Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
File:                     O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer (raw, json)
Hash identifier:          Ykiw/cvechd+zFuQ4CSYXk/1mqT1B6fQM25EzVoCFoM=
Subject key identifier:   3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221F9A63657A12932499057BAB1614FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201821
                          IP: 185.63.72.0/22
                          IP: 2a03:9a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:9a:63:65:7a:12:93:24:99:05:7b:ab:16:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:72:8b:e3:ef:2f:c8:84:dc:29:20:e1:a3:
                    be:49:2c:b4:d9:a9:b7:ee:0a:d8:bc:06:9d:9c:85:
                    a0:ac:d1:86:51:bc:bf:88:d7:0f:e3:56:49:f5:01:
                    f4:78:00:24:4c:07:d9:ce:25:47:ce:b6:0e:8e:48:
                    7d:4d:93:e0:30:67:88:75:83:a2:b0:26:ef:8d:b2:
                    df:49:93:d9:37:89:74:c8:ed:de:85:0b:19:34:91:
                    5c:61:09:e8:ad:bb:e4:e4:4f:ef:f1:f7:cb:6f:57:
                    2e:b5:4d:3f:b7:f4:90:f6:e4:49:64:80:54:f5:be:
                    c6:cf:10:44:6d:ec:29:7b:1a:fe:5b:08:a6:d2:95:
                    c3:01:43:b0:42:17:5c:ce:76:d0:e4:c7:5d:1c:31:
                    5f:5d:cb:6f:5b:d8:11:18:b1:e1:5e:2c:03:6e:1c:
                    f9:e8:b4:29:c7:f4:e2:df:54:9b:f0:00:25:a0:4e:
                    6a:b1:66:0b:ee:0a:22:8b:c5:17:4b:f5:85:03:0a:
                    32:a2:e6:84:d5:18:fd:54:e3:2c:e5:0e:c7:47:35:
                    f4:d1:7c:b3:41:e6:c6:d2:72:da:f8:1b:b1:68:17:
                    8f:f4:17:6b:92:d0:17:cd:64:67:6f:30:07:cc:87:
                    f7:fd:a8:cd:49:37:f6:89:19:c7:a3:d2:13:fc:4e:
                    3e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.72.0/22
                IPv6:
                  2a03:9a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201821

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:66:1a:14:5d:cf:ba:94:e0:58:9a:dd:c6:19:37:d4:5e:
         ec:6f:08:ce:d3:0b:0c:ef:01:16:24:26:9c:8c:a0:21:17:3f:
         2b:19:69:ab:e3:82:c7:14:c5:5e:e0:de:15:c5:c9:2f:24:d7:
         fe:58:07:ac:ad:d8:20:a9:52:09:30:6a:d6:88:dc:9e:5a:a7:
         10:d8:5b:52:13:95:66:5f:76:cf:4c:30:3a:11:b8:e6:d3:11:
         51:1c:29:e2:25:4a:fc:52:48:e8:b8:f4:48:71:5b:fa:51:fa:
         7e:97:86:b1:08:ea:38:19:b0:05:bd:6c:e2:2c:3f:37:73:89:
         93:9c:4b:49:9a:e4:08:8b:bd:96:f4:11:74:6f:cb:cf:2a:dc:
         67:88:7d:93:58:00:de:ca:71:3c:55:d2:be:6f:7c:3a:87:27:
         4c:1a:66:97:98:de:c6:d3:d1:30:ba:74:0d:e0:43:da:2a:74:
         68:25:70:93:5a:13:c1:4b:d5:19:da:ec:c3:dc:ea:3d:c2:95:
         eb:3b:8b:22:c7:8f:b7:cb:82:bb:fb:64:29:27:f5:83:f9:3e:
         03:3a:13:86:d4:d9:89:ff:a5:3b:55:08:86:57:69:96:87:e5:
         61:21:d6:61:6a:67:10:ba:84:3f:98:ac:4f:ad:95:82:9f:37:
         a0:e5:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----