Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer (raw, json)
Hash identifier:          vm5YOSOwcvU3goZUdUA4cEnYlNq5lQt8PB/QpBVbmf8=
Subject key identifier:   D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA71B671FE041E389609DBD51A6BC4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.3.184.0/22
                          IP: 2a02:c140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:71:b6:71:fe:04:1e:38:96:09:db:d5:1a:6b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:1e:1a:d4:a5:10:2c:8a:ff:40:4f:a9:9d:
                    5e:7a:13:3a:73:e2:9e:23:f1:f4:65:f7:bc:da:1b:
                    01:60:34:82:b6:f3:6a:9c:21:9c:9a:e8:00:2c:10:
                    97:e0:55:0f:43:2d:e4:00:c3:6e:f1:83:16:52:fc:
                    57:8c:ca:bd:a3:8b:10:ea:a9:84:04:9b:24:8d:a5:
                    1e:74:4e:ab:16:37:0f:57:a5:ad:a1:18:45:3e:55:
                    d7:07:8d:77:dd:9c:9b:ec:c6:fd:d8:4a:bf:b1:ea:
                    6a:44:b3:44:56:49:bf:0f:b9:b5:c8:26:82:7a:f1:
                    d8:e5:38:b6:ab:09:cb:6d:b1:a4:be:07:b7:a4:be:
                    3d:d0:7e:06:9e:d9:f7:db:b9:5b:c8:36:97:41:dd:
                    d9:91:66:f4:06:fc:39:84:03:c5:d8:75:92:1d:fd:
                    ed:c4:0f:c1:e3:b9:dc:b2:8d:ce:1b:67:6c:32:e7:
                    73:47:e2:67:fd:7b:5e:9c:e9:77:da:4d:58:cf:18:
                    9c:4a:a8:f4:70:70:1e:dd:57:32:f6:0c:16:47:57:
                    6d:7c:79:bd:4f:eb:3b:ed:85:bf:e7:55:c8:4f:a7:
                    69:d8:79:7f:04:09:aa:99:9b:65:76:89:b6:01:25:
                    d8:ac:85:a3:8e:a9:93:8c:3e:79:fa:c7:9d:12:fa:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.184.0/22
                IPv6:
                  2a02:c140::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:94:37:6c:97:78:a0:78:43:32:66:53:d1:7d:70:81:8f:
         b5:b4:2c:59:ad:48:4b:10:eb:cb:95:09:9a:7f:51:e7:14:45:
         21:07:a3:b2:0e:7e:ce:ba:83:f3:39:50:36:dd:bc:20:c8:a7:
         41:12:2a:6c:1a:84:1c:1b:b2:50:32:bd:51:22:62:58:1b:b7:
         84:e7:76:af:e5:f1:aa:42:b9:43:26:d5:a6:54:8f:6a:c1:55:
         45:ff:36:be:e4:af:fc:9b:51:46:04:67:1e:b2:41:72:84:6a:
         5e:95:65:bc:f6:eb:ea:d1:25:a2:23:a7:47:ec:4a:1b:db:72:
         2b:5f:06:e3:0a:32:a9:af:21:57:ae:16:b2:a7:67:64:e5:e8:
         0c:62:c1:c3:e6:31:bd:92:4c:d9:e8:aa:97:09:b4:9f:3a:d8:
         09:fc:ce:fd:3f:76:5e:7f:c6:67:a3:27:a3:62:ab:8d:86:d2:
         f9:de:20:ff:3f:5b:74:ea:e9:c5:28:92:21:62:9c:ca:03:f8:
         a0:f1:ae:b0:e9:42:82:b8:25:71:10:9f:d6:36:55:5e:1d:e8:
         00:9a:e0:8d:9b:a3:f3:a9:90:93:0b:3a:76:3c:6f:ef:29:5e:
         d4:62:de:12:6f:4a:aa:3b:0d:5f:e9:23:53:30:05:cd:18:9d:
         4c:19:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----