Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
File:                     O2BOwM_ulmxBmzptXwgrVjwYaL0.cer (raw, json)
Hash identifier:          5QyCntYgtlYKhytLMhG3LDKB/6+SRnLI65bhlcXL5jA=
Subject key identifier:   3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC5AF53D6F4847977257710224A8FB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212900
                          IP: 2001:67c:abc::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:5a:f5:3d:6f:48:47:97:72:57:71:02:24:a8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:6a:7f:4c:4e:b3:28:20:f7:7a:e6:87:78:
                    eb:7a:0d:c8:d2:3c:16:81:78:db:26:35:e5:fe:95:
                    7f:56:a2:42:30:25:d5:f5:f9:21:e8:65:90:5e:1c:
                    58:43:cf:d9:a8:d8:12:6c:15:65:65:fc:4f:08:d8:
                    1d:00:f8:3e:1c:37:18:e3:f1:c5:d4:d6:fb:fa:3c:
                    13:c2:b8:fd:3c:37:ba:b2:d7:04:14:67:dc:c8:e1:
                    d7:61:ac:bb:9b:9b:4c:1e:88:53:62:87:8f:2c:56:
                    e8:31:fc:42:0b:03:0b:bd:22:bb:54:ce:37:41:f5:
                    c8:61:53:aa:0a:16:f1:5b:52:cf:e4:6a:42:08:53:
                    b5:67:35:0f:62:07:2c:d9:c9:db:8b:ae:b8:18:9d:
                    a8:c1:31:af:6f:ec:e7:78:b3:c2:c7:e7:8c:65:38:
                    b5:8a:22:d8:2c:d2:7b:c3:1e:0c:1e:86:99:47:ca:
                    20:b0:23:d3:31:50:1b:f6:0a:d2:d0:56:e3:51:2d:
                    13:be:1e:10:d7:e3:e2:5b:cb:fe:b2:3f:d5:b8:60:
                    dc:36:03:11:2d:14:01:4c:d0:93:2f:7a:2e:ea:9d:
                    3c:5a:ed:af:8a:94:58:19:6c:b0:28:8a:16:95:20:
                    d0:75:9d:4f:c2:30:d2:5a:b8:11:b6:2e:07:42:bb:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:abc::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212900

    Signature Algorithm: sha256WithRSAEncryption
         29:68:4d:be:aa:e9:f9:e3:8f:a4:91:48:fb:b5:5c:48:4f:83:
         7c:ea:05:88:72:da:53:49:dd:f9:6b:56:ee:92:39:ae:20:4a:
         d0:62:dc:27:5b:18:82:4d:06:e2:d7:13:e6:27:ec:13:69:3d:
         31:07:fc:05:ea:01:a4:95:b3:14:dd:67:83:07:dd:4e:f0:72:
         35:b4:3e:9e:8e:2b:92:00:c2:5c:6e:f5:a7:14:ed:13:bd:92:
         60:bf:9e:5b:22:06:83:49:3e:5c:64:54:01:ec:04:44:cb:a7:
         f4:a5:1c:b4:f7:1f:d3:84:46:6b:f8:de:5c:b6:96:6c:f5:7a:
         4f:d5:e7:67:50:bb:7c:19:b4:52:88:8d:cb:45:1b:d4:26:86:
         85:02:09:2e:b9:14:ab:7c:8f:98:40:6b:12:cd:59:23:ad:d4:
         7f:bd:38:f1:5c:1b:2a:6a:91:b4:25:7d:66:71:89:72:ed:93:
         8a:b9:b4:01:0a:d5:d7:37:65:2c:5f:e3:7e:20:56:1b:33:b9:
         52:b8:08:3d:f4:3d:32:74:3b:c7:da:43:e7:7a:5e:8a:52:d4:
         01:6d:e4:f4:48:87:c1:72:b6:f8:c3:30:ae:97:b8:bd:5e:45:
         d2:df:6c:e1:58:43:4a:b5:95:84:3a:15:5a:28:13:84:06:c2:
         2d:21:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----