Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
File:                     jTDnckXCFacL5O9X0DvR2NTbWJg.cer (raw, json)
Hash identifier:          FexV7lNhPbB5Bir2ccZEb7AEdDDg1Q4CdTxfQuKqyPE=
Subject key identifier:   8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019620210A53BC2712D278E13D9A37EF54B2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 14:35:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:ff8::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:20:21:0a:53:bc:27:12:d2:78:e1:3d:9a:37:ef:54:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 14:35:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:c9:04:f3:95:fd:59:f7:ef:e2:f1:b0:8c:
                    4d:61:e2:a1:b5:0a:02:e5:2f:7d:50:31:03:11:a3:
                    71:bd:e9:2d:cb:fb:d6:f3:27:88:8d:95:40:ac:5e:
                    69:11:08:2f:52:ee:94:00:c6:6c:f7:b1:4d:d5:a6:
                    b5:58:f5:cb:d8:cd:f3:2d:4a:80:f8:75:09:ff:2d:
                    6e:48:93:4f:d4:64:cc:7e:15:26:4e:75:1b:3c:7b:
                    eb:89:34:b9:06:91:22:c0:17:ce:be:13:fe:c8:d8:
                    c9:8d:d8:73:ae:5f:58:3e:9c:cd:9e:b9:a4:6c:94:
                    53:c9:65:1c:0a:c6:e6:97:63:ee:b3:8d:a0:28:3e:
                    65:25:be:95:fc:8a:68:06:34:b8:e4:f3:94:43:ab:
                    71:4f:ad:00:3e:b9:7f:72:f9:4c:52:eb:7d:b2:06:
                    10:fa:77:29:2a:4a:fb:18:3f:2c:1a:01:fd:96:8a:
                    c0:45:f7:dd:ac:75:81:00:1b:f5:37:01:64:34:bb:
                    d7:b0:f9:00:5d:17:b6:5e:f9:dd:d5:b2:a6:2f:a3:
                    6f:98:ce:a1:0d:11:11:ba:a1:70:b2:f4:35:5a:eb:
                    96:d0:29:43:20:07:cc:d5:86:bd:2b:33:f3:11:51:
                    f5:18:8e:26:62:03:f3:b2:6f:9f:7f:a7:d7:34:6a:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:ff8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:ac:82:e8:70:5c:b6:f1:49:ca:27:06:0e:01:a3:b9:e5:
         9c:96:61:39:14:78:92:76:05:f3:93:a2:42:66:e2:f1:7a:fe:
         9b:39:a3:ac:91:88:77:4e:6d:63:62:b9:25:51:46:ab:c7:6b:
         09:0e:e0:5c:70:6c:22:34:58:3d:cc:36:c9:c6:7d:9b:9a:5d:
         2f:a3:d5:e0:a9:2a:87:05:e3:47:42:2c:12:26:16:ae:f5:6c:
         dc:9b:ba:42:80:7d:71:94:8d:6c:06:dc:fd:4e:2d:ba:dd:16:
         80:3e:40:2f:36:9a:8d:f1:59:b4:a7:48:97:8a:12:5a:49:a5:
         15:57:b6:c7:96:98:98:e9:df:fd:81:28:02:f3:b7:88:69:d1:
         71:55:91:ca:b6:14:8b:49:fe:54:d1:f5:ae:a6:5a:da:01:aa:
         f1:36:12:9f:0b:b1:a2:41:41:e2:3a:85:af:58:22:da:bc:6e:
         8b:df:4d:13:1d:63:34:a0:b5:dc:f3:3f:79:58:03:2e:aa:79:
         06:e6:3b:dd:a0:6c:29:24:25:73:fe:e2:f2:30:d5:bc:58:be:
         d3:7d:63:11:13:c9:0e:4a:98:e0:a6:d7:84:67:b4:07:a4:63:
         ce:98:59:23:61:3b:0d:38:9f:bb:21:15:02:95:00:dc:70:d1:
         cf:57:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----