Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
File:                     TfLG-lSozC3HHoAs-D9cd2zpdMk.cer (raw, json)
Hash identifier:          WEOly/2L2tDQPkxi8bpN7xcuilWwGj1SQcx7zAZOArc=
Subject key identifier:   4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5D70F063ABDB52D772282BDF7AC4A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 35205
                          IP: 46.28.80.0/21
                          IP: 77.78.160.0/19
                          IP: 185.27.152.0/22
                          IP: 212.37.160.0/19
                          IP: 2a03:ed00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:d7:0f:06:3a:bd:b5:2d:77:22:82:bd:f7:ac:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:76:76:7d:19:f8:f8:2c:36:b5:4d:c6:8d:
                    1c:d8:9f:3b:31:2f:28:fa:2f:d1:81:1d:24:67:94:
                    14:3b:a1:b5:f2:8d:3b:db:2f:63:2d:7b:7e:e7:84:
                    12:01:c6:bf:01:4f:7c:71:f3:78:0f:de:86:1b:44:
                    11:9a:65:42:5e:57:7a:e7:d6:52:9a:15:de:45:08:
                    3a:5f:0f:b7:45:1e:78:4f:d4:9e:b3:8d:4d:85:83:
                    97:3f:e2:2e:e1:5c:ce:d2:ee:91:55:81:40:21:72:
                    25:92:1a:67:ea:7c:a6:a5:8c:ab:50:39:4b:64:df:
                    49:b1:42:e1:34:8f:db:8b:96:57:90:9b:ae:18:6e:
                    80:a4:51:1f:54:d3:f9:74:d5:6e:38:7b:c8:72:d3:
                    70:71:e6:dc:67:92:ba:54:4e:10:8c:6d:1c:38:35:
                    a1:16:04:c9:42:a9:e4:42:7f:a5:7a:bd:d7:37:18:
                    17:08:3d:60:9b:2f:7b:36:1e:d6:c6:a1:0d:1a:b4:
                    13:63:6f:38:bd:29:a3:55:32:8f:9f:74:ec:dc:64:
                    c0:51:77:9f:f3:47:bb:0b:b7:fb:65:b1:f3:63:8d:
                    f4:a6:cd:9e:d2:4b:cc:7e:23:3a:dd:69:c0:8a:3d:
                    30:e3:a1:f6:54:bc:c7:63:e8:7e:a0:3e:0a:57:3b:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.80.0/21
                  77.78.160.0/19
                  185.27.152.0/22
                  212.37.160.0/19
                IPv6:
                  2a03:ed00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35205

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:99:b9:5f:07:44:77:25:99:09:7b:d9:93:29:5c:8e:54:
         d0:02:00:36:81:cf:b6:b2:27:53:28:6b:07:8d:80:14:21:6d:
         be:e3:87:18:bf:8d:31:2a:cc:20:fc:52:04:66:88:92:21:e5:
         8c:1b:b1:a2:45:cc:de:90:2d:c2:e3:ba:dc:90:f8:c3:a0:2e:
         8b:24:17:93:4f:ae:f3:20:a3:4e:72:44:19:b2:6a:3e:d1:4c:
         10:10:f8:91:53:86:79:26:8c:c5:f0:e5:ad:35:37:54:69:70:
         af:bf:24:1b:79:68:f1:f6:8d:84:29:b7:70:c6:54:6a:20:38:
         99:5e:59:98:a5:12:6d:c4:18:7a:fa:41:34:e4:da:c9:19:1a:
         60:17:70:2c:28:68:73:03:f3:18:ae:96:da:93:8c:50:bc:86:
         85:8f:a1:f0:94:77:a9:5a:b4:e0:3e:a6:36:e7:f9:cb:f0:56:
         cf:03:00:d2:2b:a5:60:1c:4c:eb:03:13:5d:08:b0:c7:3c:23:
         09:99:c5:bc:47:3e:6a:61:32:89:1f:ca:b6:54:25:ce:8e:65:
         57:ab:38:85:60:cb:43:70:db:00:6c:6a:00:03:5a:a8:f4:54:
         6f:df:70:eb:b3:93:ed:bf:67:12:2d:c0:90:6a:37:34:84:63:
         b7:91:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----