Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
File:                     OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer (raw, json)
Hash identifier:          jYv/EQSoM9hp7O/06q55Hx35Hoj9Swi+SubF40g2FJ8=
Subject key identifier:   39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942368C338CD7B96091B18CF9E34DFC286
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:47:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34285
                          IP: 185.197.244.0/22
                          IP: 217.12.16.0/20
                          IP: 2a02:8b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:c3:38:cd:7b:96:09:1b:18:cf:9e:34:df:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:d5:a3:34:41:6a:7d:85:cb:2c:bb:56:0c:
                    f2:1b:fc:f7:53:a1:95:7c:79:43:e4:61:0e:41:72:
                    6b:2a:93:95:df:e4:88:66:6e:02:06:85:b5:c1:3a:
                    73:9e:e1:52:ec:64:77:c8:1b:da:45:45:d7:40:fb:
                    0f:2e:07:2d:5d:70:5d:53:75:97:1a:86:79:42:8c:
                    ae:f0:d2:83:13:9c:bc:7a:4f:46:40:ef:16:5a:9e:
                    a7:55:a6:9f:3a:69:81:8a:32:e2:e7:f3:97:ea:a4:
                    6d:b6:8e:ae:c3:53:34:18:22:a8:40:eb:1f:0b:d3:
                    8b:97:90:19:5b:4d:83:cd:e2:38:85:d1:a0:df:b3:
                    c7:d2:3b:b7:33:cf:75:d7:f8:77:c7:eb:93:f6:61:
                    2d:60:60:f6:6e:34:de:ab:48:39:7d:8b:a3:4a:64:
                    ca:c9:c4:71:d7:da:df:31:a8:20:7a:f3:74:9d:be:
                    29:b2:25:3b:01:44:1c:f1:39:3c:4e:b5:3c:0b:73:
                    a3:a9:53:5b:1a:11:35:30:23:eb:1f:d4:f5:b0:90:
                    2f:c0:c9:75:a0:2e:8c:52:e1:19:15:99:91:67:72:
                    a0:65:70:50:a1:50:7a:7a:49:3d:c9:c4:51:af:b6:
                    86:a7:ad:fd:95:91:17:7d:61:04:54:f5:c1:a9:51:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.244.0/22
                  217.12.16.0/20
                IPv6:
                  2a02:8b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34285

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:d1:b7:4c:cb:ab:37:6b:69:17:c6:89:76:00:bb:9e:1a:
         09:39:8e:c3:7f:3f:eb:20:51:0e:2a:3c:9c:47:ed:52:09:52:
         70:09:07:b6:31:0a:8d:65:b1:d6:6e:fd:25:48:67:ac:bb:c2:
         b6:ef:ed:e0:49:4d:8f:50:cf:00:7d:6e:80:7b:0e:41:ce:f8:
         b1:a8:2e:3e:69:cd:1d:e2:29:db:e3:6e:23:b6:18:39:8b:2e:
         a1:d2:e0:b8:4a:1b:fb:2c:72:cf:c9:44:6a:cd:9c:e8:b8:06:
         10:90:94:8f:02:ec:99:b2:bd:4f:5e:d1:fe:36:2d:b0:78:e1:
         53:69:46:49:eb:86:e5:4d:0a:e9:d3:ba:6b:c6:b9:db:d8:6e:
         e9:d7:78:37:56:81:96:91:5c:b5:2d:67:30:cb:a8:a1:e2:84:
         da:78:b1:af:ca:47:d8:cf:eb:2f:9b:e1:0b:07:5c:1b:c3:a2:
         53:e1:ad:9a:cb:fc:e3:17:60:da:31:49:a6:aa:52:7e:dd:9c:
         34:e1:5c:14:8b:63:a2:31:05:b9:4f:c9:a0:f0:3b:04:cc:7a:
         cc:5d:ff:b2:e4:df:80:73:26:4e:f7:77:03:6a:86:ae:55:d8:
         ea:74:c7:c4:79:25:c3:09:01:55:b0:92:e4:17:e3:e3:33:c4:
         4e:56:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----