7c:65:37:b0:1d:4f:3f:d8:
         b3:23:2c:9a:ff:ba:54:63:7b:7b:aa:15:f2:cb:b4:84:09:46:
         33:08:b7:ac:21:0b:f5:db:fc:41:34:d6:8a:8e:6d:1a:b6:bd:
         b5:2a:8a:32:cc:28:87:29:34:e7:d4:cb:38:4e:1e:54:49:ab:
         16:22:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----