Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
File:                     tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer (raw, json)
Hash identifier:          6TvpQCALg4oi7QHqqH3PqnSmCnYc/SduM8i5oX6wt74=
Subject key identifier:   B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019474345110E0F3DE297AACCE9221BDA221
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 12:19:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47540
                          IP: 185.97.214.0/24
                          IP: 2a13:cfc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:74:34:51:10:e0:f3:de:29:7a:ac:ce:92:21:bd:a2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 12:19:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:b1:b1:38:a8:4f:18:af:a5:15:52:75:28:
                    50:a2:7b:cc:e8:b0:26:eb:a0:e3:2a:61:87:f2:3f:
                    53:c9:0c:f3:72:4c:e6:9d:af:4f:21:10:37:1d:9d:
                    0d:4e:9f:25:c1:07:16:a6:03:dd:fd:99:4d:e5:53:
                    e3:c0:8c:20:20:17:98:69:09:12:e2:83:95:b7:c5:
                    f3:0a:66:15:7c:ea:39:43:dd:c1:c1:90:ea:67:95:
                    3e:29:59:e2:f4:2e:87:f5:ca:9f:af:52:76:31:e9:
                    1b:3b:76:c4:40:bf:f6:d0:b2:31:47:27:4a:1a:42:
                    84:3e:0b:7f:fb:6d:18:30:51:f9:f7:5c:71:1e:a2:
                    56:d3:8f:41:41:2a:61:e1:df:14:3c:90:55:4f:2b:
                    12:cd:e8:4c:ff:d5:d5:3c:6e:eb:20:4a:1e:74:81:
                    0b:85:8b:0f:e2:71:c3:a0:13:3c:05:1b:3e:03:de:
                    1c:06:b1:06:c2:67:a0:f5:b4:ef:26:e3:fa:e3:f0:
                    b0:5d:0a:d0:dd:59:af:20:6e:fc:69:e4:db:79:14:
                    a3:e7:6a:f4:c2:db:f3:97:79:c8:be:68:b1:0f:97:
                    c8:b7:7a:9c:e0:bd:17:45:0f:86:5a:0a:93:89:b5:
                    34:ef:e7:32:63:29:94:dd:19:a1:4d:9e:b6:82:1f:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.214.0/24
                IPv6:
                  2a13:cfc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47540

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:47:d9:2f:c9:17:a1:eb:4d:b9:b2:95:92:e2:e6:a5:88:
         ce:4d:6f:05:c8:67:8d:cc:07:ce:d1:d7:d1:07:99:83:4e:5c:
         25:fb:c2:9c:00:1b:54:eb:be:d1:44:22:56:cd:35:7f:b3:f9:
         f2:64:5a:80:69:24:e0:b8:7d:79:16:f3:be:19:cd:e2:b0:f0:
         ad:36:5e:e3:ef:67:6d:60:06:97:f0:77:50:fb:2b:61:34:24:
         26:ea:c4:a2:82:d2:24:8e:ba:0f:4f:49:74:b9:e1:82:4d:8d:
         51:ce:45:77:43:dd:4e:96:3f:39:62:f0:20:75:85:11:31:91:
         96:49:2c:32:99:c3:5b:1c:80:f8:d8:cf:17:a2:32:d3:d8:b7:
         04:59:16:a6:77:80:63:4d:8e:6d:d9:0b:aa:09:39:53:9c:11:
         e1:ab:32:f1:dd:61:b8:3c:4d:98:e3:12:79:75:43:32:b8:a1:
         a7:d6:4f:ca:00:bf:b0:f6:ec:11:df:ac:d2:62:95:0d:49:d8:
         ce:1f:e2:6c:0f:ba:ab:38:f3:aa:f3:14:8b:b4:f2:4a:b9:12:
         9f:cc:b2:21:93:ca:b5:dd:b7:3d:ae:70:52:8e:25:e5:86:2b:
         6a:b7:44:13:90:94:91:b6:95:b8:8e:e6:12:e7:fb:e2:48:39:
         53:6f:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----