Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
File:                     TnzINx7SS6z2esqLkCzucGr8Yks.cer (raw, json)
Hash identifier:          9PENNDkxLwNqcNN2y7Vi3VgTYAUQMmtk03jMcmP9gaE=
Subject key identifier:   4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F735193C48DE4ABEA325BBD8F7CAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200272
                          IP: 84.39.196.0/22
                          IP: 2a09:ee00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:73:51:93:c4:8d:e4:ab:ea:32:5b:bd:8f:7c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:7f:2f:93:66:09:ed:96:57:e8:5d:f0:66:
                    02:cb:23:62:1f:07:4d:86:f5:52:9e:37:7e:a9:50:
                    97:7f:d5:77:26:88:2a:45:2a:e6:d7:d2:6a:16:88:
                    b0:85:e0:9f:53:42:e3:3c:55:9a:1d:b4:98:63:c0:
                    5b:55:61:a5:bc:38:c6:43:ba:05:48:76:ee:b2:48:
                    5e:69:65:1c:bf:0e:7c:f4:9b:7f:68:a0:1e:75:9c:
                    fb:e9:d7:9e:a2:13:ba:8d:82:49:22:25:60:ab:c9:
                    c3:f1:b8:89:86:2a:fb:1b:a0:d1:29:b5:33:83:df:
                    89:80:5f:19:6e:cd:8a:c3:a9:88:8e:e7:34:6f:1c:
                    ad:40:2e:95:b7:19:5a:1c:d8:93:27:85:0b:06:55:
                    e0:c6:cb:b2:c8:10:b2:2a:2f:bb:32:4e:11:ca:bd:
                    0a:b0:a0:31:d5:c1:92:d9:9b:c9:94:4c:b7:cb:41:
                    9c:88:37:7d:47:c6:e0:1d:a6:54:7e:ee:dc:f6:38:
                    c5:9d:86:d3:55:77:83:c1:b3:75:c4:56:9b:82:21:
                    d5:6f:01:3d:28:15:47:d1:99:2e:75:ec:51:13:d0:
                    76:55:3c:01:5b:07:65:a7:6d:7c:8b:f3:b1:51:09:
                    56:8e:1a:fd:59:6d:28:05:e6:40:03:7d:4b:13:b4:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.39.196.0/22
                IPv6:
                  2a09:ee00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200272

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:43:c1:93:6f:ac:48:35:87:f9:4d:37:38:3e:ab:44:1b:
         3e:f5:6c:72:f5:d8:8b:61:71:b1:18:8b:66:7d:4b:bd:b2:04:
         b3:61:25:11:22:e9:ea:49:c8:66:b2:e0:a6:c4:ab:c0:3d:fc:
         34:4a:56:d2:02:c6:48:2b:2f:4d:23:44:b0:10:f3:fc:a1:8c:
         ff:d7:0c:f7:0e:9b:82:ff:5b:d0:4d:db:2a:10:19:e8:68:53:
         b0:ec:0c:ec:f8:75:05:91:72:bd:fa:1e:b6:69:09:79:8e:3e:
         45:56:92:af:e9:9a:4d:76:1f:36:4c:5a:68:68:2e:47:7e:21:
         50:53:47:68:7b:2b:96:0c:a0:62:d0:41:9c:d8:0f:09:bc:eb:
         46:4b:fe:db:0f:1e:d8:1c:1d:5b:70:be:ca:25:98:c5:f7:c8:
         ba:ba:82:b4:65:2e:be:ee:d0:ef:db:6d:5b:e9:d2:38:62:a7:
         dd:07:6b:7d:f3:32:83:48:3c:eb:22:08:71:32:09:fc:62:7e:
         78:ad:7e:cd:5a:cc:9b:66:bc:e3:45:61:20:b2:a3:32:58:3b:
         74:8d:cc:68:e8:a1:c1:ba:95:d4:3f:38:15:87:0b:67:c3:40:
         b5:ec:0a:aa:84:ba:3e:b1:01:77:61:c1:f1:19:45:84:20:ef:
         d4:2f:28:c8
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQlj3NRk8SN5KvqMlu9j3ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdjYzgzNzFlZDI0YmFjZjY3YWNhOGI5MDJjZWU3MDZhZmM2MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEh/L5NmCe2WV+hd8GYCyyNiHwdN
hvVSnjd+qVCXf9V3JogqRSrm19JqFoiwheCfU0LjPFWaHbSYY8BbVWGlvDjGQ7oF
SHbuskheaWUcvw589Jt/aKAedZz76deeohO6jYJJIiVgq8nD8biJhir7G6DRKbUz
g9+JgF8Zbs2Kw6mIjuc0bxytQC6VtxlaHNiTJ4ULBlXgxsuyyBCyKi+7Mk4Ryr0K
sKAx1cGS2ZvJlEy3y0GciDd9R8bgHaZUfu7c9jjFnYbTVXeDwbN1xFabgiHVbwE9
KBVH0ZkudexRE9B2VTwBWwdlp218i/OxUQlWjhr9WW0oBeZAA31LE7TqPwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFE58yDce0kus9nrKi5As7nBq/GJLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzBiNGNk
Zi1iNDg2LTRhNTgtODAwZC04ZWQ1YTc5ZGU4MzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvMGI0Y2Rm
LWI0ODYtNGE1OC04MDBkLThlZDVhNzlkZTgzNS8xL1RueklOeDdTUzZ6MmVzcUxr
Q3p1Y0dyOFlrcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCVCfEMA0EAgACMAcDBQMqCe4AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMOUDANBgkqhkiG9w0BAQsFAAOCAQEAo7BDwZNvrEg1
h/lNNzg+q0QbPvVscvXYi2FxsRiLZn1LvbIEs2ElESLp6knIZrLgpsSrwD38NEpW
0gLGSCsvTSNEsBDz/KGM/9cM9w6bgv9b0E3bKhAZ6GhTsOwM7Ph1BZFyvfoetmkJ
eY4+RVaSr+maTXYfNkxaaGguR34hUFNHaHsrlgygYtBBnNgPCbzrRkv+2w8e2Bwd
W3C+yiWYxffIurqCtGUuvu7Q79ttW+nSOGKn3QdrffMyg0g86yIIcTIJ/GJ+eK1+
zVrMm2a840VhILKjMlg7dI3MaOihwbqV1D84FYcLZ8NAtewKqoS6PrEBd2HB8RlF
hCDv1C8oyA==
-----END CERTIFICATE-----