Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
File:                     O1HtwFDk-YX73VeMzgKtyIDGyKc.cer (raw, json)
Hash identifier:          gHK364O9eQSkCXDqhFeCwuGkRP+YWzzI3eoksvvaidU=
Subject key identifier:   3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01956127C422E4FF0E21AE68965354C8A684
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 12:35:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.118.232.0/22
                          IP: 2a06:9340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:61:27:c4:22:e4:ff:0e:21:ae:68:96:53:54:c8:a6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  4 12:35:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:7e:12:b7:a3:a0:2f:54:b0:84:ab:31:13:
                    09:d3:58:30:9f:e2:47:87:c7:8c:9e:d0:59:af:49:
                    93:69:11:73:34:cf:51:69:1e:8c:17:d1:17:77:b2:
                    53:00:7f:96:74:49:aa:fb:3d:7a:97:82:4b:e0:fd:
                    ca:d6:3b:18:6c:62:c5:73:89:3e:2a:bf:a9:52:9d:
                    b5:2e:f7:34:e8:f0:2e:15:82:63:86:24:5d:6d:54:
                    ef:64:8c:94:ec:2a:8a:41:6a:fa:99:4c:cc:25:58:
                    39:80:e8:42:6d:e0:41:d1:88:48:e5:89:82:9f:97:
                    3a:87:a3:29:d3:06:56:a0:03:54:c4:b0:c9:4f:bb:
                    06:e4:f4:a2:1e:56:9d:19:06:86:6e:a7:e9:a7:1a:
                    a1:70:7d:2e:cc:13:12:29:f9:af:aa:7d:f7:92:44:
                    50:94:ca:78:60:0c:6d:75:68:de:ec:a9:99:10:fa:
                    d7:6a:23:91:9d:4e:20:11:f8:28:71:35:6b:35:a0:
                    26:49:7e:67:db:40:53:b0:95:6c:c3:7e:97:66:62:
                    9d:36:be:14:00:6d:7a:90:41:cb:5a:dd:69:10:c1:
                    e5:bd:49:0f:6f:d0:b2:37:5c:cd:eb:4d:16:86:00:
                    51:e4:63:aa:b6:6e:83:56:d9:d4:66:d6:7e:3a:9c:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.232.0/22
                IPv6:
                  2a06:9340::/29

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:e9:97:a1:25:71:bd:07:06:89:8c:84:ba:82:fd:32:40:
         17:4f:59:28:09:a8:50:7f:32:3f:2d:76:2e:bf:46:5f:0f:b3:
         1a:aa:86:97:a8:ae:72:98:a3:92:10:cd:98:65:4a:f1:42:c5:
         06:25:d4:cf:e4:10:1f:5c:bd:ea:4a:6d:02:3c:d0:2a:58:7e:
         76:e7:24:67:89:d9:e0:8c:d7:50:2b:7c:24:14:8a:32:8c:7d:
         8f:69:01:64:4e:6a:8c:a9:c8:63:a2:fc:e2:f0:4f:b3:52:68:
         55:05:db:b5:a1:77:12:2d:ab:d1:21:02:eb:c3:0b:f9:42:64:
         30:fa:6a:54:6b:07:81:e2:06:a9:d6:a2:f5:f8:46:a3:22:e1:
         80:1e:48:c3:4a:73:17:b8:a1:88:35:99:a0:2e:2d:39:e6:14:
         35:a2:57:00:e6:e3:aa:d3:62:4d:27:32:62:4e:65:ee:4a:b8:
         c3:f4:de:bf:52:d4:15:fa:54:d9:40:4d:62:e5:48:68:9e:29:
         4c:08:7d:bb:78:83:4c:10:76:e3:b1:b7:eb:b2:19:8e:be:83:
         e3:8b:6e:ad:5a:6b:3b:4c:e3:4f:99:a9:10:60:29:20:da:7e:
         c9:bf:90:0f:cf:17:f3:1c:76:05:f2:c9:81:c5:99:d4:fb:d6:
         60:ef:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----