Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
File:                     yohtVYfshfcSQs1XztQJVEUoFo0.cer (raw, json)
Hash identifier:          1oMmGi09uta+oK3Zb7E8Kw7XzwapR0map38HanS5QiU=
Subject key identifier:   CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C90A13918EDEA1363382D0E292496
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:678:d88::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:90:a1:39:18:ed:ea:13:63:38:2d:0e:29:24:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ca886d5587ec85f71242cd57ced409544528168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:0d:1b:20:01:7f:fd:12:d1:a3:25:f9:b9:
                    67:41:d5:3f:61:42:eb:1f:10:95:a7:d7:99:c0:2b:
                    8c:9b:dc:9f:e3:68:c1:1e:db:d0:52:5c:a1:dc:b3:
                    47:c8:d3:bd:1d:51:17:91:fa:b0:bd:1c:e4:31:bd:
                    b9:4a:5a:30:11:e5:15:a9:18:fa:d6:7d:f6:1c:1f:
                    59:38:28:d9:fa:6a:77:7b:40:70:2d:e6:5b:df:b0:
                    3f:ef:9c:70:98:ff:89:68:9d:25:75:3b:23:8d:8e:
                    57:17:5e:85:97:3f:f7:80:02:23:52:6d:ff:ce:2a:
                    18:b5:42:ee:ec:2b:32:46:f3:7b:5a:1a:19:12:3c:
                    cc:fb:6f:8f:a1:e4:78:d6:7b:3e:60:1c:ad:33:2e:
                    73:b6:95:51:f2:6e:9d:f3:d2:de:10:96:4a:be:21:
                    44:93:0d:33:66:58:39:0a:ec:c5:5a:8b:bb:53:51:
                    bf:99:60:af:b2:25:ae:bc:c2:47:4f:65:f1:96:a2:
                    f9:45:4d:d7:08:de:b7:96:c0:5b:83:1a:93:e5:5e:
                    a2:b9:e6:00:fd:d2:18:0f:1e:00:eb:5c:26:5b:59:
                    73:64:60:c9:17:47:e9:74:dc:85:1c:15:e5:9c:71:
                    79:ca:60:f7:67:35:ff:83:59:05:cc:ac:65:55:bd:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d88::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:7c:48:f3:d1:32:43:3f:df:4e:23:f5:1e:c4:59:c6:04:
         80:58:63:ba:43:95:f9:51:d9:0e:5d:a1:95:3e:69:b8:f6:6d:
         bb:7e:d9:90:1d:d8:aa:71:34:f1:4d:83:7a:69:61:da:95:98:
         d2:c3:2e:ad:a3:5f:d3:f7:ae:1c:a0:50:b9:32:9d:ad:91:76:
         98:b8:a3:13:7e:04:de:2f:7f:87:4c:9f:b9:f9:b3:2c:1d:d2:
         24:2b:c7:8f:80:14:c5:fd:5a:f5:47:4b:54:c6:9b:31:df:92:
         9b:3f:c9:38:52:62:1c:3f:c0:ec:60:42:45:aa:82:7c:94:27:
         26:60:2d:8a:a4:be:d9:cb:0b:63:c4:aa:a6:24:9f:e5:38:92:
         96:69:ba:df:29:bc:c2:d4:96:e5:30:2d:6e:ac:70:a1:73:f2:
         27:b6:9a:23:08:69:61:8b:e7:47:ff:0b:90:59:53:9b:ef:3b:
         5c:ba:57:af:a4:cd:43:99:ee:2a:77:a0:02:54:ba:a1:b9:b6:
         3b:6d:dc:89:ee:1c:87:82:43:4b:86:ee:c6:aa:dc:14:80:c2:
         99:f3:d5:ac:17:69:ab:6d:04:74:4a:1f:67:fc:b0:9c:6d:bb:
         60:ce:9e:6c:59:87:39:a1:d7:14:c4:6c:76:5b:ca:7a:2e:30:
         3d:10:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----