Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
File:                     1-TmwPxKU69NaOxXWldfpH4y0H6A.cer (raw, json)
Hash identifier:          A1Bpm7w45Hm6JM30ZlS6tWomi+3CKNxOLkhSEtyxYH4=
Subject key identifier:   F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FAFF14C2D4624DFB1A9DF30BE8A366
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200530
                          IP: 194.5.40.0/22
                          IP: 2a0c:e4c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fa:ff:14:c2:d4:62:4d:fb:1a:9d:f3:0b:e8:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:66:d2:66:0c:1c:fe:04:ee:0c:0f:84:7d:
                    1d:68:88:00:00:83:ae:c1:38:34:f8:c6:f2:bb:77:
                    92:b4:f6:71:c6:44:2e:cb:eb:d1:24:59:22:e3:43:
                    b7:43:06:e4:5c:07:ad:ee:0c:36:ff:a6:53:e9:45:
                    dd:6d:d0:4e:0b:3b:3e:01:c5:58:55:06:fa:a5:94:
                    b1:a2:e2:fe:e8:24:83:ab:e2:7a:c8:e4:b6:79:6b:
                    a5:24:80:03:ab:6e:e6:df:5f:e7:43:4e:49:2b:dc:
                    8e:51:f9:63:29:a9:09:6f:d9:73:d3:28:8a:96:81:
                    56:91:51:b4:e0:cf:4b:5b:d2:d0:89:87:e6:c3:7f:
                    56:89:69:f3:8a:5d:c7:7e:3c:57:e1:a4:e9:01:44:
                    31:3d:77:51:d6:ae:4c:1a:7e:7c:86:37:c9:5b:ab:
                    7c:64:18:64:ed:a8:9a:3c:4c:64:b7:b2:15:26:ae:
                    96:fa:e0:83:59:f5:35:fc:ed:84:b1:ac:c7:00:87:
                    15:c7:86:b1:b6:04:57:55:ee:9c:0a:25:52:84:51:
                    be:21:21:cd:b6:b4:a5:d8:7f:62:41:fe:f0:3e:2a:
                    39:7a:2a:c8:02:7b:72:0e:95:4d:73:e9:fb:1c:b7:
                    c1:cd:83:d3:a8:69:d1:f9:72:94:0c:6e:4e:18:3b:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.40.0/22
                IPv6:
                  2a0c:e4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200530

    Signature Algorithm: sha256WithRSAEncryption
         88:95:bc:91:f6:c3:3c:ae:ce:ff:d1:dd:67:bd:84:28:47:17:
         54:9c:49:1f:07:cb:49:99:f5:c8:90:45:5d:02:69:3b:37:7b:
         2c:f0:4b:fc:35:ab:6f:3f:d4:a2:1a:2d:76:36:2a:39:71:4d:
         d2:b0:9a:33:a1:36:fd:fb:2c:85:11:50:9d:f3:de:fc:2b:af:
         bf:bf:fb:8a:46:f8:96:6a:32:01:d8:55:d4:25:76:3c:04:61:
         d3:b8:a3:dd:73:de:77:36:68:2b:63:e2:69:0f:ec:29:ac:1e:
         f2:88:99:e5:01:71:41:5f:88:f2:77:b9:69:5e:27:bf:52:22:
         f2:7f:0a:71:23:76:2e:02:33:e3:2a:d4:8b:6e:ac:ff:d8:c4:
         23:c6:46:cb:41:28:2e:71:98:d6:4b:c5:41:58:5f:0b:da:7a:
         c0:3c:af:1e:4e:ea:af:67:71:1a:3f:f6:48:55:db:fc:75:ff:
         c8:46:78:0b:fd:6f:bc:d7:bf:60:46:92:ea:96:7d:95:b4:d2:
         86:a9:bc:c3:44:42:9a:a3:9e:cf:67:bb:48:e6:39:a2:c0:43:
         91:f8:a7:24:61:e2:93:9c:18:2b:14:c5:26:09:a7:32:e0:40:
         c8:57:6e:d0:45:df:2d:d0:af:8b:52:f3:2b:44:27:00:95:33:
         a3:52:f6:55
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZQi+v8UwtRiTfsanfML6KNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTM5YjAzZjEyOTRlYmQzNWEzYjE1ZDY5NWQ3ZTkxZjhjYjQxZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dVm0mYMHP4E7gwPhH0daIgAAIOu
wTg0+Mbyu3eStPZxxkQuy+vRJFki40O3QwbkXAet7gw2/6ZT6UXdbdBOCzs+AcVY
VQb6pZSxouL+6CSDq+J6yOS2eWulJIADq27m31/nQ05JK9yOUfljKakJb9lz0yiK
loFWkVG04M9LW9LQiYfmw39WiWnzil3HfjxX4aTpAUQxPXdR1q5MGn58hjfJW6t8
ZBhk7aiaPExkt7IVJq6W+uCDWfU1/O2EsazHAIcVx4axtgRXVe6cCiVShFG+ISHN
trSl2H9iQf7wPio5eirIAntyDpVNc+n7HLfBzYPTqGnR+XKUDG5OGDvYUQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPk5sD8SlOvTWjsV1pXX6R+MtB+gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzBjOWRl
OC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3N2MvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4
LWNlZjItNGQ4ZC1hOTIwLTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhX
bGRmcEg0eTBINkEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEAsIFKDANBAIAAjAHAwUAKgzkwDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDD1IwDQYJKoZIhvcNAQELBQADggEBAIiVvJH2wzyu
zv/R3We9hChHF1ScSR8Hy0mZ9ciQRV0CaTs3eyzwS/w1q28/1KIaLXY2KjlxTdKw
mjOhNv37LIURUJ3z3vwrr7+/+4pG+JZqMgHYVdQldjwEYdO4o91z3nc2aCtj4mkP
7CmsHvKImeUBcUFfiPJ3uWleJ79SIvJ/CnEjdi4CM+Mq1IturP/YxCPGRstBKC5x
mNZLxUFYXwvaesA8rx5O6q9ncRo/9khV2/x1/8hGeAv9b7zXv2BGkuqWfZW00oap
vMNEQpqjns9nu0jmOaLAQ5H4pyRh4pOcGCsUxSYJpzLgQMhXbtBF3y3Qr4tS8ytE
JwCVM6NS9lU=
-----END CERTIFICATE-----