Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
File:                     O9_XYE36DriuIOkPzxMDk7ioVko.cer (raw, json)
Hash identifier:          nUS/vQOBZdLuz5sOmJoe5uhdW+afkepcZuwuv6FV2ig=
Subject key identifier:   3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425223BE9E5DB1ADB6E961579FE34EA5F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34987
                          IP: 185.90.4.0/22
                          IP: 2a05:dd00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:3b:e9:e5:db:1a:db:6e:96:15:79:fe:34:ea:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:68:99:73:52:24:41:24:9d:22:ed:3f:21:
                    40:42:89:b8:e0:78:1f:1a:58:92:a9:1b:ed:16:eb:
                    ae:54:9a:2e:7e:61:e4:0c:79:ad:f2:3a:99:4e:10:
                    b4:dd:84:8e:25:41:51:22:3d:a1:a3:28:ed:54:02:
                    07:5b:d8:81:b5:73:03:43:19:ff:48:3e:49:5a:91:
                    5d:ac:29:e0:11:b6:c5:5e:ad:bf:c7:37:3a:0f:b4:
                    ad:43:d4:1e:19:bb:98:da:b3:38:6c:bb:fa:2c:85:
                    12:52:39:e7:db:a1:0a:ec:82:6e:51:3d:6c:71:25:
                    fe:10:83:90:63:c9:a8:4f:ca:5c:82:0e:cd:f7:e7:
                    73:40:05:98:2c:22:ac:6f:ac:11:81:2f:39:df:79:
                    a4:59:75:ca:34:8f:40:7d:b8:72:6e:32:15:a4:cc:
                    70:33:bb:c9:fe:2f:05:d1:69:ad:fc:31:87:f8:7a:
                    8c:c4:13:82:b1:02:49:8f:c3:47:12:6b:95:af:01:
                    05:f2:20:29:24:c2:34:33:55:08:ff:e9:a3:ab:e0:
                    8c:ac:01:ce:c1:c6:5d:0a:da:d0:3c:9a:bf:52:ec:
                    77:8f:85:f1:b1:fe:15:5d:b2:43:a4:5f:bf:15:e4:
                    22:41:e7:3e:9f:be:64:dd:4d:9b:87:d2:f3:68:22:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.4.0/22
                IPv6:
                  2a05:dd00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34987

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:83:6f:48:d5:13:ee:35:2b:d8:a2:19:65:32:60:1c:4f:
         c7:2c:c1:d8:a1:4a:6d:2b:6f:d8:14:ec:d0:aa:79:a8:a5:a3:
         d5:5c:81:58:02:74:5e:ee:08:37:05:0e:58:92:d7:da:d8:ce:
         d3:b7:a7:7f:3c:65:27:22:63:c4:17:0e:7a:d6:e7:c6:2a:ac:
         43:92:99:c5:b8:89:63:77:47:fc:cb:90:18:5f:a9:71:ed:10:
         b6:ed:d7:76:31:07:1f:5f:e8:41:f5:c9:b7:32:82:5f:6d:03:
         9b:a8:11:ac:91:d5:3c:fc:de:ec:f6:a0:61:8d:20:5a:df:f5:
         55:df:14:0f:ef:89:94:60:e2:49:76:25:fb:dd:44:fd:d4:29:
         6a:46:88:5b:02:43:0b:f7:d3:55:e8:7a:d3:02:c5:f2:46:7d:
         f1:e5:0b:7a:4c:77:ba:49:66:b3:32:7e:ff:9c:73:11:ec:9b:
         90:ad:9a:29:1a:14:de:4b:0e:55:f7:3d:9e:cc:1e:ba:44:88:
         44:68:30:44:83:07:b0:d9:b4:aa:59:74:d1:a0:19:cf:f1:d4:
         b5:25:c0:71:01:fb:7b:1f:e5:ad:1b:90:6c:30:40:de:2e:75:
         df:4f:e2:dc:16:76:e9:10:76:32:ea:a6:25:3a:fe:04:3a:b4:
         bb:e1:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----