Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.cer (raw, json)
Hash identifier:          OrXcTwLil2FA66IExsr++07oFJ6X1Zhm3CBynOhyEQk=
Subject key identifier:   EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427479F154D905AD62355DA74048BCC72
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 203536
                          IP: 185.63.8.0/22
                          IP: 188.116.42.0/23
                          IP: 2a03:920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:9f:15:4d:90:5a:d6:23:55:da:74:04:8b:cc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:d9:a9:b7:8e:bb:65:2d:6c:e4:3a:41:31:
                    54:f1:de:2d:79:3d:20:2c:32:f0:ea:30:e3:c6:fc:
                    ae:ca:82:04:f6:1e:b1:e8:14:5d:02:20:bd:3e:58:
                    38:b2:ae:1d:05:c4:2a:fe:a4:55:5a:4e:d0:e6:f3:
                    3a:03:5e:88:f5:fc:6b:2b:fc:4a:74:1e:ff:c2:cf:
                    16:ca:c8:cd:ea:0d:12:53:a0:aa:64:f3:19:1f:27:
                    6d:08:08:47:9e:e8:03:f0:f7:54:77:ea:a5:67:cc:
                    96:e2:c0:0d:6b:52:ce:ad:b8:1b:58:c0:dc:19:c2:
                    82:f7:b2:08:80:a0:f6:00:b6:98:90:e4:7d:65:ad:
                    08:8e:fe:ed:17:60:d1:2d:60:f0:7d:c0:be:3d:f3:
                    3a:a8:45:60:22:6e:26:06:9f:58:fd:59:c8:17:f5:
                    19:0b:b7:45:12:9a:ad:a9:31:87:b3:2c:49:18:54:
                    51:eb:ea:1a:81:32:93:0c:78:3f:d7:d6:c4:5a:d8:
                    87:9c:1c:4e:13:c5:3a:8b:b6:2e:99:f6:5e:cc:99:
                    86:cb:a9:95:cf:62:16:ce:93:20:13:78:10:58:9e:
                    7c:36:e9:32:c8:28:3c:03:ea:b2:51:a0:9b:a0:e4:
                    38:6f:1e:6b:be:fb:67:e2:3e:54:f1:36:61:09:58:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.8.0/22
                  188.116.42.0/23
                IPv6:
                  2a03:920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203536

    Signature Algorithm: sha256WithRSAEncryption
         42:69:32:60:d0:9b:95:49:b9:79:22:b3:91:d3:ca:4e:97:9e:
         c7:24:81:86:70:77:d9:6e:9d:35:ea:79:1a:7f:f0:8d:d5:2b:
         9c:3a:5b:04:30:e7:84:8f:e8:cb:26:f3:a4:9c:16:e5:f1:5e:
         c8:4b:d2:20:4c:58:61:34:69:9e:92:72:7c:b4:a1:31:80:4e:
         04:f5:de:46:53:1e:d0:4c:f3:7d:37:ce:80:f3:bf:07:ba:9c:
         47:77:4b:17:e9:38:d5:57:7c:6b:41:36:b1:c4:09:0e:0e:1c:
         de:d8:ea:f2:35:26:f8:1e:57:0f:56:67:7d:82:33:a9:4d:ed:
         cf:b5:5e:42:a3:d9:b1:25:62:2a:aa:3a:be:aa:bf:30:26:bf:
         31:5a:86:e2:48:51:8a:90:90:df:78:3d:e0:6f:43:f1:21:cd:
         93:b4:68:02:8c:c0:36:0c:31:9c:8e:6b:1e:20:65:d3:31:06:
         8f:d3:c1:0a:cd:30:7d:0e:75:2f:a6:6a:ca:2e:30:8a:b8:b5:
         c3:ba:0a:b6:98:a6:df:fd:cb:98:0a:6f:ab:84:fa:1b:8f:03:
         07:57:07:10:6c:3f:41:3b:b9:1a:75:27:7e:bc:3d:24:2c:8e:
         87:2c:d9:ec:cb:27:e0:e3:00:42:d1:fe:de:2c:3d:6b:c4:a4:
         c5:b0:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----