Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
File:                     OC5TMDOzzpXklyvyOC3awpPC3AE.cer (raw, json)
Hash identifier:          hSGHoPbks1A9jvlzTJZ/g/GXh6l2BSmilYqjwPC2J7k=
Subject key identifier:   38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6077CEB7453A3D5698002DF6FE084
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201148
                          IP: 5.63.19.0/24
                          IP: 2a13:3f40::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:07:7c:eb:74:53:a3:d5:69:80:02:df:6f:e0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:2d:d2:60:8a:bf:55:14:38:26:30:85:be:
                    56:2f:37:fe:ea:f8:3f:ef:da:2d:fb:72:d7:55:41:
                    c9:fe:91:c7:68:12:50:a3:bd:cd:b4:1d:8a:ca:6c:
                    27:8f:02:b1:be:af:7b:fd:77:22:a5:ea:bf:a6:cd:
                    06:4e:54:1f:31:24:c1:85:67:b6:83:91:69:b1:b4:
                    19:c9:3c:dd:a7:1b:fd:75:1e:60:7c:8a:72:0c:6a:
                    fe:f9:8e:be:47:e5:0b:54:e9:c6:f0:5b:39:26:db:
                    17:e0:af:09:09:bc:42:0b:7c:3e:1d:e6:8c:06:a0:
                    13:15:c1:94:8e:28:30:72:94:46:30:f0:a4:fe:47:
                    4c:f0:77:d1:e5:4a:24:d5:82:0a:b8:4b:dd:03:2a:
                    1d:09:f7:53:b3:03:83:63:d8:31:2a:45:e8:ad:be:
                    65:0c:d2:18:97:6c:13:28:f0:cd:83:24:62:40:a6:
                    f0:a0:41:6d:b7:bd:ff:3c:8a:98:52:b3:14:95:f7:
                    c2:02:82:7b:09:3a:e9:8a:86:97:c4:2b:e4:b0:09:
                    58:ad:70:c8:55:31:9d:10:a0:d3:ce:20:9a:8a:04:
                    7d:71:f5:a6:2c:29:9a:8a:92:69:90:cc:19:08:b1:
                    31:b9:80:15:f6:c4:4d:ed:d9:aa:9b:88:37:f7:04:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.63.19.0/24
                IPv6:
                  2a13:3f40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201148

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:a3:2a:38:0e:89:27:5e:b1:f6:09:c8:2b:3c:ef:b9:d1:
         2f:8b:b7:cc:b7:6a:b4:fe:6b:b4:66:90:47:81:d9:a3:70:f6:
         98:77:d7:5f:56:34:4b:a8:21:3b:5b:f7:62:f3:41:c4:02:5f:
         0e:76:3e:ce:b6:6a:6b:4d:fa:5d:7b:fa:a3:ed:8a:f1:74:2e:
         f6:89:95:3d:6f:43:55:60:a2:c7:c0:4f:77:c6:ed:ef:5e:4e:
         fa:18:a9:30:27:70:bc:d7:ce:ba:7b:06:4d:fe:a8:ce:0c:df:
         77:cb:d1:45:85:5b:88:88:e1:8c:49:0b:5b:3a:a6:1f:7f:91:
         45:a0:65:63:76:91:f5:27:ba:30:f0:3e:bf:61:c3:47:a5:6b:
         6a:0f:d1:2a:23:fe:ae:71:4c:46:34:2b:b0:10:69:f0:7a:d5:
         79:c5:b7:e1:56:c4:52:2f:ee:b9:40:36:01:f3:c9:53:b3:bc:
         46:db:44:9f:cb:87:db:fa:ad:f2:e2:55:20:0d:cd:55:8b:70:
         1b:ba:4a:2f:ed:38:4e:5a:fa:be:63:35:b6:10:63:91:fd:ba:
         c5:02:f1:c3:47:5a:ab:70:c1:ad:e0:0c:25:24:6e:91:b6:55:
         e3:f2:b9:de:4e:ef:57:32:f3:3c:30:69:94:76:07:14:14:dc:
         8d:aa:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----