Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
File:                     t4FQ8EwyNNv58R4RB5kygC0mj7E.cer (raw, json)
Hash identifier:          FyaGITJzlkVFOyEFFp5LDwGaOtHlFVben1dWh9drvRc=
Subject key identifier:   B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9AF98E3D8448F7A753A8667F27C74
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48261
                          IP: 2a13:9740::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:af:98:e3:d8:44:8f:7a:75:3a:86:67:f2:7c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b78150f04c3234dbf9f11e11079932802d268fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:e9:1e:cc:61:4a:5c:8f:10:46:af:de:39:
                    cc:ca:9f:78:cc:89:c0:03:7e:3b:d1:1b:85:3a:a9:
                    35:bf:8a:d9:79:ef:d5:d5:db:9d:98:d4:07:79:80:
                    67:6c:c1:4f:8b:f6:21:4d:93:e1:3b:b6:fe:2d:da:
                    86:59:80:a1:a0:54:5f:f7:98:04:59:1f:5c:0e:df:
                    8f:32:36:29:5e:dd:79:94:ae:da:9f:19:4f:12:cd:
                    13:07:5f:f2:2e:58:03:51:ab:15:a9:0b:fc:c5:ce:
                    83:14:84:1a:87:c5:03:36:7c:2b:eb:29:df:c3:b9:
                    b0:e7:fa:1d:1b:aa:a9:8f:ec:4c:e9:fc:21:da:0d:
                    8d:d1:b1:5a:7b:f8:34:d7:48:ca:f0:ad:59:44:81:
                    9a:62:c2:47:a5:44:fa:95:69:f1:fa:a3:c3:29:fd:
                    51:fe:49:e6:e5:c1:8c:61:97:66:a0:f5:16:ca:18:
                    dd:99:ec:8e:a1:d3:52:32:63:58:be:ad:ce:a1:a6:
                    b8:f7:5c:fa:11:0d:ce:65:01:28:db:e8:d6:c9:1f:
                    69:fc:46:a2:86:73:78:95:6d:e2:7d:00:cf:08:18:
                    ae:5b:56:14:9a:48:a7:4d:d1:32:a2:2f:f1:df:b9:
                    4f:6f:d3:c5:06:ed:06:c9:8f:86:df:ef:b2:b6:06:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48261

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:e7:db:d0:3c:21:6c:0a:fb:b2:80:d4:6a:6b:8d:06:cb:
         2c:92:65:b3:bd:24:2f:f0:4c:80:ef:54:ed:59:9c:0c:c6:d6:
         ca:ae:a1:e5:38:92:3e:e8:c1:10:1e:a4:58:5b:7c:28:8b:ce:
         80:0a:94:3c:26:51:ab:5e:f3:17:95:56:a2:2a:6a:8b:63:a1:
         04:50:5a:a8:79:57:f5:ae:dc:14:5b:ad:af:49:a4:83:e1:53:
         bb:42:48:dd:0f:fb:aa:84:8c:5f:cf:a9:f2:c3:29:d5:03:db:
         a9:f9:b2:ff:dc:9a:13:24:e3:95:d0:40:da:0d:2b:a9:3b:7b:
         ba:9f:9e:6d:f6:e5:57:03:9b:60:12:ac:56:0c:f6:e0:d4:6f:
         c9:2f:a6:9f:68:a2:16:d6:1c:62:2c:47:a3:8d:a3:9e:6e:38:
         f7:29:08:3c:44:00:5b:37:27:ae:31:71:a0:7a:9e:c1:10:e3:
         5d:0d:ca:b2:0a:96:9e:31:a3:e2:bd:61:db:69:39:76:e2:73:
         f5:92:4a:1f:15:93:ed:05:0d:e3:13:c3:d0:0b:e8:cf:e0:0b:
         85:1c:f2:01:ac:c2:d9:99:f5:0f:4a:df:f6:0c:16:6a:77:91:
         2b:65:35:49:33:b3:70:62:96:c5:e6:c2:41:af:2a:ec:ec:f1:
         fe:78:7a:c6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQm2a+Y49hEj3p1OoZn8nx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzgxNTBmMDRjMzIzNGRiZjlmMTFlMTEwNzk5MzI4MDJkMjY4ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCnpHsxhSlyPEEav3jnMyp94zInA
A3470RuFOqk1v4rZee/V1dudmNQHeYBnbMFPi/YhTZPhO7b+LdqGWYChoFRf95gE
WR9cDt+PMjYpXt15lK7anxlPEs0TB1/yLlgDUasVqQv8xc6DFIQah8UDNnwr6ynf
w7mw5/odG6qpj+xM6fwh2g2N0bFae/g010jK8K1ZRIGaYsJHpUT6lWnx+qPDKf1R
/knm5cGMYZdmoPUWyhjdmeyOodNSMmNYvq3Ooaa491z6EQ3OZQEo2+jWyR9p/Eai
hnN4lW3ifQDPCBiuW1YUmkinTdEyoi/x37lPb9PFBu0GyY+G3++ytgbaSwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFLeBUPBMMjTb+fEeEQeZMoAtJo+xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2I1OWE4
Yi04NzUzLTQwOTQtYmJhNy1lY2NjMmMxYjFjMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYjU5YThi
LTg3NTMtNDA5NC1iYmE3LWVjY2MyYzFiMWMyMy8xL3Q0RlE4RXd5Tk52NThSNFJC
NWt5Z0MwbWo3RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhOXQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAvIUwDQYJKoZIhvcNAQELBQADggEBAKQi59vQPCFsCvuygNRqa40GyyySZbO9
JC/wTIDvVO1ZnAzG1squoeU4kj7owRAepFhbfCiLzoAKlDwmUate8xeVVqIqaotj
oQRQWqh5V/Wu3BRbra9JpIPhU7tCSN0P+6qEjF/PqfLDKdUD26n5sv/cmhMk45XQ
QNoNK6k7e7qfnm325VcDm2ASrFYM9uDUb8kvpp9oohbWHGIsR6ONo55uOPcpCDxE
AFs3J64xcaB6nsEQ410NyrIKlp4xo+K9YdtpOXbic/WSSh8Vk+0FDeMTw9AL6M/g
C4Uc8gGswtmZ9Q9K3/YMFmp3kStlNUkzs3BilsXmwkGvKuzs8f54esY=
-----END CERTIFICATE-----