Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
File:                     TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer (raw, json)
Hash identifier:          7k8yeNVtUiv+nWs8dW0u9Uv9xjDkzbYvv/P9ku7L+Kk=
Subject key identifier:   4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521956B9BDC630A79125368D34A083F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213770
                          IP: 46.36.32.0/19
                          IP: 2a02:25b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:95:6b:9b:dc:63:0a:79:12:53:68:d3:4a:08:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:05:a6:6e:7a:0d:f9:e9:8b:fb:b8:04:61:
                    09:92:e9:d4:b2:9d:f2:df:f6:0e:da:3c:c4:56:77:
                    2c:4c:57:29:fa:8c:6d:b5:9e:51:99:83:d4:6b:9e:
                    32:41:d9:db:90:35:ac:e4:1a:aa:71:79:23:a4:af:
                    89:85:d0:10:37:45:d9:92:69:b5:bb:e0:1c:21:20:
                    37:15:9c:f9:85:77:e9:8a:17:07:cd:34:23:34:8a:
                    1c:9f:36:43:31:26:55:37:f0:24:78:58:5e:ee:30:
                    ad:75:0a:b9:24:37:51:8f:5e:97:a5:ef:5c:0e:ca:
                    47:81:1e:9e:c3:c7:80:9c:da:aa:91:86:e9:08:0e:
                    0a:ee:cf:87:e6:a4:9a:b1:a6:b0:a5:ae:ce:b3:0c:
                    6d:a0:87:83:a8:20:e5:80:ac:c0:00:0a:5c:93:91:
                    9a:fa:0b:91:22:43:1b:4d:ce:3b:dc:f6:3c:da:5e:
                    e9:ab:3a:37:9a:02:06:6e:3e:17:f2:d7:f2:b5:6d:
                    5b:9d:d1:56:09:6c:bf:26:57:a2:50:29:a0:46:13:
                    ba:22:86:10:d0:b9:32:41:d1:a4:7f:e6:d1:75:13:
                    88:d6:7d:88:be:8a:ac:ac:21:6d:9f:f7:01:c2:0a:
                    e7:74:6a:04:57:80:27:5e:57:40:5b:8f:e1:59:4f:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.36.32.0/19
                IPv6:
                  2a02:25b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213770

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:f7:35:bd:71:91:78:46:66:b3:91:97:04:e9:0b:8c:bc:
         d0:a6:c2:e9:3d:e0:19:9f:9f:4c:4e:e6:ea:8b:db:bc:3d:73:
         b7:c1:55:1f:04:cb:c9:d8:d4:d1:c4:ac:22:ba:0d:40:f3:29:
         a1:f7:47:1b:29:da:4a:9a:a5:ec:2d:9f:ef:bb:d5:2a:91:7b:
         e7:4f:ae:31:9b:4d:5c:e9:25:bd:14:99:99:6b:7b:5c:45:0e:
         17:ec:68:76:8f:21:4a:79:26:6a:dd:f7:7f:f1:a2:2f:a8:91:
         a9:ff:41:64:89:ef:f4:f2:15:53:05:31:c6:2f:bb:54:b1:cc:
         bf:50:95:c2:fc:c9:ab:aa:fb:dd:38:14:a9:83:9d:ff:66:fb:
         20:4a:2d:9a:95:29:d9:da:c3:e7:1b:e3:5c:ff:c1:b9:40:99:
         f2:81:17:95:4c:38:35:68:dd:e4:66:a1:5b:30:ce:20:8f:87:
         9f:02:e2:e5:90:15:8c:c0:c3:13:76:8c:62:d2:14:79:d4:61:
         ed:6e:a1:b7:56:a2:e2:f9:90:2f:88:cd:26:6f:fe:64:55:68:
         2b:05:19:62:78:a1:6b:6b:09:fa:ca:82:6c:9f:a3:4b:24:8b:
         dc:26:a1:30:74:95:65:03:d0:69:59:ce:52:88:38:52:87:fb:
         70:90:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----