Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
File:                     OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer (raw, json)
Hash identifier:          OgdEmx48OTs7skb4sA6cL6Efx9G6yiD1X4oFK6kj+VA=
Subject key identifier:   3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B16C01F53A9F02F121D66941B7245B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211657
                          IP: 185.116.220.0/22
                          IP: 2a0d:fe80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:6c:01:f5:3a:9f:02:f1:21:d6:69:41:b7:24:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:5a:6d:f7:a2:51:26:98:14:42:cb:14:a8:
                    34:95:61:c1:99:90:f0:b6:af:0a:99:9c:13:b9:78:
                    ff:93:42:da:42:f6:43:e4:f5:13:3d:f0:08:b5:23:
                    fa:aa:97:cd:7a:a1:83:bb:8d:18:71:96:d5:be:a4:
                    a1:4a:74:28:3e:18:34:a2:55:ac:90:88:dd:ab:63:
                    51:ee:6e:ff:00:7c:92:60:54:9d:5d:d8:17:df:96:
                    d7:de:72:b7:a7:c2:10:1b:20:1b:27:9d:72:2c:4e:
                    f5:cf:97:cb:38:3b:23:51:0f:af:ae:e5:51:17:ed:
                    cc:ca:46:24:d8:8a:b4:cc:6d:06:6a:ca:f3:ab:0b:
                    6b:40:90:97:2f:22:ab:2e:78:1b:60:ab:cb:1a:ec:
                    40:64:18:e7:e9:d5:83:54:f5:87:2b:60:86:9e:c3:
                    33:c9:9e:8f:46:83:a7:f4:33:47:0c:55:86:a3:d5:
                    da:13:88:d1:3a:2c:b1:5d:bf:91:c7:62:21:c5:e0:
                    10:d5:2f:92:6c:a8:2a:0c:b8:be:76:5a:26:c2:13:
                    59:80:b5:59:4d:83:85:ab:e4:51:c3:23:01:fc:f9:
                    1b:82:ac:e2:90:66:a7:22:ff:52:13:f2:f4:18:48:
                    42:2e:77:06:fa:84:1d:9b:23:a5:b4:43:6a:c4:41:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.220.0/22
                IPv6:
                  2a0d:fe80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211657

    Signature Algorithm: sha256WithRSAEncryption
         8f:62:2f:e1:5d:a4:0d:d7:4c:7c:45:c1:a1:4e:af:5c:d1:71:
         1f:1d:24:a9:29:f0:49:39:5c:6e:7e:3b:03:f7:c1:13:a9:20:
         77:3b:f1:22:97:48:58:d0:df:c2:4d:b9:aa:82:6e:e0:66:ff:
         d8:17:ac:90:53:47:8c:99:b4:65:33:4f:f1:54:6a:d2:db:e4:
         28:e9:c5:9c:b2:d6:29:33:42:53:29:af:7a:63:b0:a3:8a:94:
         ab:59:a1:3a:35:82:04:17:90:cc:e8:52:92:21:cc:87:76:fe:
         d9:5e:b2:b0:23:64:d0:7c:fe:17:51:db:8f:36:47:af:19:79:
         1e:cf:ab:a9:49:c4:a5:76:b6:7c:09:ae:6b:c1:fc:22:54:af:
         cc:2c:55:86:d7:35:7b:42:12:e4:59:17:29:5b:8f:3a:bb:2c:
         4b:1d:be:8a:e4:48:2a:c0:48:ab:ab:a6:6b:b1:11:c1:94:7f:
         9e:53:dc:d8:a4:aa:16:6f:a4:98:68:ed:f6:10:7c:24:b3:d4:
         77:db:57:78:c6:66:b9:de:b0:d4:6a:44:f8:32:92:60:41:8f:
         fa:84:c3:2b:fa:24:b7:27:b1:a1:7b:bf:7d:1c:96:25:c7:82:
         c1:69:61:01:86:a9:8d:98:49:a7:23:d4:dd:9d:fa:fd:99:db:
         25:a7:b7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----