Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
File:                     OtL3zCdTMJgzAxuolGSagM_7E-g.cer (raw, json)
Hash identifier:          0dy3zB+Kfbt5sBx8Q+qCPhJX8jMhXQvrg70bjpHj0/w=
Subject key identifier:   3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B36D02726EEA35343753AF10D86BB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.38.76.0/22
                          IP: 2a01:4060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:6d:02:72:6e:ea:35:34:37:53:af:10:d8:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:81:2a:e1:5a:db:88:0a:e5:f3:5d:b0:c1:
                    58:00:27:03:3e:81:91:0e:3e:5f:e2:c8:d1:ed:63:
                    b6:32:fe:ae:c1:2c:ef:27:90:8e:49:90:3c:70:75:
                    79:4f:fa:83:6a:32:de:3a:2a:87:6d:70:2b:05:14:
                    2a:10:db:1a:74:b2:d2:37:7c:ed:c1:6e:e2:6d:d4:
                    36:fa:2d:51:2e:b0:c4:c1:f7:03:9a:e5:af:8e:d3:
                    fe:72:dc:24:8b:75:65:39:29:3b:55:ac:cb:61:32:
                    a8:72:7d:19:6c:33:7e:26:24:cd:2b:6c:b6:94:c5:
                    57:b5:7f:86:55:52:72:d4:41:54:18:a3:78:7c:8c:
                    2f:fe:de:e6:09:40:1d:2a:48:3e:16:76:61:22:de:
                    a2:ea:73:f2:8c:31:6b:54:23:92:da:f7:fc:71:1a:
                    b9:c4:d9:0a:0f:22:6f:c0:3b:c6:31:0b:26:35:2a:
                    6e:bb:89:39:fc:85:47:e8:b3:c5:01:f9:ab:95:2d:
                    d2:4d:94:01:5c:52:42:d1:ce:c2:00:83:d5:eb:0c:
                    da:a7:fa:e2:44:20:04:bf:03:e9:12:22:7a:97:04:
                    95:c2:14:e6:64:f1:49:a0:df:98:dd:eb:bd:94:1d:
                    ef:f2:dc:5f:43:4c:0f:0e:66:57:ca:d9:01:a1:54:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.76.0/22
                IPv6:
                  2a01:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:01:f7:cd:ff:2f:67:69:3d:2d:8a:0e:f4:f8:7e:91:b7:f9:
         23:95:4d:bf:17:e1:8a:9c:92:58:61:9e:5e:dd:ac:ef:48:22:
         78:5f:25:24:37:c7:0d:51:75:92:ee:ad:a3:63:ac:2f:dc:fc:
         28:33:79:9e:18:e9:17:4c:fe:c4:92:e2:65:82:07:b4:76:07:
         90:7b:0f:72:73:eb:cc:2a:76:c3:2c:9a:d4:d2:4f:60:20:48:
         18:91:f0:6a:2b:d2:1d:01:e6:98:28:79:34:55:2d:71:ba:bc:
         a4:14:33:e1:58:b2:a1:46:a7:15:0b:0f:c3:2d:72:9b:18:76:
         be:c2:71:de:31:ce:0e:d0:60:6c:20:eb:25:85:29:f7:95:28:
         11:8e:7d:c0:f5:f4:1b:cb:9b:a1:22:38:04:d3:c2:e5:22:15:
         2a:9a:f0:de:1e:1b:0b:35:3a:e7:5f:da:94:47:7a:88:00:99:
         05:c3:79:90:2a:51:9c:aa:bd:3f:23:a0:b1:78:ac:07:55:d1:
         99:ef:02:3b:6d:49:00:72:c3:55:e0:d0:30:7a:d1:4d:e0:77:
         da:5d:f2:ee:b5:a0:91:ad:e0:5a:e4:4b:d6:ec:19:b4:54:af:
         01:ea:ee:92:f4:77:c7:e3:57:6d:d1:b6:62:7d:db:f7:37:5e:
         cd:e8:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----