Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
File:                     TuUnUqgb3-CkAfmiYdef7kthcRU.cer (raw, json)
Hash identifier:          +M4Mtii6ShReAOklWRS9Wm8LKid6p2ysuygnSRV7Pss=
Subject key identifier:   4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D26F9C06DC21F1B05FF22C5A3497F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8303
                          IP: 149.219.0.0/16
                          IP: 2001:3880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:26:f9:c0:6d:c2:1f:1b:05:ff:22:c5:a3:49:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:42:ac:05:86:b6:e1:b7:8e:e3:fd:e1:29:
                    e6:d4:83:94:37:ff:8f:47:ab:b8:c0:59:4b:bc:4a:
                    41:d7:8d:4b:7e:05:d2:85:28:b5:a3:cd:ef:19:3d:
                    d8:23:ed:75:f5:33:96:0d:7c:ed:18:b5:cd:1f:25:
                    fc:79:07:56:64:7b:a6:a0:1b:bf:b7:57:90:ea:f3:
                    4b:24:64:d2:5a:3c:0b:82:60:d6:84:ec:39:ed:8b:
                    57:25:ad:13:78:a5:fe:15:1d:59:d2:63:72:ed:85:
                    cc:25:cc:91:6e:8f:78:81:be:12:8c:23:37:4c:80:
                    39:3f:6b:61:a2:0c:91:2e:e1:f4:70:83:8b:44:de:
                    78:e7:0b:d9:fa:68:af:fc:b4:61:e8:a6:e2:95:d8:
                    de:9f:82:ae:f5:71:c1:eb:b2:3e:39:da:45:de:d7:
                    59:5a:89:27:81:ea:27:c1:56:b9:29:e1:5b:0c:ce:
                    71:8b:7c:f2:b2:e5:ca:3e:62:fa:2e:d2:d4:24:03:
                    5d:7d:c3:0f:f8:71:eb:46:fb:34:fb:bf:9c:13:4e:
                    20:d9:9f:da:81:8c:8c:ff:ea:8a:6c:cf:7f:79:b0:
                    5d:ca:57:c4:62:73:01:e2:dc:30:56:9c:88:0c:56:
                    09:95:9b:e6:d6:4b:fb:18:9d:94:5c:1e:2a:d8:91:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.219.0.0/16
                IPv6:
                  2001:3880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8303

    Signature Algorithm: sha256WithRSAEncryption
         97:ea:58:1e:53:2c:fa:2f:48:0e:06:6b:e2:5f:fc:2c:5d:cb:
         ad:d5:52:f0:0c:8a:77:03:4b:34:6a:10:4b:b8:cf:a2:93:a1:
         f6:f4:28:0a:93:f3:e6:c4:96:91:1f:16:fc:83:35:7a:81:7c:
         cc:35:19:93:cb:7e:31:63:12:15:31:f3:d0:24:d7:96:f5:0f:
         70:d8:a0:46:36:e5:1e:65:86:5f:5a:89:23:13:7b:df:60:48:
         e2:38:b2:e1:e2:c8:05:8c:3d:5d:39:f8:a5:02:59:dc:09:5d:
         d1:b3:4e:a4:47:d5:40:25:ab:51:f0:89:df:32:1e:65:0d:fa:
         48:25:c8:e0:99:b0:34:db:d8:08:d1:b5:91:bd:55:4d:e3:1d:
         29:ad:52:c3:4f:7c:e8:db:18:1f:2f:96:3c:dd:08:e5:a2:06:
         75:9c:ff:8d:3b:58:c6:19:e4:3b:d9:a0:07:8a:f0:35:82:63:
         67:a2:34:33:96:7b:26:39:bc:09:21:b5:5d:e6:fb:95:9d:55:
         45:72:ab:6d:00:ed:5b:9d:11:98:ff:4b:1e:53:f0:4b:d6:4f:
         db:92:6c:a4:65:ca:d2:e4:cc:d9:48:2e:9a:5c:20:e4:e9:fe:
         a0:bb:97:65:02:fa:7a:40:1b:01:c8:9a:a6:64:66:ce:33:5c:
         4f:63:df:f1
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAZQijSb5wG3CHxsF/yLFo0l/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU1Mjc1MmE4MWJkZmUwYTQwMWY5YTI2MWQ3OWZlZTRiNjE3MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hCrAWGtuG3juP94Snm1IOUN/+P
R6u4wFlLvEpB141LfgXShSi1o83vGT3YI+119TOWDXztGLXNHyX8eQdWZHumoBu/
t1eQ6vNLJGTSWjwLgmDWhOw57YtXJa0TeKX+FR1Z0mNy7YXMJcyRbo94gb4SjCM3
TIA5P2thogyRLuH0cIOLRN545wvZ+miv/LRh6Kbildjen4Ku9XHB67I+OdpF3tdZ
WokngeonwVa5KeFbDM5xi3zysuXKPmL6LtLUJANdfcMP+HHrRvs0+7+cE04g2Z/a
gYyM/+qKbM9/ebBdylfEYnMB4twwVpyIDFYJlZvm1kv7GJ2UXB4q2JFomQIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFE7lJ1KoG9/gpAH5omHXn+5LYXEVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzMxZTBk
NC0zNWNlLTRkMDItOTczNC1kNzhmYjk3Zjk4MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzFlMGQ0
LTM1Y2UtNGQwMi05NzM0LWQ3OGZiOTdmOTgyOC8xL1R1VW5VcWdiMy1Da0FmbWlZ
ZGVmN2t0aGNSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF
BwEHAQH/BB4wHDALBAIAATAFAwMAldswDQQCAAIwBwMFAyABOIAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICIG8wDQYJKoZIhvcNAQELBQADggEBAJfqWB5TLPovSA4G
a+Jf/Cxdy63VUvAMincDSzRqEEu4z6KTofb0KAqT8+bElpEfFvyDNXqBfMw1GZPL
fjFjEhUx89Ak15b1D3DYoEY25R5lhl9aiSMTe99gSOI4suHiyAWMPV05+KUCWdwJ
XdGzTqRH1UAlq1Hwid8yHmUN+kglyOCZsDTb2AjRtZG9VU3jHSmtUsNPfOjbGB8v
ljzdCOWiBnWc/407WMYZ5DvZoAeK8DWCY2eiNDOWeyY5vAkhtV3m+5WdVUVyq20A
7VudEZj/Sx5T8EvWT9uSbKRlytLkzNlILppcIOTp/qC7l2UC+npAGwHImqZkZs4z
XE9j3/E=
-----END CERTIFICATE-----