Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer (raw, json)
Hash identifier:          ItfK15sYWHtacc03VtJB2DX/P3xOimBQ+ipiK8w5GqM=
Subject key identifier:   4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942669FFB8C60F69D53E27198C5AE31E19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 141.41.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:69:ff:b8:c6:0f:69:d5:3e:27:19:8c:5a:e3:1e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:32:cb:b8:32:ae:b2:4b:72:a6:c2:cb:fe:
                    33:fd:b7:7b:19:30:ab:5f:f0:f8:4f:86:dd:3a:74:
                    0d:11:fe:90:12:39:08:fb:93:8e:80:59:9b:7e:2c:
                    07:0f:13:29:4b:b7:12:00:0a:e9:77:fb:af:60:92:
                    5e:c2:56:16:c1:33:c9:a8:cd:95:36:8d:fa:ce:d5:
                    9b:79:38:af:b4:a0:37:6e:06:48:4a:0a:66:35:de:
                    03:da:00:99:98:b8:42:01:da:0a:77:d1:d6:05:45:
                    5c:d8:74:2b:7f:ac:88:3b:9e:de:c1:a1:73:e9:77:
                    89:78:d8:b3:01:86:77:75:e3:ce:c2:31:73:35:0b:
                    d1:c6:25:1c:c1:fa:72:39:ff:f0:50:fd:76:41:56:
                    53:35:42:ce:84:8e:3b:ab:0f:d1:ba:a3:1d:de:8c:
                    79:0a:67:7e:c1:77:c7:8f:b1:e5:5e:80:e4:82:c9:
                    cd:8e:27:04:9a:2b:93:00:c5:c9:53:d2:62:65:97:
                    f7:e2:6b:cb:5c:5c:ba:97:4f:66:7c:59:4a:2d:8e:
                    01:c3:d3:0c:f4:56:33:a5:ec:0d:d5:13:eb:94:c3:
                    69:eb:f1:c7:1f:7f:94:f5:04:92:60:c9:70:65:79:
                    8b:8f:05:d6:45:fc:ad:b3:e3:aa:be:ac:62:8f:2a:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:55:a3:22:f0:f7:6f:55:f9:e2:a8:3a:fc:dd:c7:a9:f6:ae:
         e7:7b:ae:97:3a:ee:30:c5:84:84:a3:63:08:1f:c6:6b:54:1f:
         14:2c:a7:eb:b0:00:aa:10:e5:2c:cd:56:d1:f2:d2:76:84:05:
         03:65:fc:4b:25:53:21:bf:ee:68:45:44:09:0d:50:29:66:b5:
         35:16:11:d8:93:85:6e:84:4b:65:7d:e2:c0:fc:b4:9b:03:c0:
         61:b2:b0:09:00:e3:24:6c:ca:d4:34:3b:75:19:12:27:78:e3:
         20:d7:e5:96:4e:bc:16:7c:7d:ad:61:49:ff:37:1f:8f:ff:34:
         c7:50:d6:c1:eb:f5:eb:d0:36:1c:a2:83:01:c0:e1:64:2a:4f:
         a9:69:c7:c7:23:1a:4a:69:11:1c:f5:17:dd:ea:11:84:ca:4a:
         63:95:6f:91:29:7e:77:d7:04:61:c4:f9:5e:56:1c:3e:2a:c8:
         3b:33:f1:57:bb:73:b5:ad:fe:16:d6:17:63:38:bf:18:71:81:
         1a:78:eb:d0:a6:b0:47:66:2a:8f:22:53:43:6b:89:01:7e:e1:
         e2:2a:78:a9:23:44:1e:5a:06:0a:cb:69:75:7b:3b:d9:8b:b2:
         a2:83:7d:ae:97:cb:da:13:3a:8a:e6:f6:80:f9:30:66:00:26:
         2a:07:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----