Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
File:                     tRhBzcn2NZTd3CulmkATMYK1efo.cer (raw, json)
Hash identifier:          v0h4TWxU/7tHSOKfHNvVpy1eUQuefjLWVjIoRlM+0ss=
Subject key identifier:   B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7401CFC4BBC8BF72A90B3CAE64307
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:67c:16a0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:40:1c:fc:4b:bc:8b:f7:2a:90:b3:ca:e6:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:21:d8:4d:08:3c:b4:24:5f:27:7c:77:2b:
                    21:bd:99:ec:22:d6:a1:66:90:09:bc:70:8c:77:76:
                    c1:79:c9:16:43:94:d1:f1:a0:b0:f0:a4:76:75:65:
                    d3:76:31:20:02:ee:f3:5a:47:02:0e:bd:04:86:cb:
                    1a:c7:ce:63:5e:3a:17:5a:99:24:90:4a:86:74:7a:
                    44:df:1c:3d:60:76:9d:13:4f:72:d1:36:c8:8f:67:
                    2c:c2:63:3b:dd:39:ad:fc:79:0f:c9:62:5b:0c:44:
                    10:cc:8b:d1:64:3d:fc:c7:33:5d:e6:48:80:4e:4e:
                    17:89:9f:04:8f:a4:0a:c8:53:f8:11:b2:33:5f:e7:
                    dd:1e:ff:76:ad:c9:bd:f6:f5:81:72:4b:02:28:84:
                    6d:64:ea:d1:35:1b:0c:22:2b:30:a7:11:20:80:00:
                    65:76:a2:c8:fb:d5:28:51:a6:e3:96:2a:36:5a:30:
                    dd:2d:fa:15:70:cb:75:dc:01:d5:38:02:ce:19:0c:
                    9d:39:19:ea:02:e4:2f:c7:b6:6a:58:88:cf:8a:ac:
                    a6:29:5f:65:18:96:17:b7:de:a4:a9:2b:2b:34:07:
                    97:e4:7b:5d:17:24:b8:c8:57:7e:18:b2:04:4a:5e:
                    bc:c3:bc:61:7e:46:d5:c3:4d:ab:3e:43:a6:aa:a4:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:16a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:47:cf:84:f4:30:01:18:7c:bc:7c:6e:55:5c:f0:a7:01:42:
         41:ed:6e:2d:57:6e:e6:9e:2e:94:f6:5d:be:aa:1d:e7:77:47:
         2e:84:73:80:f2:0b:eb:b8:20:f4:33:0b:08:f9:97:72:a8:70:
         0b:dd:6d:f7:a4:a5:d8:47:3f:99:31:c9:ee:f9:2c:be:c5:ae:
         62:e6:f0:52:82:8b:0d:01:0b:33:53:fc:c9:d3:a1:9f:b4:73:
         50:67:de:a2:48:eb:3c:92:28:37:3d:ea:5d:20:a4:52:8b:15:
         c9:79:9b:af:24:96:19:e0:fa:c5:d1:62:5b:b3:39:7d:b7:0c:
         7e:6c:7b:91:53:b9:9a:9c:fe:92:82:eb:46:62:02:9e:0f:dc:
         1f:7d:1c:62:30:01:e3:1f:46:69:b9:2a:5f:62:64:f0:8d:ae:
         cd:ec:1d:6c:82:32:9a:14:93:b7:e3:08:27:cd:f6:2e:32:03:
         bf:64:17:a9:35:56:4b:3d:af:b2:6c:ef:d7:5a:56:5f:41:d1:
         9f:2b:9c:b6:9c:ff:5e:e7:57:62:48:df:6d:3a:65:dc:c6:5e:
         d1:55:6e:d8:b4:cf:0f:b3:19:21:fc:ef:8b:bd:50:3f:c8:6b:
         02:f2:71:d8:ab:4c:ed:13:c5:56:96:67:f5:4d:a3:6c:08:2b:
         f8:84:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----