Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
File:                     4T3UuB8fx53U2mQo-cKgJzRX_wY.cer (raw, json)
Hash identifier:          X5K5ooFgqqnLEwH/9QHGat/KB5v3zV/3MrlhMKnojeA=
Subject key identifier:   E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F3C4A7AF2542AE62A8810D0AB8C94
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:276c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:3c:4a:7a:f2:54:2a:e6:2a:88:10:d0:ab:8c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:78:e7:19:f7:7b:6a:8e:94:e7:9d:31:ed:
                    81:21:db:55:fc:5b:b0:75:2a:31:08:c6:5e:a3:af:
                    a2:d0:7d:71:f8:63:9f:08:04:7a:2c:3d:86:b6:1d:
                    75:59:f6:a1:ee:d6:f6:41:ef:9c:81:76:42:27:4c:
                    e2:47:8e:2c:9e:53:43:d2:70:93:b3:67:db:13:e3:
                    08:6b:40:6e:15:6d:66:65:97:ec:4d:da:3b:99:ad:
                    7f:bd:90:3b:92:d5:79:43:73:87:f6:fa:64:08:f9:
                    6c:3d:3b:76:09:5e:02:48:5a:6b:b9:ad:64:76:cb:
                    c2:d1:61:e3:2b:e9:5c:16:6e:32:ac:a8:b1:ca:db:
                    ff:a9:e4:c3:10:d4:c2:75:f3:4f:8c:e8:c2:f4:6a:
                    ab:99:7b:5d:3e:da:7c:97:7c:0c:41:67:e7:d0:b0:
                    91:7b:37:f9:ef:09:5b:48:ed:a5:4d:07:14:29:60:
                    78:54:ff:eb:f3:b4:ce:e2:8c:b7:b7:53:17:04:2e:
                    7f:8a:a3:2d:01:d9:ea:92:15:e5:fe:63:77:49:72:
                    b7:c0:50:be:f6:ae:1a:0d:3e:1d:28:ce:35:cd:1a:
                    8f:f4:ed:7d:ad:a1:f1:17:29:a8:27:ec:3d:cc:77:
                    3a:18:19:f1:ae:4a:6d:69:4a:cf:2e:16:82:1d:c8:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:276c::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:94:c0:8a:5a:63:c6:18:84:24:2f:e8:d9:45:5d:50:58:
         78:df:f8:89:cb:46:5a:de:91:47:34:fc:07:d2:e4:88:cd:44:
         36:7f:c7:5f:c8:06:4c:b7:5d:8a:2d:b2:17:4d:ee:64:77:c3:
         49:97:82:8d:9e:71:d0:5b:af:de:d0:d0:70:c6:78:ff:89:96:
         8e:bc:7a:9b:e7:cf:eb:72:b5:9c:34:1d:0c:51:4a:09:7b:43:
         f8:2b:b3:94:a2:1e:b1:25:76:a0:2e:79:c9:6e:9b:3c:db:c7:
         76:99:cb:d4:af:6c:cc:e0:0c:65:e6:d9:7f:b1:3a:47:f0:ca:
         55:ec:6f:f8:c3:4c:63:90:3c:f2:2e:af:dc:c7:2d:78:bb:f0:
         b4:fd:75:10:93:d6:31:2c:0b:1f:72:b4:43:1c:f8:f5:12:a7:
         e0:33:2f:97:65:84:a9:3a:3e:d4:c9:2f:32:42:c3:ac:94:82:
         fc:c8:24:f5:ca:13:b0:17:a1:13:e5:7a:37:24:d6:df:fa:3c:
         84:4a:ed:5b:bb:47:5f:0c:3d:d7:b4:aa:f0:89:6e:8d:68:b1:
         73:b9:84:4a:05:64:8c:52:52:2c:34:9b:1c:d4:09:fd:df:68:
         2e:e0:e5:5c:57:2c:ec:4a:51:94:b4:f6:36:04:4c:44:dc:e2:
         6c:f6:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----