Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.cer (raw, json)
Hash identifier:          JF7BQpYQo0a9hCp1U5Jbc+qUMR4jNdou40f1gaeMoRA=
Subject key identifier:   B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9BDF11735F38166C391CC66DD2E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207413
                          IP: 91.194.140.0/23
                          IP: 91.194.166.0/23
                          IP: 2a0f:9e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9b:df:11:73:5f:38:16:6c:39:1c:c6:6d:d2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:28:77:01:ea:a8:ba:0c:c2:04:92:0e:90:
                    4d:22:a4:09:c3:5e:ce:40:52:37:08:6e:ad:26:17:
                    22:aa:f0:3d:9e:08:04:6e:14:71:19:db:e3:eb:d5:
                    1d:b9:1e:ae:9b:20:7a:86:5c:d0:4c:55:e5:41:53:
                    de:7d:23:89:29:3c:df:21:e4:6b:e7:96:47:14:0d:
                    dd:cf:ca:1c:42:28:12:c4:d4:ed:83:de:d1:4a:b8:
                    41:de:41:58:63:29:99:c0:0a:37:df:b1:99:49:6f:
                    cb:83:f3:f7:0c:21:4a:53:7a:b1:2e:f0:ed:3b:9a:
                    bc:c6:f1:55:c3:05:d5:39:58:1f:a9:43:a7:f3:fd:
                    72:55:b9:5d:3a:ef:89:da:b2:40:2d:cf:26:4e:1c:
                    4d:88:7e:1f:f2:e2:23:1a:fe:c9:eb:d8:6f:27:4f:
                    75:38:5f:4d:12:79:7f:4f:57:a5:35:b6:8b:6e:fe:
                    d6:68:0d:bd:33:84:15:03:63:8c:9e:2b:c0:0c:fc:
                    5b:96:91:13:bf:34:0a:28:fc:59:92:4f:3b:b3:62:
                    3d:ab:1e:b9:18:d3:c4:8c:c3:ef:db:89:71:73:da:
                    37:7f:90:13:66:67:ea:f9:66:47:1e:ff:5e:9b:06:
                    02:52:e5:c5:86:67:84:50:3b:84:98:9c:2d:f4:d0:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.140.0/23
                  91.194.166.0/23
                IPv6:
                  2a0f:9e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207413

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:18:af:78:ef:0f:62:ce:69:90:8c:bf:c3:b3:50:6f:d3:
         51:85:f2:9c:48:2c:2f:e4:64:44:d3:c1:de:fe:f3:af:e3:83:
         d1:b2:bd:cd:a0:5c:8c:80:39:e0:62:b7:39:eb:bc:0c:45:88:
         95:97:c5:66:e6:f1:47:3a:e5:ed:72:90:22:e2:fc:b3:3c:8b:
         bd:86:fa:e6:8f:38:9a:83:24:de:f0:46:1b:f4:5b:29:db:94:
         e0:22:88:40:9e:07:d2:29:4a:08:ce:5e:d0:43:65:20:dd:65:
         87:36:5f:8d:38:a8:04:89:2f:82:7a:83:b1:b7:62:ec:45:a9:
         79:ae:21:c5:44:b8:e9:e8:1c:b5:db:ed:61:61:ff:d8:e0:34:
         f5:a9:c5:ca:e1:57:66:f3:5e:6e:6f:42:fb:88:21:fc:e9:69:
         53:67:67:19:ee:2b:aa:90:f7:31:15:cd:a8:1b:9b:13:73:24:
         f5:25:74:53:19:61:83:fc:94:7c:26:3e:d1:8f:2c:b6:da:41:
         a9:da:f7:d8:bd:3a:7d:4e:90:8d:c4:e3:11:fe:5e:74:e4:6a:
         7c:39:5e:ba:0d:ba:67:3f:f9:13:9d:45:e7:cf:50:b2:04:de:
         11:05:3e:a9:4d:e7:f8:5a:aa:ce:e0:01:2f:d2:0c:94:8b:6d:
         93:b6:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----