Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
File:                     OXh5r_LENp0GxPEZpv16WhPbhpc.cer (raw, json)
Hash identifier:          ZifH7m3ZohGNTy5TkNw1ShlGb5WrjrG1/ezB1OqglYA=
Subject key identifier:   39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C6053B0125C3948A2092FB0EFAA28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200697
                          IP: 185.98.24.0/22
                          IP: 2a04:7800::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:60:53:b0:12:5c:39:48:a2:09:2f:b0:ef:aa:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:16:eb:0d:e2:2f:16:67:65:d8:00:74:da:
                    d2:24:72:86:f5:6c:e4:06:4c:83:1d:4f:5c:dd:fc:
                    dc:a7:37:ee:a5:27:d3:4f:af:a7:5d:25:7e:2f:d7:
                    59:3e:15:ae:b0:a9:5c:f2:9d:b1:bc:ba:6e:60:47:
                    ca:e9:64:77:cc:67:f1:63:18:34:eb:e7:0d:52:c7:
                    88:a2:ea:7f:0a:9d:15:50:10:de:e3:d7:1c:39:ef:
                    c3:a6:33:b9:2f:dd:88:62:bb:06:8a:ea:17:2a:b4:
                    d5:f2:11:11:2a:8c:7e:d8:d3:22:3a:eb:1f:78:d1:
                    e9:26:91:b6:8b:c8:5f:b8:b1:94:f1:46:b4:c7:ab:
                    9c:a3:1b:20:9b:50:43:29:5c:d4:8c:1c:96:9b:80:
                    05:ee:0b:08:20:8a:97:5b:0e:87:4f:3e:35:a7:5b:
                    f1:9e:15:26:e8:bb:07:00:a1:f2:6a:b9:04:e6:c8:
                    b3:8e:5b:dc:6a:ef:8e:c7:af:d1:eb:6e:29:42:47:
                    89:ad:7a:b7:93:93:38:5e:27:f9:23:34:4d:18:0e:
                    c8:47:e9:9e:ad:41:65:b9:a9:b5:3d:bc:e5:54:60:
                    5a:e6:d0:2a:10:6e:26:a0:08:6d:9d:74:78:3d:fb:
                    1c:cb:6d:a7:d8:fa:e2:d0:43:08:8c:2a:f6:2a:48:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.24.0/22
                IPv6:
                  2a04:7800::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200697

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:5f:dc:e1:bc:07:62:ff:ce:e7:82:17:11:40:eb:56:ea:
         f4:3f:60:fe:44:0f:df:3a:c2:ea:cf:b6:b2:04:1b:0d:99:7f:
         79:3f:26:37:33:71:fa:7f:3d:e7:1b:98:8b:89:f6:52:14:42:
         f6:de:07:e7:c2:78:c2:f5:fb:8b:19:6a:f1:b1:76:69:b8:5a:
         c2:56:df:20:f0:bf:d7:83:2d:79:9e:8f:da:f4:1f:cc:13:b3:
         58:95:6f:5a:95:f5:72:1e:56:48:0d:c2:a6:7e:c1:ad:7b:45:
         f1:ac:18:fd:9f:d7:dc:60:a2:58:65:11:5b:81:30:ef:2f:f2:
         b5:0e:f5:60:f9:c2:19:a8:d8:fd:ef:d6:6c:7d:1c:d2:fc:91:
         5e:d7:85:43:34:3c:4c:50:b9:34:84:8f:8f:bd:fb:85:00:e8:
         eb:c1:dc:63:90:1e:26:a5:be:6d:3d:ba:11:cf:ab:1b:9e:20:
         bc:6f:08:91:11:f8:9a:2e:e5:47:e8:02:1b:3b:87:82:6c:43:
         20:30:49:3e:96:c7:fe:93:f4:03:2e:35:aa:db:92:dd:db:86:
         3d:f5:8a:ef:1f:b7:c1:14:5e:cb:99:50:b1:cc:5a:ce:8a:d9:
         b8:b6:60:99:64:c8:c0:17:27:af:4e:8b:b8:4e:ec:ce:0d:76:
         d5:9e:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----