Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
File:                     tt41SvltyILzXBLU9fpnUHY6tyA.cer (raw, json)
Hash identifier:          QOeC/O/phGgboxBWhdQG00mxWPuQs7SO0gWk7NQ56rI=
Subject key identifier:   B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC09C244B3766B84D0B9045A620A58
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34774

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:09:c2:44:b3:76:6b:84:d0:b9:04:5a:62:0a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:f8:16:28:24:35:c6:11:1f:fd:45:d3:78:
                    78:b6:32:87:6e:f0:6a:ef:f2:b9:80:66:6d:ae:1f:
                    1e:e2:e0:c3:b9:97:33:c4:ca:98:bb:36:00:77:08:
                    d9:32:ff:a7:be:c6:0c:46:ff:5b:b5:ad:7d:9f:e7:
                    b9:98:64:9d:9e:b1:f0:6d:66:d4:ed:3d:b0:fe:8c:
                    3c:c8:47:c7:9f:69:f8:90:06:0f:7d:0c:3e:19:c4:
                    2c:51:a2:7b:36:15:2e:6c:97:6a:fe:60:db:e4:83:
                    f2:87:c1:7d:9e:55:11:ad:22:ba:02:16:f3:bd:a0:
                    33:7b:43:ee:5c:a8:b9:a2:99:e1:c5:b8:6c:4a:b5:
                    27:3f:f3:c3:07:c0:0b:b6:aa:7d:78:a0:73:6f:06:
                    cf:f2:6e:66:3f:fd:95:4e:d0:82:50:2b:36:96:da:
                    df:c1:1d:30:b0:cd:41:a8:da:e4:f1:3e:fc:6d:b4:
                    84:83:ee:49:ed:2d:69:e2:0d:6b:37:83:41:95:9e:
                    26:ac:c6:ad:cf:9a:dd:47:50:04:26:3a:0e:dd:23:
                    20:c5:25:7f:c8:d8:15:1e:6f:9e:3d:45:8e:16:ce:
                    dc:1f:be:af:f3:f6:79:63:fb:a7:0f:0f:48:7c:ef:
                    8d:c5:26:ce:c5:31:97:e1:22:65:c3:14:2c:e9:77:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34774

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:3c:51:70:d6:20:84:7d:8d:7a:37:35:d1:8e:b4:f7:83:
         02:1f:25:73:68:17:03:44:9a:53:23:ff:15:9d:1b:f3:eb:69:
         af:7d:05:c9:5a:4b:3d:a1:89:48:43:cd:90:47:ac:19:f3:29:
         8b:82:a0:f0:a6:bd:42:33:11:ba:50:44:93:a2:5c:3f:6e:d0:
         2f:d0:bf:24:99:7b:b9:89:bd:25:ea:82:04:61:04:7d:55:c9:
         35:08:ad:2e:7d:5b:9d:1d:a7:25:40:d8:62:32:68:97:82:b0:
         12:f3:e6:95:4d:38:32:f5:7c:9b:c5:1b:e6:56:be:3f:45:30:
         3c:14:f4:f8:bc:5e:bf:cf:9a:64:0d:a9:7d:86:5b:70:53:55:
         88:d3:e1:f4:1f:1d:af:32:23:15:3b:ae:7f:fb:21:50:ad:3d:
         47:7e:0a:4b:54:25:2a:40:17:95:d8:3a:14:b2:55:80:d8:06:
         23:33:ab:eb:cc:84:1a:37:76:83:71:26:00:50:71:f6:32:6e:
         ad:c7:19:86:64:08:0c:29:08:53:cc:78:54:88:01:12:e1:65:
         30:45:9c:cf:08:c6:dd:5c:ea:1a:c0:e0:f8:25:3c:48:9e:90:
         56:e0:b7:ee:bc:7d:7f:ab:f4:eb:22:c0:67:88:30:64:65:a6:
         d9:2d:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----