Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
File:                     Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer (raw, json)
Hash identifier:          3dgZFaVHZsEQM28i8Fn+nX9+YUxeoYinn6mQrX1VzRo=
Subject key identifier:   2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420684FC1DB456526A76F6231716FC24A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199933
                          IP: 185.41.120.0/22
                          IP: 2a01:4de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:4f:c1:db:45:65:26:a7:6f:62:31:71:6f:c2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:88:65:fa:8e:6a:0d:2d:08:b8:fe:cd:e6:
                    2b:d2:2f:76:59:e5:0b:98:08:17:4c:70:55:d7:87:
                    24:43:8f:10:34:70:63:b2:b4:97:e4:32:26:3b:63:
                    80:e6:92:7e:55:ab:cf:bd:32:a4:7c:bd:31:5e:c1:
                    fd:c0:2a:57:27:7f:6e:81:c3:50:c2:5e:dd:b2:23:
                    10:06:24:7b:5c:9d:cb:f8:e3:e7:f4:31:45:3d:0a:
                    0a:1a:4f:36:c4:43:63:c4:84:e9:52:a1:44:15:de:
                    83:8f:01:01:33:c9:6e:c3:d9:37:4e:41:27:11:f4:
                    4c:7b:62:cc:c7:26:e2:42:bb:bb:74:19:a3:d2:b4:
                    9b:80:fc:66:1f:a1:89:2c:05:df:26:6a:68:dc:b4:
                    1c:38:c0:aa:cf:6a:d7:a3:b1:44:d8:9b:b9:ac:94:
                    3e:4d:ff:b7:0c:32:20:eb:dd:4e:b5:e4:f9:cc:e7:
                    f5:f9:9e:b6:06:10:ee:f2:7f:66:88:71:7e:2e:43:
                    b1:86:a4:59:32:d2:0f:77:67:2f:04:f0:fc:a1:66:
                    df:1c:e9:35:ac:a4:88:6e:6b:a3:35:2c:8d:56:7e:
                    a4:45:15:4e:74:1b:e7:7c:36:d2:ed:70:d8:51:85:
                    86:90:5d:f8:79:69:3f:2c:57:af:19:c4:49:76:5f:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.120.0/22
                IPv6:
                  2a01:4de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199933

    Signature Algorithm: sha256WithRSAEncryption
         ab:d1:a6:9f:f0:10:d7:5e:dd:c9:1c:bb:82:11:15:5d:1b:7e:
         fc:8e:cb:59:96:82:35:a2:93:53:9a:79:ad:b2:61:9f:14:63:
         e7:fd:e7:10:b6:51:c5:bd:7a:a2:7f:7e:c5:42:e2:3c:b3:0d:
         99:de:6b:4f:83:69:86:c6:db:01:95:dd:84:e3:4a:9b:2d:aa:
         fa:5b:eb:d3:61:8d:4e:df:43:3f:09:64:85:33:cf:05:31:b7:
         93:48:cf:d1:0d:37:28:87:ae:29:6b:d2:cc:a9:66:4b:c1:cc:
         5e:16:b9:e8:23:e9:76:b6:7f:45:be:d3:3f:d6:b3:ff:ae:3c:
         80:25:d5:a3:b6:c1:7d:23:0e:7c:e9:4d:b8:17:ea:f0:75:c8:
         7c:24:a2:15:8d:e2:a6:9d:f5:88:ce:fe:43:53:4e:99:e9:fd:
         ec:2d:39:8b:4c:3d:21:cb:57:50:62:f1:a8:b1:2f:a5:5a:c3:
         c2:9a:4b:c7:25:4b:d4:51:66:77:9a:3e:d3:8b:eb:d3:ae:f9:
         31:8e:e5:4e:dd:e7:71:24:59:63:c9:1a:e7:42:47:ed:b4:85:
         e3:89:ba:b2:ef:ed:67:65:85:02:35:2e:37:3b:e7:b2:b8:6d:
         20:82:ad:e3:4d:83:6d:29:81:c1:bc:3f:a5:1d:30:0b:c2:7e:
         26:d8:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----