Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
File:                     _otJRFUnf_UwAlzvLVHffquORRA.cer (raw, json)
Hash identifier:          +mB7rPAsNQbsBi6PhczGjxokXXgzM9AS7M/2E4hGwhA=
Subject key identifier:   FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F9CFD0A5C992C87FAAB0E1303807D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50274
                          IP: 109.127.0.0/18
                          IP: 185.112.192.0/22
                          IP: 2a03:6160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:9c:fd:0a:5c:99:2c:87:fa:ab:0e:13:03:80:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:61:29:1e:a3:e4:73:f8:df:d3:d2:d4:40:
                    d4:d2:4b:a9:6d:81:91:43:9e:36:38:b3:55:27:c7:
                    18:27:9d:97:17:a2:ed:fe:a1:05:ec:d2:e3:02:b0:
                    24:ae:12:a9:fb:61:88:0f:b2:3b:e3:fa:25:91:94:
                    da:23:8e:80:cd:f5:0a:9a:8e:a1:f6:a5:f3:24:89:
                    0e:c9:bb:e2:53:8c:be:ae:00:49:1a:0a:53:34:c8:
                    58:78:99:22:c0:99:bc:ee:82:a7:18:0a:83:ee:8f:
                    e8:3a:69:b9:90:38:d2:4f:45:2a:fd:93:1e:41:c9:
                    c4:19:65:c1:37:90:20:25:3b:34:59:d4:b2:80:4d:
                    51:03:64:53:17:03:a5:e7:7a:e8:0f:8b:81:d0:ce:
                    9a:f0:12:c9:58:1b:38:01:cc:7e:95:62:a7:0e:75:
                    88:30:26:b7:15:0f:f8:b5:c1:be:69:5c:bb:ac:a9:
                    09:87:12:2a:fa:de:e1:a6:3c:dc:b9:ca:61:8f:17:
                    47:2e:68:4d:68:f7:83:7a:8b:4b:18:8f:7f:a2:0f:
                    ae:7d:bc:0e:2a:c7:e5:e7:40:a5:fe:d0:c0:2f:d8:
                    c5:4f:c4:59:0a:d3:4a:03:76:52:bd:d3:8f:1d:0c:
                    66:31:ec:5a:c9:b4:fb:5a:0b:fe:6b:ae:4b:65:16:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.127.0.0/18
                  185.112.192.0/22
                IPv6:
                  2a03:6160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50274

    Signature Algorithm: sha256WithRSAEncryption
         5e:0f:0d:eb:c6:40:da:68:e8:50:d1:fa:93:ce:79:8d:c8:34:
         a5:2c:6a:5c:26:63:6f:af:a6:f1:70:e2:40:43:24:53:3c:a7:
         4e:14:b3:1a:af:21:f6:9e:dc:3e:e2:c5:20:68:09:bc:b6:db:
         13:00:4a:a7:e3:50:e5:48:ba:5a:67:3a:27:1c:51:13:4b:db:
         4e:05:f9:50:59:58:f3:ba:60:ca:c6:10:30:ea:61:75:2e:40:
         e5:81:46:c0:bb:cd:32:83:42:24:18:ee:35:fa:05:03:4b:03:
         31:72:f3:ed:cd:90:00:31:34:80:2f:23:ad:8b:c7:05:92:a1:
         7d:9f:57:ef:24:60:ad:36:41:01:5a:80:39:09:fa:1b:df:9b:
         5c:e3:f4:ac:87:80:16:fe:df:03:8b:87:8f:c6:e0:b5:24:e9:
         22:8d:9c:da:06:70:97:a0:e0:57:32:40:28:91:fd:86:05:ad:
         e1:e1:cb:50:e9:73:22:0b:7a:48:30:6c:f9:39:e2:36:8d:4f:
         2d:5d:63:5f:46:a9:41:ed:f1:df:44:af:44:8e:fd:52:84:e7:
         64:b1:f3:a0:fc:23:62:32:c1:f8:32:4e:a0:68:38:bf:6d:a3:
         fe:0a:84:35:c5:f2:a4:aa:4f:e2:52:83:a5:25:f0:5a:08:6b:
         27:8b:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----