Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer (raw, json)
Hash identifier:          aGT10HjWWyiLMH5I2rwhNON64YqdrGAu3r1jTiB2JAM=
Subject key identifier:   B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9D76D9CFAD9B34DBE2313274C6E44
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207519

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d7:6d:9c:fa:d9:b3:4d:be:23:13:27:4c:6e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:39:94:61:a7:d1:cd:68:ce:d4:61:4e:6c:
                    9d:a3:f0:cd:dc:3c:e1:f2:c2:c5:eb:46:35:d7:d5:
                    43:76:21:1f:c3:9c:a7:d0:18:2a:f7:dc:da:48:f1:
                    bd:1d:43:5e:5d:7a:36:ba:2e:05:9f:83:23:9b:d7:
                    36:c7:0e:86:0c:b8:c6:3e:2f:38:9f:f4:77:56:d9:
                    b7:1a:1b:1d:ae:d6:3c:37:61:23:a7:27:24:5f:4b:
                    25:10:44:34:57:c6:7e:5f:98:4b:42:39:5d:cf:ea:
                    3f:d8:de:63:ad:52:3f:5e:11:4d:56:86:a4:3b:68:
                    77:8a:2a:fb:66:b7:37:1e:de:7a:55:58:41:7d:8a:
                    1c:d3:15:39:a9:ce:43:7b:33:91:12:46:43:1e:06:
                    20:40:e4:1a:f2:47:6c:92:5e:92:d2:34:58:00:21:
                    65:bf:07:9c:55:f8:8c:68:d4:9d:6e:1d:e6:20:8d:
                    96:36:37:c1:93:bd:ad:71:a3:7a:a4:a1:30:a2:f4:
                    b7:f8:b9:9f:13:f1:f2:2f:6b:bb:78:df:6a:12:28:
                    3e:1c:7b:d0:f4:0f:22:a6:d9:54:45:94:6f:5b:42:
                    eb:58:3d:ca:e4:37:aa:c7:b1:7c:71:08:2c:0f:90:
                    de:50:85:21:9b:f9:fc:43:f9:c8:a0:7a:6a:f3:aa:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207519

    Signature Algorithm: sha256WithRSAEncryption
         a5:36:5d:46:96:58:03:61:47:4c:cd:83:0f:c8:e0:ef:9e:dc:
         2b:ca:84:6a:5a:72:04:c5:14:05:25:48:44:c4:f4:34:ec:85:
         27:49:00:dd:71:ff:8f:2e:20:96:6a:cd:a1:d1:07:e4:2c:e1:
         0c:8c:63:fc:f9:33:f1:07:6d:d8:72:60:5d:85:11:3d:b1:af:
         6a:75:80:5a:5c:81:5b:b6:e8:2b:73:8f:5f:82:b3:08:a0:5b:
         1e:a2:81:db:8b:75:70:11:02:df:4b:1d:1e:cc:51:97:bc:38:
         df:b6:4a:7b:8a:7b:5b:fc:9c:00:0c:3a:60:7f:84:11:3b:28:
         64:3d:f7:97:ca:38:cd:d2:73:fe:d5:da:64:85:4f:d9:c9:cd:
         4c:12:93:fe:6c:b9:79:09:c0:c8:01:fe:ab:be:6b:e8:e4:4c:
         7b:ea:cf:1c:ae:6a:46:c8:50:84:19:c9:76:78:00:5f:f9:8c:
         b1:c8:9c:32:b6:99:8a:04:2e:84:da:91:ba:9b:3f:cb:33:68:
         98:d3:22:b0:73:16:c8:2a:3b:32:82:89:a5:f8:be:93:e5:44:
         6c:ba:ed:f4:c4:37:3f:c9:70:2e:c8:3c:a2:f7:1d:09:d4:5e:
         df:69:83:bb:9b:f4:58:99:0b:d6:93:12:23:b8:97:f9:56:29:
         93:42:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----