Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
File:                     TIl_GjSX674nueLw1vPq4rvmiyc.cer (raw, json)
Hash identifier:          3UhYTIoEvr5uv1ihEkR6qqKxKi+M2BzkId5cc9RDiM0=
Subject key identifier:   4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427478F123EA6C843CCA81C68ABCCEBD5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 95.141.255.0/24
                          IP: 2a13:46c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:8f:12:3e:a6:c8:43:cc:a8:1c:68:ab:cc:eb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:45:30:c2:d4:dc:d9:e2:ab:e0:d2:a9:7f:
                    55:50:d2:75:50:f8:05:57:87:3c:6a:cd:de:aa:6a:
                    81:91:bf:3f:7b:06:cf:28:ca:0f:36:c7:9f:9a:b2:
                    27:f9:35:6e:d8:31:76:37:81:9d:5d:a8:bf:ba:fb:
                    70:ff:05:c3:f9:5b:7a:51:de:37:b5:c4:a2:28:61:
                    dc:4c:07:c1:6d:4a:9e:3d:82:35:8e:0a:2c:9b:66:
                    4f:32:49:03:ef:99:3e:57:00:a9:b2:ca:95:93:9c:
                    14:aa:8a:44:dc:ec:90:9e:da:cf:0e:b7:7c:7f:9a:
                    1f:8b:07:f5:17:7f:06:09:a0:e9:eb:cc:90:c9:59:
                    02:fd:19:67:87:5a:aa:db:d2:3f:23:4e:d6:b3:fb:
                    93:9d:9b:37:5a:41:e0:7b:6a:8e:b7:75:a7:d9:bc:
                    d3:bd:c4:7d:29:26:ab:80:60:a4:0a:3f:fd:de:79:
                    11:c4:a9:a3:cf:35:30:85:bc:8c:0c:54:5f:2e:dd:
                    06:0d:41:c3:6e:e1:20:d7:b9:f5:8d:7c:df:39:af:
                    b9:29:fe:5b:44:fd:df:12:51:41:fd:52:80:40:be:
                    ae:e3:15:93:7f:bf:b2:92:58:94:96:9f:24:4d:2d:
                    41:d4:f5:3a:75:0a:c6:7b:e4:0a:3e:6f:cf:a4:f9:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.141.255.0/24
                IPv6:
                  2a13:46c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:19:ae:7f:77:11:e2:7c:05:1e:96:c8:0c:7f:b9:7d:29:
         ee:d4:3a:a6:05:da:c9:42:32:82:d7:0b:d9:5e:5c:92:0f:0c:
         97:c5:92:bc:97:55:24:0e:b0:a0:e8:f9:64:65:3f:6c:a6:aa:
         f2:57:3a:f7:55:86:01:53:30:e8:6f:29:e3:1e:26:d5:c8:d2:
         e7:cf:54:da:ea:05:31:f6:13:c0:be:7a:e6:67:1b:e8:4b:e0:
         37:a7:0f:0f:9a:c8:a9:a6:aa:17:55:8e:03:d3:49:46:2d:a6:
         17:08:20:75:23:93:83:1f:b5:fc:f6:59:ff:71:75:97:5b:f5:
         fd:22:31:4f:88:60:49:a1:11:6f:1e:03:45:6a:06:fd:1c:20:
         ec:80:8b:3e:4d:81:4b:3b:c1:b0:70:23:fd:24:ad:fb:bf:16:
         aa:d2:13:c4:cf:46:91:bc:43:16:81:e5:af:e1:48:e0:4e:ca:
         62:cf:7c:7e:4e:b4:ad:60:d8:38:37:13:11:b5:6c:01:9f:66:
         14:e5:f6:be:66:fa:28:40:4a:1e:bd:cf:eb:45:c7:86:38:c7:
         8c:71:53:9d:39:3f:2f:e2:fc:e0:c7:69:4a:a5:65:9f:4d:fc:
         f9:98:9f:8b:15:5b:11:18:c2:9b:95:da:bb:ff:64:39:d8:dd:
         00:24:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----