Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
File:                     b2Wy-ou61lAcfSHvR13ERUE_sos.cer (raw, json)
Hash identifier:          20spBgeE+ZdIzSt292s+XSnIGhHIQGwu7+Z/6m4cARc=
Subject key identifier:   6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB256C1B195C7074E182FA61944208
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62141
                          IP: 185.38.92.0/22
                          IP: 2a04:74c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:25:6c:1b:19:5c:70:74:e1:82:fa:61:94:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:56:62:06:0f:1d:6c:d8:fd:29:68:1e:a8:
                    1e:74:f0:bb:58:82:5b:00:6f:da:37:2b:cc:8e:50:
                    71:88:76:b0:cc:40:d4:e1:89:6c:5d:cb:e9:f1:7e:
                    a8:4a:1e:5b:9d:42:8c:8d:a1:7e:36:86:f3:5b:67:
                    fe:d3:24:8b:7b:a7:45:f9:48:22:4b:67:e9:7a:35:
                    26:6b:7a:3c:b3:f7:3c:35:55:bf:6f:90:86:32:89:
                    33:1c:0d:90:f7:1d:03:91:69:84:64:e9:a0:15:a7:
                    99:e6:e6:01:49:bd:57:d3:d3:33:5d:19:1f:51:28:
                    68:17:97:6c:99:35:cc:83:0b:49:b2:b8:6d:ad:63:
                    7c:88:80:d2:46:d3:51:30:40:1f:c1:ae:8d:70:82:
                    8c:12:e3:de:f8:c6:8e:ac:6d:a9:de:86:87:c9:b7:
                    ca:39:60:75:b5:1d:87:cd:8d:cb:fd:bf:41:54:ed:
                    3c:98:58:6b:43:05:09:17:98:a8:60:50:1d:50:4a:
                    ad:2d:27:fb:9f:2b:d4:3f:56:d4:f1:5c:67:c4:52:
                    1b:42:99:1c:3e:e6:a5:b1:15:f1:a3:e6:67:29:70:
                    58:fa:37:9e:bd:65:c5:88:e4:d7:a5:68:57:16:c8:
                    a9:41:57:ba:89:f7:1e:d3:db:83:b2:85:b8:b8:53:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.92.0/22
                IPv6:
                  2a04:74c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62141

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:b2:0f:9d:73:fd:6a:19:3a:7c:dd:d7:8d:e0:45:ae:63:
         02:35:64:f3:45:fa:9c:56:d5:90:77:72:12:59:5e:6b:af:7e:
         2b:d2:bc:1c:bc:b6:37:2b:5a:84:00:42:da:f9:6e:14:de:39:
         6f:2c:81:49:40:03:7a:e0:fd:d0:25:e4:41:12:6f:ca:4c:2b:
         59:c0:87:0a:49:40:46:79:b8:1e:73:c1:10:83:5e:d5:9c:28:
         3a:a4:cc:df:fd:cb:18:4e:fe:dc:b1:1a:3f:07:f2:6b:d4:ab:
         db:0b:d7:2d:58:51:c6:4d:63:81:87:ae:06:31:27:40:71:75:
         a6:c2:7e:c4:6e:ca:bc:e5:da:6a:38:38:6f:05:1a:80:a8:1b:
         c8:66:d9:f1:1e:4b:86:f4:25:bd:39:ad:4d:3f:99:9b:10:9e:
         2f:8e:b1:3f:09:96:fc:9e:ac:1d:e0:10:74:13:de:bd:cb:c3:
         88:89:af:76:a2:b3:8e:8d:d5:4f:b4:06:60:e3:ac:10:65:a6:
         7b:91:61:e6:27:06:c7:2e:58:8c:1d:8c:fa:cc:c8:73:da:27:
         1c:68:31:bb:06:6e:64:79:69:fb:be:c3:d7:1d:75:0d:c5:69:
         89:8f:88:12:3d:c4:80:a7:28:bf:c1:1e:2a:93:c0:c3:b2:78:
         af:80:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----