Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
File:                     TuQFf56gFAzvfOR4k2nFzwH3xo4.cer (raw, json)
Hash identifier:          D70Re4SNOGgeCdSC6jUylaVEduLhtZs8j5nZRI5a0jM=
Subject key identifier:   4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423694E856BD7EC602ED3FFB0AFC1E5EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 37.221.84.0/22
                          IP: 2a09:f200::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:4e:85:6b:d7:ec:60:2e:d3:ff:b0:af:c1:e5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:17:2e:87:93:83:54:b2:3a:99:7a:05:50:
                    74:3b:03:88:70:1b:15:06:b5:37:eb:2d:c3:74:f1:
                    35:4a:af:2b:44:5a:12:b7:1a:48:7a:5b:12:ca:37:
                    c2:5d:60:d7:04:53:a5:c0:54:82:8b:cf:72:7d:b7:
                    73:e3:5a:a3:5b:8e:31:30:31:da:ea:b9:c5:56:ea:
                    04:ec:af:5c:91:d1:d7:7a:81:cb:af:a1:11:0f:2b:
                    9e:45:21:42:f5:a1:18:65:68:0a:84:b3:57:d9:f4:
                    54:ca:ac:b9:8c:fa:eb:1b:dd:1b:6b:61:67:b3:f8:
                    9c:e5:07:e1:0c:50:32:1c:45:79:61:3d:cf:17:04:
                    aa:5b:3d:a7:92:52:92:ca:c7:c1:1f:48:3b:2f:ed:
                    a3:ee:75:6c:a9:56:48:dd:f6:83:c4:85:8f:7e:09:
                    47:03:72:3d:11:26:75:bc:a5:37:02:07:a4:29:1a:
                    42:7a:78:29:40:53:28:e0:1b:29:0e:c7:1a:b2:ce:
                    99:ce:cf:69:cb:cf:2b:17:55:65:1f:74:78:75:c8:
                    31:f3:5c:91:46:e2:85:47:3e:b4:77:85:a7:01:93:
                    46:a0:31:66:0d:23:c6:90:6a:db:0b:f1:9e:c1:23:
                    dd:eb:9f:b5:3e:a9:28:eb:3d:0a:c9:e8:3c:f7:8c:
                    6b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.221.84.0/22
                IPv6:
                  2a09:f200::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:7a:0d:88:e1:cd:23:42:38:83:30:82:b0:71:07:35:e3:
         b2:65:50:5c:c1:0e:d3:66:27:84:4e:02:74:09:8d:31:0d:12:
         1b:42:2d:2e:a8:ce:dd:e0:25:c8:b2:81:8c:38:5d:46:5d:b1:
         f0:41:99:b7:ea:2c:1c:db:93:c6:c2:b9:a6:72:50:33:48:0f:
         b9:a6:80:f6:84:00:14:21:73:46:d9:1c:67:89:15:99:32:e8:
         eb:02:7e:fd:31:c4:01:0e:d3:22:88:fd:52:1d:cc:b6:a1:48:
         54:74:2d:a1:cf:b6:cb:1c:95:c0:21:4b:2f:07:9d:d8:ff:eb:
         6a:14:a3:d9:e2:34:39:3b:f4:6d:e6:c9:2e:d8:6f:6b:4c:77:
         6f:f5:ea:d8:97:ee:ea:6f:4b:39:51:85:f8:2e:79:6f:87:62:
         2a:8f:47:83:a8:df:17:6f:31:11:18:97:b6:25:0d:57:eb:9c:
         16:12:be:7c:ac:88:4a:ff:af:38:e8:7a:5e:f8:a3:1f:9c:b2:
         bb:ce:dd:f5:07:a0:b3:0a:0b:8d:dd:f9:60:ec:20:64:07:6c:
         f7:b3:2d:1a:17:4f:76:8c:cd:11:c8:c2:09:99:bd:bc:f4:27:
         bc:e9:15:73:75:31:47:5f:1d:2c:79:5f:72:45:e2:e6:ae:c5:
         24:74:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----