Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.cer (raw, json)
Hash identifier:          A1ZjdWQu/JuobAexHuRbRe8eVPmHwNG2K00AP3d6vh8=
Subject key identifier:   4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFAB4448262CA431EDC6D7139F1E21E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.48.214.0/24
                          IP: 2001:67c:1724::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:b4:44:82:62:ca:43:1e:dc:6d:71:39:f1:e2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:dd:5d:8c:01:67:30:d2:09:5b:c0:32:f6:
                    0d:3c:27:71:24:ff:a4:14:8f:57:77:dc:d0:ef:e7:
                    76:f1:b5:41:24:9d:16:44:75:34:e3:05:3c:f2:dd:
                    bd:7d:e6:49:a2:0d:ab:1b:4d:e4:a1:14:5e:11:1a:
                    a5:02:ed:25:2b:9e:a0:de:c0:69:5c:82:86:2f:a6:
                    36:2a:b3:47:bf:86:d2:bd:3a:b5:12:93:db:ab:04:
                    85:eb:e5:85:04:d6:9f:29:de:83:06:1c:95:9f:c2:
                    71:03:86:e2:22:ec:5c:c0:57:2a:76:22:5e:b8:cf:
                    aa:81:c6:6d:89:1f:ad:f0:81:1e:41:42:a5:e1:20:
                    9e:d4:bc:22:18:95:bb:5e:eb:6d:8d:c5:e0:6f:a8:
                    e1:99:00:26:76:af:47:73:4b:04:f0:64:60:c6:c5:
                    03:04:0c:80:6c:0f:73:9f:dd:c5:cb:e6:ab:fa:c8:
                    96:db:fd:98:cd:a9:89:c1:a6:55:10:d2:5a:30:41:
                    9f:21:20:70:08:ce:30:76:60:a5:3e:e0:79:6f:67:
                    f2:9e:bf:78:9d:d0:e1:1b:7f:cf:03:b6:31:7c:ea:
                    c7:7a:eb:8f:58:be:37:ff:cd:2e:55:9b:12:15:fb:
                    9f:ce:b6:6c:27:d4:aa:f5:60:ad:11:ff:bb:3d:cb:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.214.0/24
                IPv6:
                  2001:67c:1724::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:1c:39:92:8b:be:d6:01:44:3e:a4:26:6b:0e:df:29:94:
         a7:8a:ea:f0:a6:33:ef:d4:5f:6d:52:bb:00:86:45:5a:a9:d0:
         4f:72:fb:f9:76:e7:99:6c:a1:84:85:2d:b9:b0:c7:bd:67:d0:
         75:23:3d:8e:82:5d:3f:53:a9:8d:e8:92:f2:64:ab:ed:b0:50:
         3c:ba:ee:24:5d:d5:41:19:d5:fc:01:d4:44:78:cf:9e:5a:5c:
         b2:06:8f:60:29:c0:a3:3f:34:a0:c1:1f:7d:67:6d:97:e1:bd:
         6a:82:53:dd:5f:d5:5a:77:c8:40:a1:e6:77:1b:ce:ed:42:6c:
         60:72:a3:4f:3a:be:7a:b5:c7:92:b8:ba:28:88:08:d5:be:ba:
         75:09:71:10:e7:13:55:d5:d0:63:a0:4c:09:3f:06:81:c8:50:
         7e:a3:30:c9:3e:17:8c:91:5e:ca:66:65:ca:45:b0:fc:26:5f:
         57:74:31:68:62:5f:69:57:20:90:3b:dc:6b:a5:75:56:9b:22:
         69:b2:2a:a8:6c:3c:b5:59:85:b8:b0:b8:08:f8:1b:51:36:6c:
         a6:c9:4b:e1:f4:07:45:66:f3:c5:93:5d:a6:68:cb:d0:25:39:
         83:04:29:2b:29:22:44:29:91:44:42:4b:29:50:fd:09:a0:61:
         d5:98:ed:9f
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQf+rREgmLKQx7cbXE58eIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzMyNTYzN2NkNGRlOWFmZTUzYmQ0ZjEyMWFiZjYyMjQ1ZjY3MTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p7dXYwBZzDSCVvAMvYNPCdxJP+k
FI9Xd9zQ7+d28bVBJJ0WRHU04wU88t29feZJog2rG03koRReERqlAu0lK56g3sBp
XIKGL6Y2KrNHv4bSvTq1EpPbqwSF6+WFBNafKd6DBhyVn8JxA4biIuxcwFcqdiJe
uM+qgcZtiR+t8IEeQUKl4SCe1LwiGJW7XuttjcXgb6jhmQAmdq9Hc0sE8GRgxsUD
BAyAbA9zn93Fy+ar+siW2/2YzamJwaZVENJaMEGfISBwCM4wdmClPuB5b2fynr94
ndDhG3/PA7YxfOrHeuuPWL43/80uVZsSFfufzrZsJ9Sq9WCtEf+7PcsCcQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFEwyVjfNTemv5TvU8SGr9iJF9nFPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzU5ODQx
NS00NDVlLTQ2OGQtOWY4ZS1kMTk4MzkyMDZjZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNTk4NDE1
LTQ0NWUtNDY4ZC05ZjhlLWQxOTgzOTIwNmNlNi8xL1RESldOODFONmFfbE85VHhJ
YXYySWtYMmNVOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwjDWMA8EAgACMAkDBwAgAQZ8FyQwDQYJKoZI
hvcNAQELBQADggEBAHyPHDmSi77WAUQ+pCZrDt8plKeK6vCmM+/UX21SuwCGRVqp
0E9y+/l255lsoYSFLbmwx71n0HUjPY6CXT9TqY3okvJkq+2wUDy67iRd1UEZ1fwB
1ER4z55aXLIGj2ApwKM/NKDBH31nbZfhvWqCU91f1Vp3yECh5ncbzu1CbGByo086
vnq1x5K4uiiICNW+unUJcRDnE1XV0GOgTAk/BoHIUH6jMMk+F4yRXspmZcpFsPwm
X1d0MWhiX2lXIJA73GuldVabImmyKqhsPLVZhbiwuAj4G1E2bKbJS+H0B0Vm88WT
XaZoy9AlOYMEKSspIkQpkURCSylQ/QmgYdWY7Z8=
-----END CERTIFICATE-----