Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
File:                     TG6lo8U77y5lFwwDfERRz6eO9Fg.cer (raw, json)
Hash identifier:          u1cBWnrv9P3XcQAwzPzY4Z1QqVszJ66YdpSHIQB/TFU=
Subject key identifier:   4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01956E857125283FED1762868FBE6D3D9C7E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:53:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213430

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6e:85:71:25:28:3f:ed:17:62:86:8f:be:6d:3d:9c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  7 02:53:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:17:a6:a0:87:2a:9f:9b:55:d6:92:ca:d3:
                    c6:40:dd:94:03:26:8a:e8:e0:c1:72:62:f8:f7:5e:
                    ed:9e:3b:52:9d:15:d1:54:cf:e3:9c:e8:07:d0:63:
                    31:53:4e:6c:90:61:33:28:28:72:26:88:56:6e:a4:
                    a7:d1:30:bc:a7:44:b0:b4:8a:e1:9c:89:b5:e4:16:
                    40:d8:6b:8b:ee:6c:06:e7:7e:2d:bd:6a:d3:3e:28:
                    01:e3:46:c5:b5:41:d0:73:56:3c:7e:86:13:1e:8e:
                    55:19:1d:1d:7d:cc:a0:c5:df:f5:a5:3a:00:0c:9d:
                    f4:d7:b1:d3:8d:78:17:6d:ec:5d:bf:d0:03:35:c4:
                    4d:c1:96:99:52:2f:54:57:79:41:07:43:7a:d5:51:
                    f1:1e:1e:47:9b:a8:ce:4f:78:69:81:bc:aa:ec:3e:
                    de:8f:6e:03:2d:74:31:f5:72:99:90:1c:a5:a4:8c:
                    ea:2d:3b:3e:f1:1b:e7:6f:48:ef:af:91:21:49:5b:
                    c8:1e:bf:2f:15:e3:49:00:6e:24:ee:46:6a:3d:50:
                    49:e1:cc:c9:40:0c:b4:be:11:a0:59:93:ed:3f:cf:
                    58:28:80:05:23:d9:7a:9f:dd:2d:bd:b8:b9:42:85:
                    98:ba:f6:87:17:b2:f0:0e:78:6d:af:45:52:1f:70:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213430

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:f7:8f:8f:d7:05:b9:1a:02:00:db:fa:88:d3:8f:9d:10:
         8d:2b:77:21:ee:de:46:52:cf:8d:f4:85:fc:1f:65:df:d0:e1:
         80:1a:c1:d6:92:ea:ce:4a:c8:35:04:bf:02:72:01:ce:79:2d:
         a9:19:0b:7b:2a:c9:25:3c:64:3f:fa:88:75:ab:f0:1f:d6:1c:
         cc:aa:48:e9:2d:04:38:54:bb:ab:c7:47:ea:3c:bb:ed:de:a8:
         07:01:17:61:8d:7c:ea:d7:9d:cf:b2:90:2d:27:4b:5c:cd:d6:
         62:b7:6b:28:74:92:c9:27:50:59:a5:22:8f:09:c5:1e:ac:f9:
         a7:26:97:49:97:b0:2d:cf:56:d5:53:33:cf:a3:c6:b7:82:0d:
         52:44:c4:b3:5e:13:06:d4:20:7c:6a:91:bb:df:11:d2:6e:c2:
         41:12:80:69:01:f6:07:29:b0:42:e9:b7:3d:50:0c:8c:e4:c3:
         ce:4e:26:87:9b:0a:b7:e2:bd:81:ba:74:8c:f1:81:39:79:52:
         01:97:ae:c4:e4:3d:80:3c:8f:ee:b3:de:49:b6:c2:f7:fa:b6:
         6e:bf:25:30:33:08:aa:3b:a1:2c:a3:59:5d:a9:a1:1f:dc:ad:
         48:19:4a:c4:c3:ff:99:8c:3a:56:84:49:64:b5:ba:5c:b7:f2:
         5a:38:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----