Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
File:                     TeLcLByThHv5efmwEO3EzahJ9Pg.cer (raw, json)
Hash identifier:          Wm0id28xhMZaH/Lk9TWHOQELDLhKI3F9x5lctjS+tqw=
Subject key identifier:   4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420682B206D16B87A72382628F1560964
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:2e64::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:2b:20:6d:16:b8:7a:72:38:26:28:f1:56:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:17:b4:67:ea:cc:51:5d:33:c3:a9:19:6d:
                    2d:61:d4:52:d0:f2:bd:ce:f7:28:12:2d:43:29:f3:
                    d0:5c:73:65:f4:e1:f8:ad:d4:46:3f:3d:c4:66:51:
                    ab:77:7a:59:a0:cf:e9:59:4e:c3:bb:7a:f7:6d:42:
                    76:a8:8b:47:77:1d:bd:28:65:50:35:e8:6e:a0:4d:
                    ae:46:24:ab:d2:46:28:73:f9:1c:3f:4a:a8:2e:e5:
                    ec:4f:25:39:67:83:3a:6e:c4:94:35:93:a3:bc:7c:
                    42:50:89:f9:df:7b:fc:6e:73:95:a3:11:43:32:14:
                    fd:7c:e5:c5:98:7e:46:d8:7d:52:3a:d3:8a:d0:2d:
                    6e:61:81:88:07:eb:cd:c4:08:1b:3c:af:49:ec:3a:
                    eb:50:f1:1a:97:7a:ee:0d:18:4b:c3:01:87:ea:97:
                    3e:f2:e3:98:8f:cc:35:91:42:a5:f6:3e:50:06:d5:
                    28:fd:5f:42:08:bd:20:e3:ea:d2:13:39:a1:cf:79:
                    d5:75:e9:49:19:7d:67:25:83:61:c7:1d:7d:e8:12:
                    ab:46:b4:17:80:4d:19:e2:7a:51:30:eb:81:b7:dd:
                    36:17:34:18:e4:ce:bd:d4:85:f1:c0:a2:24:c9:a6:
                    af:ed:3f:8a:2e:b0:be:19:10:c9:13:ce:40:0e:3d:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2e64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:bc:bf:cc:bf:a6:1d:8b:48:f1:38:cf:73:39:3c:2e:1f:71:
         af:db:f2:47:b5:d5:73:bc:6f:c8:d6:78:85:05:5a:ab:d1:fd:
         9b:3b:7a:a2:3b:32:77:62:01:df:55:ac:5f:8c:fe:ab:b9:5a:
         4c:f9:e3:95:3e:63:81:94:bf:b9:c2:2b:24:46:75:b4:48:52:
         e7:d7:1a:89:c9:9a:54:7d:61:57:e4:c2:9b:c2:cf:d1:6f:c5:
         5e:d2:a7:2f:ff:06:84:3d:10:1a:c0:bc:74:f0:3e:ef:bf:b3:
         f9:c6:24:e4:d9:33:db:29:f5:b6:3d:0f:7e:2b:60:8e:96:07:
         aa:f4:32:fa:0b:94:2b:d2:ae:3f:3e:f9:0c:dd:a0:59:ec:f5:
         51:2e:43:25:81:fb:a9:08:1b:b3:49:f1:65:89:4b:3a:11:b5:
         41:37:8d:c4:ca:a9:81:8e:2b:61:20:10:3b:a7:56:42:26:db:
         90:9d:20:6c:5c:95:7e:f8:2c:4e:cb:f3:3e:00:fd:19:c8:81:
         4e:d9:11:68:a6:c0:55:81:c8:92:5a:fe:09:c6:be:43:be:37:
         35:05:06:1b:1f:f2:59:8f:b1:5d:9a:e9:09:d8:73:af:ad:7a:
         91:c9:62:ea:27:26:a9:1f:b5:e4:f6:e3:90:73:d5:33:a7:98:
         03:d8:66:44
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQgaCsgbRa4enI4JijxVglkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGUyZGMyYzFjOTM4NDdiZjk3OWY5YjAxMGVkYzRjZGE4NDlmNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVUXtGfqzFFdM8OpGW0tYdRS0PK9
zvcoEi1DKfPQXHNl9OH4rdRGPz3EZlGrd3pZoM/pWU7Du3r3bUJ2qItHdx29KGVQ
NehuoE2uRiSr0kYoc/kcP0qoLuXsTyU5Z4M6bsSUNZOjvHxCUIn533v8bnOVoxFD
MhT9fOXFmH5G2H1SOtOK0C1uYYGIB+vNxAgbPK9J7DrrUPEal3ruDRhLwwGH6pc+
8uOYj8w1kUKl9j5QBtUo/V9CCL0g4+rSEzmhz3nVdelJGX1nJYNhxx196BKrRrQX
gE0Z4npRMOuBt902FzQY5M691IXxwKIkyaav7T+KLrC+GRDJE85ADj1c+QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFE3i3Cwck4R7+Xn5sBDtxM2oSfT4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzI3ZTFj
YS1lNjFmLTRlOGMtYWQ5Yy0xNDVjMzZlMzgyNzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMjdlMWNh
LWU2MWYtNGU4Yy1hZDljLTE0NWMzNmUzODI3Ni8xL1RlTGNMQnlUaEh2NWVmbXdF
TzNFemFoSjlQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC5kMA0GCSqGSIb3DQEBCwUAA4IBAQCE
vL/Mv6Ydi0jxOM9zOTwuH3Gv2/JHtdVzvG/I1niFBVqr0f2bO3qiOzJ3YgHfVaxf
jP6ruVpM+eOVPmOBlL+5wiskRnW0SFLn1xqJyZpUfWFX5MKbws/Rb8Ve0qcv/waE
PRAawLx08D7vv7P5xiTk2TPbKfW2PQ9+K2COlgeq9DL6C5Qr0q4/PvkM3aBZ7PVR
LkMlgfupCBuzSfFliUs6EbVBN43EyqmBjithIBA7p1ZCJtuQnSBsXJV++CxOy/M+
AP0ZyIFO2RFopsBVgciSWv4Jxr5Dvjc1BQYbH/JZj7FdmukJ2HOvrXqRyWLqJyap
H7Xk9uOQc9Uzp5gD2GZE
-----END CERTIFICATE-----