Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
File:                     8TM6Z1TACO27rF8y69AZ6mRzrqg.cer (raw, json)
Hash identifier:          /uuaksbSxVhzO8raInQWBoCCLMnN6lAOJ/dfv7WkKL0=
Subject key identifier:   F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5F0413F5CF446F2C5B73C4138CCC0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42386
                          IP: 77.241.112.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:f0:41:3f:5c:f4:46:f2:c5:b7:3c:41:38:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:b0:f5:6c:31:88:72:67:46:2a:08:1e:39:
                    6a:69:53:be:b5:03:fe:37:30:45:c8:ec:dc:55:61:
                    c5:7b:e4:66:f6:67:2f:b7:dd:06:d6:4f:97:25:fd:
                    f9:b6:a9:ae:86:fc:21:2a:ee:a8:a2:d6:c0:e6:47:
                    3a:ac:cd:5f:de:c3:fe:39:66:c0:f8:80:99:3e:60:
                    f1:9a:28:1a:79:ac:12:ba:cb:95:34:e2:be:82:af:
                    e9:3e:75:c9:b3:61:cc:dc:2c:af:58:09:a3:c5:50:
                    2e:51:ef:56:62:f2:35:3b:7b:cd:d3:c7:28:dd:80:
                    06:70:f6:9c:73:31:46:a1:fd:16:d9:88:5b:e1:63:
                    4d:c5:9a:18:b6:c6:12:1a:db:e9:d7:ce:97:56:ef:
                    8d:cd:aa:a8:2c:1d:dc:7a:7e:12:19:66:b8:9d:66:
                    9a:73:6e:5b:f8:ca:65:3c:5d:22:85:68:c2:dc:aa:
                    31:95:cc:22:ef:a5:b1:6a:1f:f2:44:f7:3c:ad:a4:
                    cf:29:99:0f:5e:4c:d9:57:cb:09:b3:17:6f:d8:c7:
                    33:5f:a1:f5:fd:b3:ec:6e:cc:95:88:9f:d0:25:5d:
                    18:0c:67:03:d7:19:cf:46:54:68:58:aa:3f:72:6b:
                    b0:aa:8d:69:1e:f9:a4:42:8b:de:94:e5:f2:b8:6b:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.241.112.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42386

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:2b:8e:e4:03:a3:98:2e:f0:06:37:9c:1a:ad:c1:18:b0:
         5c:a4:73:5c:47:df:f5:e0:d8:77:3c:fa:09:61:8e:36:2c:32:
         79:2f:51:66:6a:7c:74:f3:dd:02:c9:54:ec:3b:68:83:5a:74:
         65:fb:f1:26:ec:a6:1a:9b:9a:93:a4:5b:d4:0f:68:e7:04:f6:
         43:01:4b:52:83:93:1c:af:37:6e:cf:17:c5:be:d9:84:68:e3:
         e0:c1:01:2e:07:16:42:78:08:2b:59:46:ac:37:c9:12:04:68:
         0b:85:fd:ff:9d:4b:bb:66:aa:7e:3f:d4:ca:7f:9b:2b:c6:93:
         6a:f0:3f:ee:fa:f3:a9:b9:e0:bc:77:79:34:c3:47:d4:5c:f3:
         cb:81:c3:0d:5a:c8:45:2f:30:a9:ff:ef:73:92:c2:9b:ec:c8:
         2b:e5:3b:67:e7:28:ae:74:9b:67:98:03:31:57:d0:99:38:9a:
         76:81:f3:07:9e:64:e8:e0:25:f9:b7:d9:ad:89:c5:8e:f2:ea:
         f2:37:22:b9:7d:dc:fc:9b:2e:5d:f1:8a:9d:9a:be:12:a2:95:
         08:2f:aa:2a:b7:c5:c6:6a:3e:ca:92:1e:8e:bd:8c:17:b6:be:
         63:2d:c3:ab:cb:50:02:05:79:7c:f1:0b:02:a6:ff:ce:2b:72:
         4a:91:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----