Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
File:                     TYqYddfQ0SvEenC37emjymTYLTI.cer (raw, json)
Hash identifier:          EPGgVv6vbLdwSGE8/Ts4pDL2LSWZPGcej+XqXXgWFag=
Subject key identifier:   4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521955DC5ABD8BAB710E06DB0DFF73B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 62.122.36.0/22
                          IP: 2a05:7300::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:95:5d:c5:ab:d8:ba:b7:10:e0:6d:b0:df:f7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:f5:58:e0:53:6f:a9:f7:ca:f3:8b:43:0b:
                    03:db:16:7e:a1:01:f7:4f:17:d8:22:f0:07:ad:87:
                    24:3f:3d:4c:d8:08:e8:ba:5a:a4:73:4e:d2:ba:c4:
                    5c:83:d5:51:da:e3:92:41:fc:51:2b:ee:21:bd:f4:
                    0a:52:47:05:30:29:be:10:c4:71:ac:60:15:42:d5:
                    68:a7:63:51:d1:22:e4:41:7e:6c:d0:82:ce:40:53:
                    79:d8:f5:76:a7:15:fb:df:fb:17:43:05:54:ca:a6:
                    b1:51:de:f0:f9:cd:da:ac:5e:4e:12:e2:d3:0f:67:
                    b5:4e:0c:25:89:f6:15:ff:8d:2f:1b:62:ce:2c:7c:
                    ac:4b:25:86:bb:a4:b6:c0:b0:f0:f9:af:98:df:1f:
                    cf:1c:39:ed:d5:6a:75:2f:b7:2c:e9:a5:e4:c2:d0:
                    3a:c2:f4:bf:9b:f6:21:fc:56:75:89:63:d9:ea:d7:
                    58:67:06:c4:be:c1:1e:99:52:27:b3:e2:f8:65:9d:
                    ec:e8:38:82:58:2c:d9:aa:66:e8:38:57:f5:97:f8:
                    82:85:0c:1e:d8:09:ed:74:b7:99:23:aa:e2:a5:2c:
                    ef:a2:81:d3:43:23:20:28:cb:78:d9:0d:a3:5c:8c:
                    72:6a:fe:1f:7b:43:1d:ae:db:e1:a0:6f:bb:80:89:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.36.0/22
                IPv6:
                  2a05:7300::/30

    Signature Algorithm: sha256WithRSAEncryption
         87:19:b6:eb:fc:a9:c9:40:43:97:03:2b:32:18:59:a8:55:16:
         9c:5e:d0:96:44:62:38:63:b5:7d:70:22:0b:1d:ba:54:d3:ed:
         13:85:6a:a2:b6:ec:01:76:9e:db:09:61:63:f2:05:13:c0:91:
         ff:1f:71:66:83:6a:63:19:b9:89:8f:b4:62:10:92:0e:0c:ec:
         1d:07:8d:51:fd:48:04:09:cd:b1:b6:ef:13:74:8c:1b:20:14:
         83:06:b5:2e:a2:15:01:c2:30:4c:95:8b:ff:4b:13:d6:c4:0f:
         15:cd:72:8e:05:a0:6d:0f:9c:ed:48:73:5b:f9:9f:74:bc:66:
         7c:9a:ef:24:24:ce:85:18:cd:9b:fa:03:c3:f4:cb:d8:ab:cd:
         95:6a:d4:41:03:76:3d:66:ca:0e:d0:84:c7:e7:a2:76:16:04:
         95:80:79:58:1e:55:1d:1e:88:12:96:98:81:d3:76:f8:ce:cf:
         6c:bd:78:05:aa:fb:61:0e:f1:b1:c7:1c:65:09:58:b1:13:95:
         27:f9:3a:d3:2b:b4:40:04:e1:46:af:e5:e0:c6:bf:d6:66:9d:
         4a:ac:27:73:8c:fb:f0:59:95:32:89:a0:f9:8c:29:22:b2:55:
         d6:30:2b:5d:0a:ef:65:c3:eb:4e:92:8e:68:11:55:de:6f:e6:
         fc:69:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----