Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.cer (raw, json)
Hash identifier:          zRBOU2m/k/8MOEDNwYaGqMdXTlf/aOZ/w+6N1cNRFPw=
Subject key identifier:   E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194214438A27C688A670F4766DC8B907614
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.93.89.0/24
                          IP: 2a13:9dc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:38:a2:7c:68:8a:67:0f:47:66:dc:8b:90:76:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:c3:1c:fa:03:30:63:4e:ba:47:78:09:82:
                    17:3f:d3:16:1a:42:9a:6c:eb:c2:c6:b3:39:c3:bd:
                    59:07:fa:f4:1f:e2:ca:4c:5f:74:63:6d:41:e2:d2:
                    8e:4c:df:7d:d8:09:90:b0:89:d3:a0:56:57:4c:c7:
                    fa:3c:79:d5:ca:78:f9:c2:eb:2e:e8:d1:41:14:54:
                    55:1c:9e:d9:75:93:89:cf:e6:57:16:fb:0e:4f:c2:
                    d1:3e:a5:31:4f:c7:6c:4d:21:d0:ff:65:3b:61:95:
                    d4:a1:1f:f7:69:1d:c3:4b:d4:ac:a8:15:1f:cd:fb:
                    9a:f1:55:0f:a8:32:32:b4:33:a3:2e:2a:cd:69:d6:
                    26:2b:32:57:5d:ad:a6:ef:01:78:19:4b:85:cd:e0:
                    99:32:5b:ae:04:d9:fe:c1:83:74:06:98:a2:53:22:
                    f3:e0:63:7f:83:be:ce:a3:af:98:26:d1:6d:30:82:
                    a2:cc:75:54:0d:08:c5:c7:35:4b:fc:1c:f1:20:ae:
                    db:10:f2:d2:82:87:f9:ac:0f:e7:ba:c4:6d:97:06:
                    ee:65:9a:d0:a2:29:20:60:da:37:85:88:9d:2d:bb:
                    f1:d7:84:4d:fc:3c:64:5e:1f:21:d0:08:ca:42:e6:
                    e2:ff:03:22:15:c1:e3:ef:d5:7a:a2:af:77:c5:97:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.89.0/24
                IPv6:
                  2a13:9dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:da:ec:fb:75:ee:34:1b:8e:64:a6:98:f8:fe:75:fa:55:7f:
         8b:e3:5e:4a:d0:00:07:d1:fd:37:22:bf:26:50:e4:04:2a:aa:
         13:8d:cc:74:9f:7f:e3:2d:60:43:9f:79:3e:35:ab:5b:87:88:
         e4:c4:49:4b:29:c7:2e:06:78:88:41:df:34:cf:7d:e8:e8:25:
         8b:8f:74:b6:0a:ea:23:2a:9e:65:e7:f9:a9:34:ff:9f:3f:77:
         33:31:c4:24:8a:a6:43:54:55:a8:54:3a:e4:6a:d3:10:49:d6:
         f4:e8:3d:be:4f:cc:b1:ce:a5:71:e8:3e:23:5d:39:da:00:a6:
         2b:6e:c9:55:71:b6:aa:7f:7f:cb:45:e2:81:d4:f3:b3:f5:83:
         77:e1:f5:53:47:41:3e:3f:f2:28:bf:53:b5:a5:95:90:03:af:
         de:1f:3a:4a:19:bc:bd:cf:ad:e9:06:ae:fc:c0:e0:95:6d:64:
         f6:58:43:44:f3:48:9a:c5:23:58:e7:e5:f6:dd:30:f3:a6:1c:
         bd:e3:84:10:3d:10:80:00:44:4a:aa:c0:e9:d8:d5:29:1c:a6:
         c8:0f:30:e9:a8:76:53:33:b3:43:7a:78:98:5c:1c:72:c9:75:
         3e:c4:22:32:d3:54:5e:6e:c0:49:c4:c3:45:83:d3:9f:60:f9:
         95:41:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----