Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
File:                     TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer (raw, json)
Hash identifier:          vcseFNP5yn+Q4wcAGVpxRd7lDWDybSbkC88PEQglKXc=
Subject key identifier:   4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA5F70C865D24BEF4D0B589FEC613B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.228.146.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5f:70:c8:65:d2:4b:ef:4d:0b:58:9f:ec:61:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:82:f1:c7:0b:f2:7d:a4:92:60:4c:bb:ff:
                    6e:83:4f:7d:c7:98:d2:a3:5d:ab:90:47:b9:c6:5c:
                    3c:3b:b9:01:b8:52:2e:a9:cd:fd:6a:12:19:cf:1c:
                    e3:20:34:07:55:31:b7:07:a0:99:82:8b:14:c6:f5:
                    5d:85:bd:76:f1:1c:ea:00:fc:eb:77:e8:79:15:ec:
                    4f:97:8b:c4:19:d2:ff:08:0f:f2:9d:ec:62:1c:a2:
                    e5:b4:10:4f:25:f7:04:2b:25:54:3e:da:4a:7d:21:
                    22:ab:9a:38:3b:e5:d9:88:47:87:83:c5:d6:00:c3:
                    2d:66:00:24:9e:25:d8:67:f7:31:60:8a:6c:f5:37:
                    f8:d9:63:7d:06:93:4f:d9:8a:64:90:c0:53:ab:7e:
                    3e:e0:d3:18:da:77:6f:45:5b:51:f5:65:f6:f4:7a:
                    38:a4:25:46:75:7f:1e:88:5b:3a:81:f4:f5:b3:6a:
                    9d:d1:be:43:4b:71:c9:c0:99:5f:28:6f:92:1c:4e:
                    13:93:36:27:87:5e:07:a7:60:77:19:cf:9a:a7:a3:
                    89:94:4e:63:2d:38:50:72:9b:0e:c5:60:f3:c8:59:
                    c4:bf:83:9f:7f:28:a1:47:ab:87:8e:95:06:46:77:
                    78:60:7f:c6:21:c0:51:62:68:de:4a:64:78:31:9b:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:7c:f5:09:ab:3b:0f:d3:ac:ac:e3:6b:54:56:7d:1b:a0:
         3d:b9:9f:8e:dd:04:32:a0:b6:21:69:55:ae:37:20:59:e6:a3:
         e6:37:64:a2:75:97:bf:4c:9a:40:42:25:8d:37:18:7f:f8:4d:
         2a:cd:7a:eb:f0:9c:98:80:2d:26:c2:24:fc:9f:a9:c3:e3:e7:
         a8:af:2d:8b:37:8c:ea:ee:e4:db:3b:1c:3c:cd:40:ca:86:60:
         67:d3:c2:64:db:ac:68:7b:7c:c4:0d:f0:cc:96:7f:7a:1d:79:
         22:7e:f5:4b:49:ad:1f:44:af:13:e7:2f:e4:9f:35:d7:a5:96:
         fb:e7:e2:eb:f2:bd:59:76:b4:81:4b:bc:e3:0f:17:30:ce:07:
         62:f1:40:14:96:64:5d:5e:13:f9:05:b0:fe:a1:1c:ec:89:ea:
         9e:68:18:ce:34:1d:ce:78:84:6e:0c:52:5a:b9:ce:9d:93:c9:
         93:3e:ad:02:cd:a1:6a:93:15:52:d9:e0:a7:2e:9a:cc:a5:a2:
         b9:64:6f:23:07:95:34:bf:e9:4c:19:af:5e:9e:a7:be:ec:ad:
         fc:7f:2f:b2:ae:ad:3a:c5:31:2b:6c:75:0e:58:09:74:39:23:
         97:48:40:a4:d3:31:0e:8d:bd:0d:d5:e7:68:bb:e1:99:46:e2:
         f0:ed:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----