Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
File:                     TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer (raw, json)
Hash identifier:          Pz/5fvT51NwXxTSsNQ9CFrjSY4GDM5pJZzLFIcygZcU=
Subject key identifier:   4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAA64D439686BE1574111FCEC3B177
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.212.121.0/24
                          IP: 2a12:89c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:a6:4d:43:96:86:be:15:74:11:1f:ce:c3:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:a8:da:d5:c8:07:b3:14:a1:e7:4c:04:69:
                    80:e9:08:50:ce:78:07:a0:b5:b1:c4:52:87:d3:31:
                    91:9f:94:9f:63:46:e1:ef:5e:f5:c7:e2:23:85:12:
                    43:08:4c:4b:5c:1e:47:c4:78:e7:53:fd:ff:90:ff:
                    9c:23:58:5f:63:c2:6f:6d:91:eb:11:7c:64:a8:02:
                    8e:ba:99:7a:51:0b:0d:be:64:90:55:77:10:16:32:
                    05:fb:a9:ce:41:a2:b1:55:bb:36:08:20:4b:9f:08:
                    03:ab:20:9a:29:0c:c9:0c:be:d5:20:53:cd:d0:87:
                    aa:fc:11:81:b8:17:b0:2c:5f:f3:c0:6f:5a:86:a1:
                    fa:d8:36:5b:47:51:cf:b5:57:ab:70:67:92:f2:aa:
                    a3:d6:58:c4:7a:7e:48:de:2f:cd:25:77:78:64:ae:
                    7c:63:f9:9d:e6:43:f6:47:b6:8e:fa:1d:42:1d:77:
                    37:2d:1b:a6:a8:b9:55:f6:a1:cb:f4:1c:fb:80:57:
                    7f:c1:b3:67:a1:a0:f3:2b:ce:84:d0:fe:86:76:5b:
                    80:a3:1a:de:7e:a1:1d:72:54:52:dd:e0:50:71:31:
                    d3:a6:64:a6:55:e3:78:37:7a:3a:3f:b7:98:47:e3:
                    b8:ce:7a:03:57:25:8e:8a:76:cc:0e:0a:a4:63:d5:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.121.0/24
                IPv6:
                  2a12:89c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:44:a6:1b:75:f0:83:b4:0e:16:03:80:5d:aa:38:24:d4:56:
         84:ce:43:c0:70:cf:59:bc:2f:58:44:0a:df:0e:c6:51:dd:a2:
         df:c0:b8:16:26:9f:3e:32:3c:5e:88:b7:81:64:f8:3d:11:ec:
         0f:42:50:c0:cb:af:22:d8:d9:82:76:7a:9b:c6:ce:c0:e9:6d:
         6b:7e:b2:3a:b0:61:29:aa:5d:ac:7b:fc:18:84:18:0c:2d:ab:
         ec:2e:4e:77:04:e4:b3:38:ea:2f:28:8f:4e:b2:4d:51:59:3d:
         e9:5e:4b:ab:eb:0f:df:63:4e:e3:88:8e:22:22:5d:43:c7:7e:
         e2:ec:60:c3:b5:cc:8d:d8:5b:36:3a:af:0b:f0:a5:75:8e:f2:
         0a:18:1d:c8:2a:9f:4b:d2:81:91:f9:81:20:99:ed:db:e4:ca:
         79:8f:c2:08:34:04:40:a9:01:f7:68:20:52:bc:2b:54:2f:72:
         d6:a2:12:c7:43:c1:12:52:65:05:45:69:35:40:53:a7:c4:41:
         2b:15:23:f4:3a:23:be:f2:cc:c9:17:03:22:55:8d:e0:f1:4f:
         c2:dd:c6:a2:ac:aa:f1:b2:25:6e:3d:03:a1:eb:21:7f:99:24:
         60:95:91:38:5f:48:0b:8d:5f:94:b7:95:b9:a2:81:c7:be:3a:
         76:85:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----