Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.cer (raw, json)
Hash identifier:          Uh2bHD03Um3FZDi99SPNKHS3EMxBu9eHcxo9iBZ5eWs=
Subject key identifier:   B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3CA26DAB7DFABF6EDCA36F972D640
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 16104
                          IP: 193.41.89.0/24
                          IP: 2001:67c:1684::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ca:26:da:b7:df:ab:f6:ed:ca:36:f9:72:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:57:5a:e8:f6:d0:2b:3d:61:44:d1:f0:9f:b8:
                    57:26:f6:ce:37:ac:6a:52:3c:1c:3f:b0:f1:7e:70:
                    1b:cb:84:77:35:58:87:7c:c9:36:54:ba:b6:4c:7d:
                    c3:7e:de:d3:9b:f8:7e:31:00:4f:16:1a:02:da:fe:
                    c9:06:b4:e1:b4:a9:38:87:db:e2:f4:d8:f1:df:db:
                    0b:0f:13:89:b3:b9:f9:aa:bb:88:dd:a2:2d:4b:66:
                    75:3c:42:ab:7e:71:2b:c3:71:ae:7d:a0:45:72:33:
                    c5:fb:b9:a2:51:81:65:55:e0:50:72:11:c6:4d:d8:
                    3f:14:8e:46:37:de:33:ec:36:03:1c:bf:4e:2f:cc:
                    0d:92:7a:d7:e8:36:95:0d:28:b1:cd:a5:f3:d6:fd:
                    ed:26:6a:a6:e2:ce:c9:a5:4d:fc:d4:59:1e:f7:32:
                    d4:01:7b:cc:6d:53:85:13:26:74:c0:68:1a:7f:e6:
                    d2:31:7f:0f:8a:6f:72:3d:8e:16:14:5b:cd:54:a6:
                    f4:07:c7:52:be:de:b6:e0:55:46:b3:b9:91:93:fe:
                    21:f5:f6:34:42:67:42:67:76:d0:f7:9e:81:19:68:
                    76:3d:6e:a4:d5:90:99:b5:97:10:4d:82:3b:6c:79:
                    63:92:41:6d:4b:21:34:5d:99:01:26:79:4f:16:11:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.89.0/24
                IPv6:
                  2001:67c:1684::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16104

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:7c:0f:34:8d:07:20:93:9e:96:29:1e:4c:9e:e9:23:03:
         6f:ac:9c:3e:61:6b:b1:ef:42:db:f9:28:a7:8a:fa:58:dd:9d:
         25:20:c6:fa:fc:5c:d8:a7:e5:88:a5:62:6a:a5:2e:2a:53:a5:
         6c:61:81:e1:e6:98:35:17:37:22:0e:42:1b:fa:6e:0d:b5:c7:
         ea:51:ad:47:f3:8d:1b:27:1c:76:d8:2b:ef:64:d5:b1:61:b2:
         a4:f3:5d:4f:23:ae:1b:44:cb:ac:c1:bb:e2:65:6d:96:23:ab:
         d6:d9:2d:41:59:09:cd:6f:0d:9f:72:11:f6:36:f5:79:c3:f7:
         86:77:bb:60:98:9d:6e:6c:48:6a:7f:8c:64:42:12:b0:92:8b:
         f7:28:9d:db:8a:8a:c8:3e:a8:68:f4:aa:69:fd:92:3b:35:52:
         df:e9:72:48:0f:23:8c:0d:d8:8d:76:8d:06:9d:fd:ab:45:01:
         59:35:45:2a:c5:ee:d3:d4:19:6e:11:52:57:4f:5d:b6:f7:d4:
         19:9d:b9:71:fd:a7:d9:cb:a5:9b:38:dd:a1:e8:c9:4d:21:db:
         12:2e:a3:35:bb:17:f2:b4:0d:04:28:dc:0a:56:cb:45:91:84:
         59:f8:e6:2a:02:f5:48:c4:90:79:eb:9d:29:ec:62:04:b5:1d:
         f6:8a:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----