Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
File:                     OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer (raw, json)
Hash identifier:          LyE6+xuU5jKaonMJ0VwT01P2q56t7xGqxlARvNSO0e0=
Subject key identifier:   38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC4417E8C52E8492B07D3948102D91
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209301
                          IP: 5.253.48.0/22
                          IP: 2a09:52c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:44:17:e8:c5:2e:84:92:b0:7d:39:48:10:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:4b:4f:f6:06:8d:9d:de:41:e0:2f:e0:a5:
                    f1:b3:25:d7:b6:d7:8b:5d:c1:76:50:1f:2a:bb:82:
                    b4:59:7c:8f:c7:4c:ba:63:63:c3:65:8e:21:b4:49:
                    a5:ac:2c:72:a2:54:82:aa:45:ab:8a:41:b2:02:1f:
                    4c:e5:90:63:a8:8c:eb:83:33:2f:dc:65:26:ca:bb:
                    76:49:ca:7c:69:6c:ea:22:06:ed:90:79:d3:21:6e:
                    5d:d3:21:80:6a:bb:b2:63:7e:e2:d2:60:fc:18:0c:
                    79:fb:1f:43:40:60:91:f7:44:30:19:43:74:44:e6:
                    c9:bf:98:e6:91:d7:77:1a:d9:58:6b:d8:07:7f:25:
                    16:f2:49:0a:7a:5b:76:90:d3:1b:08:9b:67:81:1c:
                    b0:15:7f:60:e9:7b:de:6d:ca:fe:c1:87:dd:95:6e:
                    f4:55:75:6c:60:8e:83:73:f8:99:17:cc:93:15:07:
                    00:0b:88:20:03:f7:ff:89:3e:9d:10:60:5d:b4:55:
                    2d:18:d1:06:bc:fe:a0:fb:88:47:03:bc:1f:a0:2a:
                    20:e8:19:43:e1:96:38:15:d6:88:54:bc:a8:60:ac:
                    16:5e:fc:7c:93:99:e5:d9:22:71:0f:9c:5d:02:e7:
                    f4:46:89:0d:38:78:4d:56:36:3e:77:57:9c:2e:f6:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.48.0/22
                IPv6:
                  2a09:52c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209301

    Signature Algorithm: sha256WithRSAEncryption
         34:62:f2:13:ec:4e:9d:08:15:24:ed:84:b0:9f:66:e5:d2:66:
         7d:28:8f:13:a4:d8:f9:51:31:66:a2:0e:cc:09:54:77:23:d8:
         dc:c2:d6:5c:42:d5:35:f2:8b:91:49:a9:09:e1:be:15:16:cc:
         71:35:18:41:da:da:08:ac:51:98:d6:1b:94:11:18:dc:36:93:
         3c:ae:c6:8d:ee:d0:93:25:cd:3c:9c:0e:10:1e:3e:3f:02:cb:
         78:25:90:e8:40:e9:5e:80:93:96:51:66:e7:34:48:fd:38:0a:
         d7:10:71:ec:6f:bc:9a:5f:7c:bc:03:25:13:04:cc:f4:13:cf:
         3f:07:ae:9f:03:c7:7a:b8:9c:c4:af:69:8e:5a:f7:76:a1:a4:
         fa:89:6b:26:f9:47:d5:4a:59:0b:11:41:58:e0:e2:f5:15:c1:
         e2:d4:84:e8:6e:65:72:09:80:85:99:6e:e5:86:7d:ab:96:4f:
         4f:ad:0f:31:99:b9:f8:93:92:74:69:ed:a1:ef:86:ad:ff:29:
         bf:5c:b3:f2:4a:e9:af:55:cc:4a:e9:5b:f3:8b:94:6f:a7:85:
         45:27:70:14:8a:f5:94:15:03:de:3b:3f:0b:ef:5f:bf:0c:f5:
         20:d3:c9:0c:5e:ed:19:46:38:a5:e7:cc:97:39:57:52:09:52:
         79:c5:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----