Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
File:                     TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer (raw, json)
Hash identifier:          yOXV5zuPn7A0RGsqnqfSWZwhnxSF2KRXn+W26C/th3E=
Subject key identifier:   4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1B3530759FC4A2F46D650D7DF37B9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51307
                          IP: 194.213.118.0/23
                          IP: 2001:67c:298::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:b3:53:07:59:fc:4a:2f:46:d6:50:d7:df:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:6f:51:31:76:a0:d8:d0:a4:77:ac:ba:e6:
                    bd:78:50:d9:8c:38:03:ff:3e:8e:bf:43:2e:b2:8e:
                    87:fa:68:38:68:5d:03:38:1d:d3:49:86:1e:95:f0:
                    01:c2:ff:d8:18:d1:ef:bd:bc:f0:c4:98:b6:5f:43:
                    d6:e7:e2:ee:04:cb:2a:e6:0c:ca:05:e5:7c:f0:7a:
                    f9:89:6f:8e:66:5c:af:14:4b:dc:dd:2e:f3:74:82:
                    c5:89:74:37:d4:8d:46:0e:cf:19:c9:f1:d4:ad:7a:
                    a3:8f:07:8d:57:b5:e1:12:39:94:eb:ca:98:a7:b2:
                    d3:d2:02:98:07:58:8c:9b:c5:d5:f5:44:77:3a:b2:
                    b6:45:78:9c:d8:68:05:89:0a:13:f0:20:4b:fb:c5:
                    63:78:15:ad:04:4e:0e:c6:4a:d8:de:58:0f:2f:d4:
                    6d:0b:ca:4d:43:32:f0:2b:2f:13:13:7b:88:88:96:
                    5e:39:d7:08:f6:46:26:9e:99:1d:25:80:57:4a:dc:
                    67:7a:13:a6:87:ee:a8:06:93:9a:c9:fa:c9:55:3e:
                    24:0d:80:43:86:8d:41:07:de:a4:a2:ee:f6:fd:f0:
                    a4:d9:91:9e:d7:d8:3b:9c:41:29:8c:fc:0c:a5:12:
                    9a:ea:34:56:0b:c3:45:a0:5c:6e:17:da:f9:80:d2:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.213.118.0/23
                IPv6:
                  2001:67c:298::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51307

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:f8:64:a8:ab:ce:0e:4c:c0:7d:5e:83:32:d2:c4:d9:ac:
         77:55:e3:64:0a:01:7c:a5:44:05:2b:fe:0a:03:e1:f1:92:9f:
         b0:1a:7a:2e:35:2a:67:0c:6f:c3:34:21:1e:df:1b:d4:71:b3:
         10:94:29:1d:fe:7c:c8:20:3a:9b:f5:b8:3e:2f:db:44:ef:5e:
         19:b2:35:3d:f5:2d:28:d5:9a:24:9e:d9:90:6d:96:cc:ae:54:
         1b:27:b9:d6:4a:ff:94:ef:23:27:1f:52:7d:fa:18:4a:d2:f0:
         c2:6b:95:62:ca:a9:e0:a0:da:a8:dd:f4:0c:6e:35:de:20:4a:
         77:31:38:de:e6:23:d4:7d:e3:3a:1d:74:7e:09:50:dc:be:80:
         3e:7a:18:50:4a:38:64:2f:1b:7f:77:d1:9a:eb:6d:5b:0c:be:
         21:9a:66:aa:42:d6:70:d1:f1:31:b1:59:5a:4d:d4:f7:5f:0c:
         3c:90:e5:1e:67:ad:af:cf:f8:cf:38:5b:82:89:28:80:89:4a:
         c5:77:35:92:d3:d9:a9:dc:ee:55:52:50:bd:48:61:d7:81:b8:
         94:b1:6f:d6:6d:b8:d2:f2:8e:36:03:10:92:b0:dc:b7:ab:69:
         c7:f0:5f:bf:62:01:6a:1d:2f:86:82:4e:12:e6:01:f1:95:99:
         67:0b:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----