Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer
File:                     tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer (raw, json)
Hash identifier:          uzROqTZdsgYvfKZOxiGtH0NeHZxS9vBjLnm2qyuSzeU=
Subject key identifier:   B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7EFD14DE480D579C9BB711E6B087B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215295
                          IP: 2001:67c:f90::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:ef:d1:4d:e4:80:d5:79:c9:bb:71:1e:6b:08:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:92:68:15:21:c0:c3:a9:b2:81:17:8a:bf:
                    62:60:53:c5:86:25:a6:c4:c6:90:94:5d:71:ed:fb:
                    c4:3d:d9:5b:3f:2f:16:3c:51:0a:d5:6b:6f:40:a5:
                    9d:50:c9:e1:57:ae:a5:c8:04:2b:38:b6:9d:d7:37:
                    43:89:21:c8:6c:e8:ba:6c:01:59:e4:bb:89:2f:c7:
                    1e:b1:ca:73:8d:35:c0:ba:5d:8d:de:f2:f7:ea:5c:
                    1a:03:b9:f6:8b:72:41:4b:53:e3:b3:cd:98:31:41:
                    a8:cc:6d:23:1e:4e:17:a9:ad:35:cb:dd:73:e2:2b:
                    7e:fa:9d:45:8b:00:02:6d:a3:12:81:d1:8c:bd:ff:
                    0e:77:e1:4d:b8:f9:5b:c1:f2:13:b2:a3:15:07:cc:
                    09:9c:28:9c:31:da:70:f4:24:5a:5d:ae:aa:99:2e:
                    4f:e3:05:59:54:05:b8:50:6d:64:aa:7b:c9:df:f2:
                    ac:84:cd:c1:69:1f:b3:c1:39:a7:a4:0d:87:c4:f7:
                    56:26:d4:05:35:5d:eb:90:26:5f:cf:d4:b6:cb:0a:
                    1f:39:da:27:d1:2f:28:8a:63:4c:59:01:12:ca:d4:
                    2e:7d:6a:10:61:47:21:28:d8:4f:61:41:c4:37:34:
                    93:fb:35:41:34:36:4b:1d:97:30:7e:d0:05:b0:7e:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215295

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:63:be:0d:a1:b3:5e:11:08:29:c7:d1:2f:5b:bd:3b:c9:
         01:19:11:c4:5f:a0:f0:f2:3f:e8:e3:e3:ea:df:a3:9f:c9:e1:
         d7:3f:cf:3f:56:d5:a7:6d:3f:bb:5f:90:83:8d:66:53:97:ac:
         ce:d5:4d:6c:e5:7c:a4:49:f2:60:d5:cc:a0:82:43:f3:64:3b:
         a5:21:04:8b:78:b1:d0:c8:ab:34:7e:f4:34:25:5a:d0:90:46:
         9a:89:0e:ca:87:23:c3:e2:b9:06:38:3a:75:bb:f8:e6:e3:1b:
         7a:75:42:95:9f:69:f9:ef:1c:4d:bb:e0:a1:b6:77:20:d2:da:
         d8:a7:ff:86:2f:88:63:41:5a:bc:ca:06:30:6a:63:b9:30:e3:
         a5:1b:b4:26:ad:71:de:99:18:a5:a4:78:0b:f4:89:c1:dc:c1:
         0f:b5:80:76:b9:81:a1:1c:5a:ae:27:7f:ba:fa:64:fd:ca:c9:
         1a:49:1b:59:f3:8f:2d:10:3a:d9:04:6a:d7:8e:ed:b3:f6:42:
         b0:9a:a3:2d:34:c0:31:57:d2:20:4d:45:6b:8d:90:a3:64:82:
         a5:37:d1:e0:a2:d8:48:3c:06:46:4a:ce:59:85:fb:bb:77:b0:
         74:3c:54:db:92:3b:ad:26:f7:4c:e4:5b:4b:c8:31:e3:39:bf:
         6f:48:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----