Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
File:                     tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer (raw, json)
Hash identifier:          le1r+I9YWwquqnHjfgJmOj6m6UOJJuhczb/Ock1+VaQ=
Subject key identifier:   B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425216CDDCE558103612C3DF414F8E0C2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216113

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:6c:dd:ce:55:81:03:61:2c:3d:f4:14:f8:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:09:37:19:a7:d9:49:05:5f:f5:cc:a2:ca:
                    18:56:2c:47:c2:e3:d5:dd:66:18:41:ce:34:ef:8e:
                    f4:14:42:5e:2b:81:9b:8b:b8:4b:f6:94:d4:08:42:
                    ad:c9:4d:59:67:2d:1c:23:f9:fb:d0:8b:de:93:0b:
                    51:46:41:ae:cd:09:b6:4e:12:65:59:54:a7:25:c2:
                    e1:17:98:84:c9:d5:8b:da:20:f4:f4:af:f1:16:f3:
                    db:08:c5:25:59:fe:92:72:0a:34:c1:28:61:ad:1e:
                    1e:cf:f8:77:be:92:4a:e3:12:7e:ed:34:b0:0a:99:
                    90:44:b7:35:37:1b:d6:2a:f0:c8:1d:e5:48:80:60:
                    bc:75:11:62:bd:0a:9e:be:6b:43:2a:26:e5:b3:24:
                    6d:4d:a1:ce:2e:21:da:d2:f4:e4:8b:05:95:72:1c:
                    0f:95:7d:50:fb:68:6b:51:05:57:23:07:bc:73:e1:
                    f2:ec:62:6a:a7:73:eb:b8:56:9d:d0:4d:d1:e8:e2:
                    09:a2:1d:17:01:a2:4f:83:0c:6b:9a:a7:96:ee:b2:
                    96:a7:69:a9:f7:fe:81:2b:31:79:1b:af:ee:ed:57:
                    17:22:ef:17:0a:7e:56:64:e2:e6:4f:2e:fc:0f:e5:
                    17:2c:13:d2:24:d9:28:87:90:ef:57:e3:d9:f6:e7:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216113

    Signature Algorithm: sha256WithRSAEncryption
         44:d7:8d:fa:ce:3f:7e:b6:b2:eb:16:48:4b:ff:5c:0f:cf:13:
         eb:80:bd:4f:64:e2:25:10:84:02:c5:97:5a:ba:c1:f7:14:88:
         02:a1:58:17:3e:13:04:a1:48:b9:9e:c2:a4:2a:00:4b:0a:81:
         a5:90:b3:c1:42:d8:5b:98:94:30:e7:35:7f:b9:2d:92:85:85:
         5f:33:38:13:cb:cb:b1:5d:04:4e:7d:f6:2e:4c:83:79:05:be:
         1c:2f:c3:59:5c:18:a4:e2:ec:10:d6:64:cf:ef:41:03:ce:c9:
         7c:a1:07:7b:31:9c:a6:61:9b:8f:23:b5:c6:0d:31:92:61:c6:
         32:ce:d0:c0:90:3c:b8:97:d8:fb:86:3f:cd:d2:98:ed:ab:0a:
         7b:63:53:ed:c5:0e:15:cf:f6:3c:18:2c:62:d2:85:09:f7:40:
         33:3b:04:cc:58:36:95:d7:e8:be:57:62:b6:fb:54:4d:80:a2:
         65:20:21:2f:8f:92:d1:24:56:4c:46:33:3d:6a:e9:5b:a3:dd:
         7d:16:c2:0a:8e:fa:e9:eb:eb:7c:4f:b1:c0:ea:8c:c5:f4:cc:
         31:3a:55:54:1c:10:4c:6e:b0:05:d1:dc:32:9d:86:03:f8:b1:
         b9:86:bb:10:04:67:23:00:05:0e:fa:63:7b:50:2a:ab:55:3c:
         67:38:df:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----