Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
File:                     OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer (raw, json)
Hash identifier:          heWvel7BKoBgk68BiZHIDtXAetgs5L44vmj0EDqtWgs=
Subject key identifier:   3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA1B1A4C394BAE47ECBFB45E272C61
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213210
                          IP: 2001:678:9b4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:1b:1a:4c:39:4b:ae:47:ec:bf:b4:5e:27:2c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:48:bc:c7:6f:00:b0:90:5a:78:96:c6:66:
                    48:50:c1:85:66:2e:89:e5:9e:0b:a3:bc:82:0d:80:
                    93:8b:13:d4:2c:6a:ba:7b:de:26:2d:03:05:52:ea:
                    56:1c:fa:2b:76:7a:ad:cb:41:b3:91:2c:be:12:a3:
                    13:fe:88:59:3c:d1:40:b5:79:b5:8a:e9:16:84:9e:
                    a1:bb:b3:87:bb:9c:25:7c:d1:8a:fd:cf:1e:4e:ac:
                    a0:d0:c4:c2:30:55:16:b2:19:bb:16:15:15:4d:fe:
                    6f:d8:29:86:46:c3:5c:29:f3:fc:96:eb:5b:c1:79:
                    c2:a0:af:fa:00:83:65:3a:56:ba:91:3e:34:66:16:
                    41:ec:98:f3:b0:a5:6e:75:5a:24:09:3b:d5:78:5a:
                    42:d8:0d:45:65:a0:14:d3:6c:cf:7f:a9:52:dd:a7:
                    f2:3d:74:ab:b2:a2:31:f0:94:7c:27:0b:df:9b:5d:
                    1f:1f:0a:a5:6c:46:52:8f:c1:44:05:31:02:aa:68:
                    b8:59:89:2f:ab:19:d1:46:4c:0c:dc:31:62:2d:f5:
                    1d:c6:c9:4e:35:da:b2:ac:6d:5d:f2:da:fc:5d:c4:
                    09:7d:ae:c1:87:da:eb:95:56:65:83:5d:c4:02:13:
                    48:52:ae:9f:d5:84:8d:9c:88:83:a5:4c:2b:11:7b:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:9b4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213210

    Signature Algorithm: sha256WithRSAEncryption
         07:16:b4:9e:61:00:8e:14:bf:44:67:c5:d8:b1:36:6d:f2:3e:
         13:f0:30:37:9e:bc:7e:6e:ed:ff:0a:18:68:3a:d1:c2:ef:d5:
         a6:8c:1f:df:5f:43:9d:d5:27:42:08:85:06:d0:00:c3:cc:51:
         31:b4:2c:d7:51:c3:f4:07:ac:28:68:e0:c0:06:e0:91:3d:ed:
         31:e7:25:5c:35:62:0a:1c:70:65:89:44:31:e5:a9:93:03:37:
         68:d5:94:37:a4:11:2f:7d:26:7e:02:18:27:45:ce:9c:60:69:
         f5:72:97:3c:0f:0c:7f:65:1b:fc:da:e4:4d:4a:91:9e:88:9f:
         12:ee:0c:fd:d4:f5:6e:af:51:9f:52:ea:05:6c:86:e6:26:10:
         4c:fd:65:b4:ab:be:9b:92:40:1e:2d:f5:c6:a1:d4:4e:8a:4f:
         8d:e0:43:97:ad:51:3a:d5:c7:88:cc:cf:e3:7d:97:bd:cd:d3:
         85:86:54:b6:af:56:03:26:a5:96:8a:b3:9a:fa:d5:f8:a8:c7:
         17:07:d7:fe:f8:81:70:e7:68:0b:28:30:d5:45:3f:5b:34:5e:
         a0:53:53:3d:83:cb:00:22:f9:bd:0b:42:c7:ce:63:99:a1:b2:
         fa:9d:2c:5c:f4:47:c1:16:55:ed:23:72:11:97:97:1c:94:64:
         63:aa:d2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----