Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
File:                     jTN8DIVpRrj72vKF9Syt3POK0Kg.cer (raw, json)
Hash identifier:          NUC3sHBeP9b0pbZG/rPuOIkN2RYOZxiTMbwYELeRvok=
Subject key identifier:   8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420686E73655FDC63EC56BEC8F1053ED7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213092
                          IP: 2001:678:d90::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:6e:73:65:5f:dc:63:ec:56:be:c8:f1:05:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:00:58:8a:a6:9f:d2:e2:34:89:10:b4:50:
                    8a:4f:ee:c8:e0:b3:f2:1a:86:1a:61:a3:ef:36:c7:
                    5a:02:2a:17:44:ca:0b:11:0b:9a:50:50:48:f1:33:
                    65:27:51:7b:7b:21:83:d5:01:44:c7:08:78:3a:c6:
                    4a:6a:d8:31:f6:d8:ec:ab:c7:30:4a:3b:96:dd:a9:
                    c3:51:0c:ad:09:cc:95:b0:2d:4d:10:4f:37:aa:8f:
                    f9:b6:fa:81:1b:a3:38:12:1b:3d:bf:1c:cb:4c:70:
                    cf:bf:b2:7d:73:a1:d9:ba:f7:30:d3:14:65:72:5b:
                    9d:92:cd:dd:57:42:91:ac:04:33:96:83:61:ca:fd:
                    31:e4:40:b3:75:90:cf:e3:53:8a:35:ab:f8:71:18:
                    a2:11:6c:21:7e:04:6c:77:28:63:17:81:72:9b:df:
                    d7:0b:ec:c2:65:41:6b:f1:fc:f7:77:a7:f1:bd:19:
                    f6:b7:0e:e2:de:a0:1d:19:b9:c4:b8:9a:41:22:d6:
                    b7:61:45:c4:8c:9a:c6:a3:37:d6:17:dc:a7:87:66:
                    b3:ec:c7:c9:8b:ac:53:41:3c:5e:1a:0b:01:ac:43:
                    77:e1:08:6a:cc:c4:ba:b2:3a:da:fb:58:80:b6:74:
                    f4:f1:2e:d1:4e:e2:9e:a6:f7:95:02:c2:cb:ba:86:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213092

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:10:b1:9c:75:1f:e7:a2:68:8b:3e:59:52:f5:08:71:cb:
         8a:49:ed:94:8c:02:82:31:ed:de:3c:76:a1:43:90:f4:ec:4c:
         32:5b:cc:35:55:1d:f4:13:b1:a9:2c:d1:1d:66:b7:0c:8d:46:
         15:15:8b:91:3f:a2:be:35:ed:2b:13:88:40:62:f4:a6:91:d3:
         21:d9:56:79:a8:08:2d:61:66:e3:9c:24:2d:c9:91:08:35:e2:
         82:92:85:d6:35:ed:91:41:2e:3c:28:2d:be:89:19:ab:ad:ff:
         4c:86:04:8b:04:f6:90:5c:37:77:71:67:b5:5b:e5:72:77:c2:
         a6:cd:a4:ff:7b:ed:28:9d:3f:45:d2:03:de:7c:88:98:02:99:
         35:9c:d3:c4:a0:b5:55:45:9e:f5:19:b9:58:a2:51:d3:0b:42:
         60:3c:83:98:c3:d9:39:6b:4f:c1:25:b2:65:97:aa:7e:c5:14:
         47:51:50:81:2e:64:7b:c1:14:f4:c3:82:8f:b9:fe:ab:62:1b:
         15:38:7c:f0:56:e2:ac:d0:5a:a4:e8:c1:05:d8:8b:d5:11:c4:
         e6:df:99:0e:e0:5c:0f:04:62:28:25:e5:a1:6c:7a:47:c5:fd:
         7e:ee:41:8a:7a:14:6d:4f:2c:75:b3:35:e9:6d:ce:d1:38:52:
         55:9f:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----