Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
File:                     tu1iBVpRkcAuxREulRgaiawGDOs.cer (raw, json)
Hash identifier:          bzfNgWT5A647n+wSrC3+m+wXwaAYRvu4l07dnsFG2ek=
Subject key identifier:   B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6F98EADE476F874F7D7E8A6DDB292
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.73.136.0/22
                          IP: 2a05:42c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:f9:8e:ad:e4:76:f8:74:f7:d7:e8:a6:dd:b2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:9f:de:d0:20:15:85:7c:9b:f8:be:d5:28:
                    d8:f9:12:fa:0c:cb:7b:25:46:4d:a1:20:49:b2:7f:
                    d7:bd:6e:4f:48:04:fe:bb:2f:7e:1e:4d:47:06:42:
                    91:65:f8:ba:14:f9:3d:d3:eb:ea:fe:2d:3e:6f:cc:
                    4b:24:a8:99:88:53:10:40:ff:ae:a4:7e:47:f7:dc:
                    87:2e:53:0f:f0:dd:50:15:c4:d4:79:61:cd:fd:43:
                    58:54:f6:66:0c:76:66:e5:db:bc:4e:d1:86:f5:fd:
                    8b:32:df:a6:1b:d8:b1:93:f4:43:ee:41:e0:4b:fd:
                    d8:53:67:7c:25:3c:ac:55:a5:e0:15:bc:2a:e4:cf:
                    dd:02:2e:24:66:63:c4:35:66:88:d9:43:75:bd:25:
                    b8:d7:71:7f:da:9b:a3:b9:ef:9f:24:29:be:39:45:
                    f9:46:f9:c6:64:a8:a6:fc:64:95:47:e4:ca:43:9d:
                    38:53:99:f9:0a:4e:78:df:cf:a9:43:6e:e4:de:40:
                    03:a2:b9:e4:c7:e8:eb:11:ea:c8:c6:22:dc:bd:bf:
                    a8:e7:3c:7d:ef:17:c5:1a:ef:d4:78:35:3f:9c:a3:
                    d5:f7:44:bd:8d:83:9d:72:22:41:bb:26:cf:4d:c2:
                    37:d6:b4:69:35:cf:e5:42:e4:02:72:3a:89:a0:ee:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.136.0/22
                IPv6:
                  2a05:42c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:02:c4:3b:6e:88:83:c7:ad:24:52:e1:89:52:81:5e:4f:be:
         b9:63:56:68:99:f7:6f:d0:b4:1f:ba:ec:e7:7e:8d:49:cb:ce:
         ed:79:63:ac:1b:0d:f7:80:82:b6:18:67:3f:65:9e:b4:92:7c:
         db:7f:82:ec:e3:e0:08:32:6b:2e:f8:9e:ee:8b:65:69:2e:2f:
         48:75:cd:e9:d6:cc:36:28:1c:e1:e0:87:57:60:b4:1f:e2:0a:
         d2:5c:01:a8:9f:f3:52:fd:4b:4f:75:dd:b4:90:4e:c8:d5:c3:
         85:bb:f8:9b:63:6a:26:3e:cd:03:68:9f:90:4c:db:99:a6:d6:
         0f:7c:dd:5c:7d:43:57:67:5c:6c:0a:48:fa:65:5e:21:3f:da:
         1a:91:98:53:2c:33:f7:cb:8b:44:e6:13:0a:7f:dc:6b:c9:6d:
         e5:50:81:ef:cc:ae:1b:ba:a2:9d:f6:df:8e:6a:ef:c7:8f:fb:
         1d:35:fe:53:cd:b6:99:33:91:2d:3c:fa:45:90:b7:3f:aa:2c:
         77:21:6f:c8:d0:48:e0:fa:8b:bb:2e:42:83:b2:c7:38:ee:dd:
         26:26:47:05:fc:0c:82:36:10:e0:ef:03:4f:31:38:a1:31:2e:
         f6:ca:33:18:86:7e:a6:09:d4:b1:76:3d:86:2c:8e:e4:ab:04:
         a6:02:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----