Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
File:                     xTsinnPOa7GW1lwL7xGVYGV6NyA.cer (raw, json)
Hash identifier:          1x+/UZWS/5kIPlcW2ybfaP1W3NtPqNaDHlc8AvHtN+I=
Subject key identifier:   C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB210815BDFAD5EB5885BB7902FEC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201545
                          IP: 185.69.176.0/22
                          IP: 2a05:2340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:21:08:15:bd:fa:d5:eb:58:85:bb:79:02:fe:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c53b229e73ce6bb196d65c0bef119560657a3720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:30:42:17:a4:ae:4d:fb:8c:d1:f0:74:9f:
                    11:e7:e6:bc:5c:41:e6:28:0b:04:28:96:f0:c3:44:
                    83:8d:39:5b:5d:db:ff:f2:1b:33:c2:3b:2f:78:3e:
                    6d:0c:60:0e:5b:cf:0c:08:ba:45:16:97:30:73:70:
                    6c:f8:3b:6c:97:be:f2:aa:20:69:11:87:8c:37:64:
                    ea:9a:f6:91:87:89:19:87:55:02:32:c2:e7:29:f2:
                    8d:8c:3b:88:a1:97:95:6b:3a:d0:4e:6d:ef:3d:44:
                    4a:94:b6:e6:11:8b:94:77:d7:93:41:a3:ac:36:3f:
                    2f:fa:6f:68:92:a7:e3:d3:67:c3:b9:c8:d3:04:1f:
                    82:1c:6c:09:09:c7:4e:11:d7:e3:6b:c0:24:d0:a5:
                    28:2c:73:e7:2c:9e:3d:f8:df:51:fb:39:52:4f:f3:
                    52:de:df:46:14:1a:80:ba:07:7e:e1:bf:74:0d:1e:
                    aa:0b:63:58:12:e8:90:0b:9d:bd:ff:00:9d:3f:0b:
                    3e:60:ce:6f:2f:ec:a5:5e:49:37:36:a4:95:58:6d:
                    d4:6f:d7:0a:1d:c7:7e:3a:14:3a:30:a2:8c:7e:eb:
                    ec:6a:cb:9a:02:b4:09:74:d9:41:e0:7e:0d:f6:a0:
                    5b:4c:bb:33:ca:56:41:33:ef:00:f1:35:be:d8:10:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.176.0/22
                IPv6:
                  2a05:2340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201545

    Signature Algorithm: sha256WithRSAEncryption
         2b:4e:a8:58:fb:62:93:ec:10:55:92:a4:3f:a5:d5:84:1a:af:
         06:89:b0:a5:5f:bd:82:3a:81:c6:c4:c0:25:f9:b2:3d:2b:2f:
         3f:6f:d5:21:09:78:d1:39:f4:7e:e9:fb:24:d3:a6:c4:91:97:
         9a:bc:d4:a6:aa:24:70:d1:14:b7:0b:d5:6a:bf:d7:14:f7:5e:
         68:76:12:5c:47:e1:df:86:6b:73:48:62:ce:28:95:d9:60:3a:
         06:a0:ce:09:e7:02:8b:41:e2:d9:a6:c1:65:9d:b5:cc:74:bb:
         e1:1c:76:07:2b:f5:92:c1:fb:25:a9:5d:84:31:a3:0e:76:aa:
         6d:96:7d:33:19:80:cc:b4:1a:9b:89:88:d3:c8:db:28:f6:d9:
         48:2b:6a:eb:f9:e1:2d:cd:0d:25:26:25:26:f4:f3:a8:9e:18:
         9c:af:2c:dc:5d:0f:7c:56:dc:1c:77:c2:4f:be:f8:25:7e:ff:
         90:9c:e8:f8:74:b3:4c:f3:8b:1d:37:1b:75:57:b3:01:7e:ff:
         6c:a9:f9:43:79:dd:43:fa:a9:38:d1:8c:d0:84:96:09:f2:68:
         9c:a9:34:04:3f:99:37:e1:c5:23:46:0a:b8:84:70:21:b5:57:
         c1:7b:bd:a1:16:69:56:26:5b:d4:35:30:dd:b7:a5:c3:d4:e3:
         91:7f:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----