Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
File:                     Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer (raw, json)
Hash identifier:          Fx/R3ah7Z87qLyHRPltMZ2b7G18pQ2dMbh98wPCYodU=
Subject key identifier:   4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942444C6A710ABBD28B44E2158C5E7C0EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204810
                          IP: 185.239.56.0/22
                          IP: 2a0c:4b80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:c6:a7:10:ab:bd:28:b4:4e:21:58:c5:e7:c0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:b9:7c:16:63:ed:27:a9:d2:66:22:b4:cd:
                    12:74:36:63:21:ff:ec:7e:3a:f0:fc:65:7c:33:49:
                    a6:2c:6c:f8:77:65:a0:96:ce:63:4f:d7:77:0b:87:
                    99:8a:7b:4a:8b:17:2a:7c:2b:0e:02:74:6a:47:20:
                    bd:99:03:c1:72:b6:b6:fe:4e:c3:c8:d4:31:99:f8:
                    81:dc:90:68:90:66:60:37:2e:d6:c9:37:64:07:d1:
                    cb:ce:0b:20:79:b5:4c:05:46:81:3a:a3:df:25:b1:
                    fc:97:52:06:1d:1f:63:b8:9a:2e:57:33:f3:c9:c8:
                    d3:b1:ae:1f:a9:b2:d4:36:99:ad:ea:2c:f6:8a:ee:
                    2f:30:83:7d:91:68:93:9e:28:fe:49:3d:15:a6:e8:
                    4a:f1:20:91:1c:10:11:f2:dc:12:03:2f:b1:90:b2:
                    1d:6c:9d:85:9c:39:8a:87:f5:b7:5f:14:9b:ce:18:
                    1e:b4:01:01:bc:73:68:81:2e:fc:34:15:90:76:6c:
                    9e:b8:b7:ad:a2:fd:06:a4:bf:48:ce:81:80:fe:dc:
                    40:4d:97:87:a9:ed:0b:ef:23:22:36:8a:42:e5:79:
                    3b:86:e7:1c:bc:17:1b:14:3b:42:8c:30:bb:41:c4:
                    0c:ce:9a:0f:37:2f:a8:cb:b8:2c:56:8e:00:d4:0d:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.56.0/22
                IPv6:
                  2a0c:4b80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204810

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:77:82:51:bb:87:df:25:56:ef:95:ef:74:ba:60:88:23:
         dd:79:84:0d:e6:a1:43:b5:b2:38:9b:35:9c:86:99:e1:44:e8:
         6a:db:a9:3d:ad:87:4f:5c:45:0b:95:81:da:5b:16:42:7d:3d:
         2d:f7:42:3f:c1:e1:73:db:73:8d:06:0e:fe:13:83:85:fc:1e:
         aa:03:0f:63:75:bf:54:16:1e:27:12:ea:f5:a4:67:34:08:bc:
         9f:b3:99:ae:a2:0c:50:e1:7f:c4:80:35:17:5f:1a:96:7d:11:
         82:61:27:2b:3e:57:e3:72:90:8c:32:53:0c:54:37:b4:61:b9:
         84:28:32:05:c6:b9:5a:5e:e5:f9:79:43:30:32:dd:e2:c2:0f:
         eb:0b:fb:3d:51:22:f1:99:06:c6:b6:4b:4a:52:01:db:92:4a:
         4e:b3:c6:b8:70:ef:4c:2f:fd:4b:a0:1f:fe:85:4e:4c:40:7a:
         25:80:ef:81:50:d6:5b:d2:2c:bd:68:54:37:63:bc:0b:f1:8d:
         14:c1:61:d2:19:24:29:94:c0:d5:34:c3:37:72:6f:74:81:d0:
         2e:4f:7d:87:08:aa:7a:95:d5:e5:16:08:92:b3:c9:52:4b:7c:
         44:64:55:2c:c0:eb:1d:d3:b7:42:4b:ac:6d:6d:bc:cb:d2:5b:
         00:78:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----