Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
File:                     tJ61DLi6yS3BduiofPJVUoIhlPo.cer (raw, json)
Hash identifier:          jf1l/rr5mcCgLL87L0IKuWpqvgixV/Xx14Zbc081pCk=
Subject key identifier:   B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C0954A76C82046FEE34EC23DFE94F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199464
                          IP: 185.117.196.0/22
                          IP: 2a06:8640::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:09:54:a7:6c:82:04:6f:ee:34:ec:23:df:e9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:4b:b6:e0:f8:21:67:9f:74:4a:24:7f:98:
                    38:42:57:3f:0b:f3:73:e3:b4:dc:f1:49:c5:c7:31:
                    4a:0a:ca:93:5a:8a:9c:2c:c8:0b:22:39:58:6a:be:
                    52:83:e0:91:2e:e8:e8:3d:95:ee:50:0a:4e:6d:a5:
                    4f:f3:20:99:0b:10:1a:87:85:ea:77:f9:58:1c:46:
                    aa:cd:1a:7a:ef:60:88:04:a5:1e:2b:24:e6:8d:31:
                    a7:3b:9e:0c:52:09:56:d3:b9:ce:15:81:a6:ed:9c:
                    82:e2:d3:b3:b4:c9:f3:be:69:16:f7:5c:8c:99:ba:
                    63:69:a0:c4:14:4e:ec:1c:58:61:21:92:b5:1d:1d:
                    c1:5b:f1:af:16:32:c3:79:7f:20:3d:18:1b:9b:1a:
                    8e:88:61:43:f2:ad:bc:a0:8a:53:6d:fb:93:96:f1:
                    7d:d7:41:08:42:a2:ee:9d:04:db:c2:e9:ae:25:fa:
                    b9:6b:fb:8f:49:5a:33:15:66:34:dc:ce:60:c2:66:
                    0f:5a:d7:27:f0:f2:9e:32:21:7f:4b:d3:9f:20:15:
                    9e:e3:34:48:81:62:9a:d1:5e:d8:86:24:09:50:54:
                    e5:f8:49:52:21:ef:cb:ea:93:15:1e:ed:78:65:89:
                    d1:03:89:7e:20:6c:e0:a6:6b:0d:03:03:99:bb:a3:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.196.0/22
                IPv6:
                  2a06:8640::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199464

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:b3:d7:fb:70:54:82:e9:89:6d:17:cd:a1:0c:f9:12:d2:
         9f:e5:4a:91:e1:fd:96:4e:d7:0f:90:a6:83:f3:02:37:32:f7:
         46:40:d6:1b:d4:5e:e3:12:74:da:e1:3a:91:d3:2b:3e:f1:0b:
         b4:30:cb:08:76:a8:ac:b2:65:0e:1f:c2:7f:99:7f:f7:98:ed:
         d3:91:5a:d5:d1:89:8f:79:f9:4c:e2:fd:7a:b3:de:85:b6:ba:
         e1:24:8d:6e:7c:41:7f:81:c5:b8:5e:2d:b0:70:c7:e9:8d:85:
         64:d1:d7:26:b5:27:20:6e:14:d5:32:fc:4b:2e:5b:61:b5:dc:
         a3:94:5b:08:0e:c1:f4:74:2a:13:61:6a:28:91:76:30:3c:3a:
         11:cf:8d:dc:a7:aa:a7:00:d1:50:fe:25:4f:20:9d:c8:9d:0b:
         76:cd:1d:d0:26:51:41:41:fc:76:68:43:85:7d:a5:79:ed:f3:
         b0:df:e3:ad:a8:3c:92:a1:f5:09:cc:de:bc:26:f7:e8:75:6a:
         f1:fe:b9:d7:a6:eb:f4:9c:73:7c:32:93:5a:79:e4:cd:e6:bc:
         6e:c5:98:c3:9d:6d:cc:41:18:2e:05:2b:5e:80:9d:7b:73:e1:
         3b:f5:26:ed:46:06:5a:6d:ba:25:24:fb:58:a4:f9:4a:db:91:
         98:15:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----