Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.cer (raw, json)
Hash identifier:          K9XIRSC6/LKPs8nZOkokTGiuuCXo7P9vgnRi/53qG4c=
Subject key identifier:   4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5C33D4A4A4F26682D38C16A257DAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.7.176.0/22
                          IP: 2a03:28c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c3:3d:4a:4a:4f:26:68:2d:38:c1:6a:25:7d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:b8:d4:84:0a:a5:48:a4:94:94:a6:0d:d7:
                    7e:f8:d7:95:67:9d:78:ef:0d:3b:bd:ed:5a:4c:59:
                    cb:a0:8b:7b:f0:8c:be:ee:9c:b7:9e:27:b8:68:a7:
                    dc:21:3c:30:b2:6a:e5:a4:2c:a7:4e:1d:ba:aa:f6:
                    c7:dc:59:cb:ee:49:3e:a6:d5:e4:f4:da:a7:82:41:
                    12:b2:10:53:06:74:3f:e8:bc:77:cf:be:5c:f8:93:
                    46:6b:03:ab:0d:f9:05:54:d6:2f:ab:bd:dd:a3:96:
                    a6:c5:a7:97:20:22:01:f5:e0:ea:ae:21:6f:17:7a:
                    f0:98:78:39:a4:14:ff:ad:33:44:1a:13:8c:6b:a1:
                    e1:96:93:08:49:d3:6c:bb:d3:3b:71:d3:a4:12:0c:
                    73:93:55:1f:e6:51:99:b0:28:32:92:16:27:1f:cd:
                    f5:36:6a:df:f8:75:25:80:61:3f:7f:02:59:32:57:
                    1d:68:db:06:4f:25:05:1f:cf:77:dc:16:d8:a3:c7:
                    04:fd:0a:9a:8b:bf:02:d3:f2:a6:82:f6:05:81:17:
                    c9:e0:ae:88:cf:3b:58:79:07:97:cb:06:fa:d3:4f:
                    1a:04:67:84:ad:60:bc:e3:fb:47:65:ed:3b:6c:b5:
                    de:51:be:95:7a:f5:f4:67:e5:97:d1:f0:53:8a:46:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.176.0/22
                IPv6:
                  2a03:28c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:37:09:96:37:20:c2:e6:fc:44:a6:07:a0:b5:ac:41:9e:4b:
         21:5c:5a:20:cf:d6:25:29:34:33:a5:d0:3e:46:d8:ec:f7:19:
         52:70:86:fb:ad:17:c5:a6:c2:95:70:d2:52:d7:b0:83:6d:98:
         a5:76:3a:ec:0f:1b:d8:c1:17:c6:7f:38:66:46:ed:3d:d0:fc:
         8e:20:e5:38:10:fb:58:8d:9f:3f:fb:55:b0:37:60:eb:b4:13:
         db:3b:28:6c:b6:38:3b:09:4c:46:be:42:34:f2:cb:34:53:85:
         4e:6e:56:26:ff:26:33:dd:63:60:00:5b:d5:6e:5d:85:94:17:
         37:39:9d:c2:fd:9d:d5:ea:3a:1a:a9:b0:af:f3:a1:61:24:78:
         4a:a6:eb:8f:28:f7:91:f2:5b:49:6a:d4:74:40:66:c7:24:6c:
         a4:aa:71:e6:07:89:55:17:49:7d:4f:ba:65:02:ff:29:ac:cb:
         04:a2:e2:3d:9a:0f:42:2e:39:c9:11:61:61:59:9f:5d:1f:44:
         ea:82:e3:e6:20:ab:d2:bd:c4:4b:3b:fe:4e:fc:42:d3:9f:fa:
         0d:e5:28:13:59:74:73:73:6a:a3:1e:1c:f4:77:80:8a:fc:aa:
         37:5d:0a:6a:5d:34:4f:79:54:cc:c4:c3:24:4d:0d:54:65:2a:
         13:81:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----