Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
File:                     TaktycvByBxzpp8xWlMbR_ROPFQ.cer (raw, json)
Hash identifier:          y4O2O2JR9eiquA09BgsjU9yET2fcH1kwfOSgwq2YsIc=
Subject key identifier:   4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421440FC94EC99692F03CB3C6A5693AA7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207707
                          IP: 46.31.72.0/22
                          IP: 2a0f:eb40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:0f:c9:4e:c9:96:92:f0:3c:b3:c6:a5:69:3a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:88:86:c7:63:2c:81:37:bc:95:08:ea:bf:
                    ff:52:45:ca:11:a5:9c:71:87:a4:2d:83:aa:59:78:
                    2b:03:0b:36:bf:78:03:7c:58:05:be:4c:f9:5f:b4:
                    5a:ee:af:6a:f3:c2:6e:9b:ec:8f:e2:e4:aa:b0:08:
                    1c:1e:ef:0e:ed:75:90:7c:44:6e:9d:e8:1e:30:5f:
                    1f:2f:fc:da:47:e0:38:85:67:bd:19:44:a6:9f:d7:
                    84:5d:1e:d1:60:71:28:b9:63:e0:7f:f2:9f:8d:1f:
                    3b:30:83:79:97:2d:ce:1a:90:67:29:34:ba:33:73:
                    05:7f:c0:81:43:a1:e2:12:16:b1:5e:9e:7f:1e:20:
                    ca:1b:28:5c:1f:ea:91:ef:57:f8:1e:e1:62:3b:20:
                    67:5f:b3:d2:fc:76:54:40:b1:9a:be:5b:17:f6:88:
                    ca:ea:ec:64:74:39:0e:d3:bb:cc:4d:e9:f3:ec:28:
                    56:1b:21:52:45:44:b9:b8:0e:27:98:a2:97:f0:10:
                    87:ae:ca:f2:76:77:4b:7a:0e:d3:a1:89:f5:df:b9:
                    5a:60:e2:3c:ff:05:4a:3e:9e:d2:e7:5c:d9:22:77:
                    41:ac:ad:20:f4:ae:0f:d3:63:4c:f7:df:ce:72:70:
                    24:13:3e:04:fd:27:a7:51:3a:48:c3:23:de:ae:c7:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.72.0/22
                IPv6:
                  2a0f:eb40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207707

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:fb:07:b3:1d:f2:97:3a:ac:6e:63:20:04:94:2c:be:7a:
         03:b2:1e:d4:d8:b0:49:23:e6:2b:2b:b2:3e:84:98:77:48:e7:
         c6:bd:04:f3:c1:0a:89:44:3b:92:90:e9:1c:ce:61:13:dc:78:
         cf:2d:66:e1:13:f5:5a:15:e7:50:e2:e1:74:2c:2f:c1:6e:cc:
         f8:c6:d2:7b:a1:ae:76:08:92:07:24:0a:be:42:32:15:c0:28:
         e4:c9:47:8c:f4:af:e3:4b:87:c6:25:a0:76:f2:1d:71:1a:10:
         59:c3:01:83:7c:af:9b:6f:b7:0b:f9:2a:28:b4:dd:4e:ff:5f:
         f4:12:79:93:a3:54:23:70:f5:3a:26:6b:6b:20:bf:6b:8a:4c:
         58:fb:0e:d0:93:47:2c:8b:1d:d1:c6:8f:52:74:db:b3:15:3f:
         db:47:18:ef:b8:d5:9b:bf:7e:33:95:47:36:59:e6:55:85:f2:
         39:13:17:39:34:26:a3:85:2c:43:2b:81:51:ac:da:3b:82:a8:
         45:ac:b0:a1:4e:47:03:7c:f0:34:08:6c:3e:db:e2:f0:8b:0e:
         5d:27:43:90:82:07:78:8a:04:86:da:05:73:b8:23:3e:30:e2:
         93:b7:77:37:a7:49:fe:3f:37:77:4d:1a:28:37:98:c9:50:a6:
         bb:cd:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----