Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
File:                     TweIqtIqxDcNUYy3-53-cktB-Vc.cer (raw, json)
Hash identifier:          CxDWwF14FITH9TrYhkM2HzocKj4hcwNlynAzhzFueJ8=
Subject key identifier:   4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D96608206BBF749FF6E5AB116F999C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211935
                          IP: 2001:67c:291c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:66:08:20:6b:bf:74:9f:f6:e5:ab:11:6f:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:1d:47:ce:1d:bf:da:28:b1:58:cb:a2:dd:
                    24:95:a6:71:e1:98:07:6a:d4:ee:eb:1c:9b:93:5e:
                    05:6f:59:d1:55:10:cb:29:e8:e5:c7:17:8c:30:93:
                    51:9d:54:0b:cd:2d:8b:e3:6b:f1:49:37:aa:2d:3b:
                    cc:55:bf:cd:32:fd:41:dd:e1:df:2e:61:01:2d:93:
                    c6:fe:0f:8b:0b:76:11:53:fa:87:f6:ff:a8:ec:f5:
                    5d:16:7c:42:8c:96:12:68:1b:d7:df:5d:30:03:dd:
                    be:e2:50:c3:46:74:5b:f8:cf:d3:db:1b:99:e2:7f:
                    7a:1a:e6:21:ad:04:3d:24:5c:63:26:82:aa:b8:59:
                    21:5f:41:68:32:38:32:b1:27:4b:3c:76:6e:52:71:
                    81:d1:65:ad:07:2f:55:a3:12:50:59:af:7d:e9:55:
                    bc:ff:6d:96:83:9d:57:d6:cf:d2:8d:c0:5b:ba:ab:
                    35:48:3c:cb:26:d4:0c:d3:b1:ef:ad:4d:35:65:7e:
                    0e:cc:bf:e4:36:d4:dc:2f:aa:8c:2d:e9:ae:9d:66:
                    bb:02:0a:e2:01:6e:84:a8:f8:ae:4c:8a:bc:0b:1b:
                    ec:da:ce:83:5b:1c:a6:b7:26:38:53:e0:2d:5a:12:
                    d0:b8:69:30:18:e1:02:c8:ac:46:b0:2f:6e:b9:5a:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:291c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211935

    Signature Algorithm: sha256WithRSAEncryption
         59:38:63:1c:53:41:95:a2:d1:e4:41:82:5a:42:f1:20:6a:9e:
         bb:ec:c8:a8:67:81:ef:e6:63:38:13:aa:75:e1:ea:29:a3:2a:
         58:b5:8f:e2:f6:00:0d:75:d5:5f:ec:59:ab:4c:2a:68:ef:4c:
         79:ca:57:68:2e:88:d5:f4:9a:03:9f:c0:45:23:1a:bf:80:73:
         a8:da:36:92:a5:40:96:f3:40:3b:83:dd:cb:f0:34:73:56:ce:
         0a:d2:f6:27:20:0c:05:e5:87:61:26:04:72:02:27:e4:a5:2c:
         dd:d2:15:10:2d:17:90:ec:29:0d:fb:61:26:85:ce:7c:99:0f:
         be:3c:89:8a:a2:ea:ac:3e:79:cd:ba:8e:5d:ef:c3:f1:07:78:
         1a:26:89:5c:bf:e9:88:8a:61:94:87:0d:34:9f:db:a6:c7:99:
         e9:34:f6:7e:0e:2b:0a:c7:e3:c7:73:da:d5:74:e3:85:5c:de:
         59:d2:a2:b4:af:5c:91:e9:1c:fd:29:7b:8d:39:2a:78:c6:f8:
         d5:c0:95:8f:cb:8d:92:85:84:17:97:04:fd:d9:2d:41:17:b8:
         21:bf:24:d0:2f:0e:e2:ae:38:5a:ad:c8:b5:56:bc:4c:30:af:
         1b:a0:aa:06:d1:88:c3:df:af:b7:a6:04:24:54:d7:58:01:97:
         a1:f7:cf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----