Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
File:                     TDOTsqG9eRmFmAeDirHjsAN7i08.cer (raw, json)
Hash identifier:          vU6E4m2/EkTNqDtJGQDHUquNGpcUg8OOwXevDrz1IKE=
Subject key identifier:   4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE8103AD31CFE7BE01CC6BCD10BDD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208138
                          IP: 185.251.40.0/22
                          IP: 2a0d:23c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e8:10:3a:d3:1c:fe:7b:e0:1c:c6:bc:d1:0b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:e9:ac:dc:bb:18:3b:96:2d:0d:d0:2f:2b:
                    a2:06:58:f2:b4:9d:e4:a8:c1:0e:f9:90:ce:e3:fe:
                    37:56:5e:29:f3:4d:0c:49:bd:9e:03:8f:dc:08:1f:
                    e0:c6:ec:a9:92:12:9b:88:b7:ea:74:41:a5:88:4d:
                    91:83:e6:0d:54:57:c4:aa:f5:5b:74:11:d7:c4:13:
                    93:9e:7f:56:c3:aa:e5:26:32:16:dd:a3:56:3c:2f:
                    dc:69:fd:0f:1b:76:6f:0b:c5:c0:9c:a4:64:e1:15:
                    5c:c2:6c:ac:01:e2:45:10:1a:07:c5:a7:57:0c:76:
                    13:6e:9e:a5:af:50:7f:23:e7:96:06:95:55:f8:c4:
                    11:13:85:1e:a4:89:50:c8:0b:99:15:75:7f:13:2c:
                    c6:35:eb:1a:c4:ff:92:a8:2d:23:30:d0:93:87:7c:
                    59:cc:d5:80:44:6a:7f:9a:2d:04:2c:f7:ca:c4:1f:
                    eb:b8:12:47:68:a0:2d:41:2c:39:3f:f8:34:01:7a:
                    e4:80:02:94:31:13:16:ac:eb:3e:6b:e4:b8:a3:ec:
                    51:15:d1:60:4d:75:59:7b:74:7e:1c:c7:63:d0:a6:
                    01:cc:4e:35:8a:b8:6e:fd:da:21:de:01:17:0f:75:
                    55:f8:50:57:df:eb:47:c5:51:ed:e2:69:00:30:1b:
                    86:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.40.0/22
                IPv6:
                  2a0d:23c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208138

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:bf:78:be:4a:a7:55:60:c1:3f:11:b7:ab:07:a8:0b:a8:
         6e:51:26:95:8c:60:6f:36:35:0a:86:28:65:d3:30:fd:38:84:
         57:d0:72:80:2d:25:a4:0d:16:f0:bd:f0:7d:2d:3f:09:4b:c1:
         33:e9:de:29:e9:ad:0f:8b:6d:9d:5e:c3:b8:bd:4e:c3:54:d0:
         42:fa:aa:b8:29:4a:ff:19:ba:17:2b:74:57:cb:8d:57:94:40:
         32:4e:01:92:78:eb:28:17:71:c4:eb:47:7e:2d:16:b1:0e:77:
         71:dc:b3:f9:f3:e3:c8:39:c1:31:f2:ac:2b:be:ee:52:32:95:
         57:40:8a:6b:66:a1:ce:c8:e6:6f:08:6e:89:ae:43:69:54:eb:
         cb:e0:46:8e:d0:d4:32:66:cb:9b:2b:d4:ee:c0:de:9e:d0:d0:
         c4:73:ae:65:f7:f7:d8:ee:32:42:0a:ea:a4:6f:01:e2:29:c4:
         ef:f4:03:bf:ec:81:c4:ee:c0:08:28:5c:6f:90:55:92:aa:6c:
         f6:e0:e5:1f:b4:1d:01:7e:d5:f1:8b:29:f9:0c:58:24:28:21:
         c1:48:38:47:33:7b:8b:57:8e:f0:1f:11:c0:2c:0e:88:06:07:
         29:e1:27:36:bc:80:ff:b6:9a:38:09:93:91:68:27:55:69:2e:
         dc:70:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----