Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3J7LD7cQIEluO8IkDdKeQgjB6ig.cer
File:                     3J7LD7cQIEluO8IkDdKeQgjB6ig.cer (raw, json)
Hash identifier:          KrCq5UK7Zk69vVSlB++yBtgVS1m8VbOBmYaTRhvttm8=
Subject key identifier:   DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F2C93ED278392D82725251A0D5A4FB9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
caRepository:             rsync://chloe.sobornost.net/rpki/uplift/
Notify URL:               https://chloe.sobornost.net/rpki/news.xml
Certificate not before:   Wed 01 Jan 2025 00:03:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2938::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:2c:93:ed:27:83:92:d8:27:25:25:1a:0d:5a:4f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:03:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc9ecb0fb71020496e3bc2240dd29e4208c1ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:2e:27:ea:60:e9:8f:92:7c:75:ab:19:d5:
                    69:5f:f6:75:be:72:9f:b7:d4:24:8f:00:1c:80:b2:
                    45:29:78:b0:cb:b2:3d:55:92:b8:0b:31:4f:a7:c1:
                    c1:f7:27:17:7d:0b:a4:db:ae:18:28:9d:65:d9:b7:
                    e2:17:75:7e:5f:68:fe:dc:ee:59:83:ef:70:df:58:
                    e2:a0:8a:ef:4f:0b:0c:ee:b9:c0:0a:50:20:10:13:
                    81:22:2d:34:39:6f:aa:33:8d:2e:c8:9b:0d:33:39:
                    27:ae:45:7d:f9:f1:3c:8a:7a:b4:05:83:f8:79:7e:
                    bc:a5:f6:fe:44:06:bd:cf:ab:51:52:bc:82:c2:ff:
                    bb:35:8e:10:ab:38:e3:d1:66:c5:ed:a9:20:74:0d:
                    ff:19:67:54:28:88:66:73:83:59:12:56:04:45:e3:
                    d4:89:70:e5:4c:50:a0:b0:7b:c5:61:06:6c:15:35:
                    63:e4:02:62:3c:ba:63:c8:a9:7d:b3:42:e2:06:01:
                    23:2d:e9:55:8c:bf:ad:29:de:c4:21:6c:d5:ca:87:
                    6f:4c:eb:a1:17:65:0b:a4:14:0d:47:71:5a:03:58:
                    48:2f:64:3f:2f:b1:90:df:79:2e:14:77:80:77:09:
                    4d:37:3d:8c:6e:2f:2c:04:a9:fb:a3:50:1c:12:f2:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:CB:0F:B7:10:20:49:6E:3B:C2:24:0D:D2:9E:42:08:C1:EA:28
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://chloe.sobornost.net/rpki/uplift/
                RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/uplift/3J7LD7cQIEluO8IkDdKeQgjB6ig.mft
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2938::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:a9:4c:40:7a:f2:02:9e:1f:7f:b9:14:d6:27:db:d9:a2:
         f6:84:07:37:3f:fb:bc:0b:33:64:f3:0c:82:d5:87:5a:65:e4:
         99:9e:24:24:49:e0:a8:2d:80:a4:22:76:14:74:5a:45:7c:43:
         31:c0:e8:f4:3b:4d:82:a6:fe:73:68:e0:2a:8e:b2:4e:16:53:
         b5:0b:65:31:40:d1:be:da:8b:4d:eb:c4:20:bf:4d:f2:f1:23:
         00:94:14:e1:60:c1:8e:83:3a:b7:3e:48:ab:6b:3e:7b:bf:54:
         55:c6:a8:1d:76:e0:71:f7:c7:9a:97:0a:2d:ac:5b:e9:4b:7f:
         e1:56:ec:fd:be:3c:d1:c2:3c:cb:f0:c1:f6:97:21:15:a7:b3:
         e9:e7:3f:5c:7c:3e:26:1d:d4:c4:1d:a6:bb:de:37:86:c5:6d:
         31:1d:58:a4:64:79:0f:a0:91:81:93:e4:bf:49:ef:48:a8:56:
         52:09:80:d8:5b:f1:32:68:e9:76:0a:2b:b8:f9:85:36:c3:aa:
         d9:fe:e6:b9:b8:d2:b1:81:3b:87:2a:13:a3:47:91:8d:2f:95:
         b3:fd:08:5b:02:65:a8:6e:26:40:3e:fa:3a:11:d3:29:0b:ca:
         1f:29:a7:de:cf:8e:a8:ed:18:7a:93:df:5f:e6:5c:52:a3:a4:
         c1:53:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----