Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.cer (raw, json)
Hash identifier:          2gHtJbqRM2tv7REBY6SgdhTkSHRRjJ4mCGHzRbAXp3U=
Subject key identifier:   B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCBAE74A09896A54E989E1177E0D7E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 77.245.128.0/20
                          IP: 185.172.12.0/22
                          IP: 2a00:4fc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:ba:e7:4a:09:89:6a:54:e9:89:e1:17:7e:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:d3:49:a4:11:fa:ec:57:1d:99:87:88:ab:
                    e9:06:9f:77:86:89:09:e3:72:b6:42:05:41:39:9c:
                    44:ae:4d:87:1b:7a:ca:1d:16:08:b9:18:98:01:78:
                    c5:8e:e9:da:61:db:27:70:78:42:0f:5a:35:38:0d:
                    ad:66:50:9a:dd:cd:e2:cc:bd:c6:ef:5c:e1:68:cf:
                    92:f6:72:5d:0f:4c:a8:d5:43:02:3d:58:5f:57:a4:
                    ca:0e:03:dc:4e:f1:45:1f:65:28:c5:6b:66:fa:e3:
                    64:31:bf:93:38:61:9e:39:e0:c5:4b:ff:76:2e:78:
                    49:ed:a8:33:04:64:85:6b:97:84:1a:67:df:b8:8a:
                    6e:b7:39:27:00:bc:1c:4b:a6:f6:9e:9e:f8:20:c8:
                    cf:c4:71:59:00:a3:a2:8c:4f:7e:35:ba:09:37:3d:
                    ab:1e:26:50:16:6c:76:20:5c:db:5e:2c:86:44:fa:
                    e1:f1:3b:ab:15:88:52:aa:b8:bd:72:85:90:68:83:
                    36:ef:7c:4c:46:f9:87:f2:29:76:8e:f2:d1:93:83:
                    e9:ff:a4:fd:79:ea:f5:e8:7b:a9:39:69:e9:6d:5e:
                    35:96:6e:95:8f:cd:14:15:2b:bf:90:33:e2:87:c1:
                    fa:7c:0b:8a:70:1f:03:d6:4d:e9:a2:fb:e3:03:a6:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.245.128.0/20
                  185.172.12.0/22
                IPv6:
                  2a00:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:1c:76:87:35:41:8f:fd:2b:c9:fd:da:cd:84:6a:a9:15:
         f1:97:7d:87:0e:a7:5d:04:38:9a:10:3f:7d:b1:c6:34:81:8e:
         b3:56:e2:52:b0:42:e8:94:03:f5:58:3d:4a:d0:40:5c:c7:33:
         84:a3:53:f3:41:e8:27:63:f7:f5:d4:b7:e3:a2:e5:87:da:56:
         2c:43:35:82:6d:41:b0:c1:7c:d5:d7:50:65:1c:e5:05:e8:58:
         40:82:fa:0e:e5:b7:e2:d0:17:82:82:8c:1c:11:bf:b4:68:01:
         28:ba:c2:31:17:b4:4b:ce:d1:9b:b0:8e:03:a3:f7:7f:b3:75:
         af:05:bf:eb:3d:2b:f5:12:35:be:6e:0b:cb:e2:35:63:2f:2b:
         bf:47:dc:b5:a0:29:dd:86:83:e5:dc:d4:80:8c:74:8c:3b:ac:
         a3:e6:74:97:97:89:ee:e0:a8:91:8f:f1:f9:c5:06:68:29:21:
         50:39:e9:42:c8:fb:e5:31:e1:a2:60:79:b9:e3:f1:bf:e4:60:
         21:46:15:ee:a3:dc:5d:89:2e:82:8e:e8:12:12:45:2b:e6:8f:
         97:f2:c0:75:cd:cf:bd:35:db:7c:ec:ac:47:af:2f:1b:c2:ac:
         5b:0f:c4:71:61:0c:bb:83:e4:a2:9c:90:04:de:c2:89:06:30:
         62:68:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----