Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
File:                     o0kR6dK76mamwkAxnd4wez3vSME.cer (raw, json)
Hash identifier:          mll9iodWzQlYd50HScjZiAoskE3TfDjYdqpyXEX1xYE=
Subject key identifier:   A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C08DE3CBA180D8664ABD2E6D3A640
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200820
                          IP: 185.94.12.0/22
                          IP: 2a03:9fc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:08:de:3c:ba:18:0d:86:64:ab:d2:e6:d3:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:73:de:76:b6:e6:58:eb:bd:a8:e8:97:7e:e6:
                    f1:bf:e7:87:81:a9:7f:f7:e2:54:56:b3:79:26:0f:
                    3c:2d:7a:71:3c:18:5a:7d:b3:1e:95:5e:32:c6:d8:
                    c8:17:ce:0e:7b:65:93:b6:d2:d8:df:9c:73:29:fe:
                    b5:9f:d8:a3:0c:94:7b:e6:bc:08:3b:90:0d:e4:bd:
                    c2:de:4d:66:0f:fc:cd:d6:9e:8a:6e:95:ec:79:ce:
                    4e:18:1d:e1:6c:b8:71:3f:0f:a9:92:07:0a:68:22:
                    75:6c:dd:ea:82:1b:e4:c0:e3:5e:94:c6:42:ab:ca:
                    94:0f:13:d7:6e:20:e0:b6:a9:d3:13:d3:06:69:fa:
                    f3:a8:72:8d:2d:4f:f5:20:0d:af:9d:2c:b0:5c:02:
                    ee:41:d1:21:66:66:59:64:cf:1a:55:3e:f5:40:13:
                    ce:09:b1:62:48:ff:28:f7:c9:8a:17:8f:5f:c5:96:
                    dc:e9:9b:d8:5c:74:3f:f8:b4:ec:27:3b:b3:a6:5a:
                    2c:ba:85:47:8f:f6:e3:7b:89:97:88:43:3f:9c:b8:
                    8e:fe:fe:e6:e8:ef:a4:f1:11:e8:28:e2:79:3e:9e:
                    4a:a3:1f:80:69:21:63:7c:46:10:64:7a:08:fe:b8:
                    13:e0:66:9a:fe:a3:45:44:2b:33:98:d6:ce:84:8f:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.12.0/22
                IPv6:
                  2a03:9fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200820

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:00:46:b1:36:76:de:23:3c:2b:99:53:56:35:86:1a:d6:
         7a:67:2f:99:ee:98:35:76:af:11:d6:99:cd:30:fd:5e:95:8d:
         c9:85:44:33:39:a0:1e:e1:54:5c:c3:42:b0:ec:06:5c:02:3e:
         6e:7e:42:e6:7e:30:9e:d4:65:8c:9f:08:6b:00:61:60:86:e7:
         b2:54:18:a9:27:05:80:13:ba:88:a8:10:68:f6:06:a7:f8:20:
         72:d3:d5:c8:57:7c:2a:a1:49:b4:8a:1f:b3:0b:3f:ec:17:f6:
         61:6e:32:fb:fc:74:7c:51:55:9b:b7:d5:ea:5c:07:49:53:fe:
         27:90:f9:63:23:6d:bc:c9:37:66:9b:62:cf:94:f7:a0:96:83:
         e1:6a:36:a4:db:68:fe:fa:83:73:7b:e2:3e:e9:4e:72:04:30:
         79:23:f2:a4:37:2e:41:3d:9c:80:a6:3a:e4:35:b8:82:e5:ff:
         2a:ee:86:3d:24:c3:01:15:f0:e7:ee:75:70:22:48:82:51:4b:
         84:c0:0a:dc:8b:f6:7e:6e:55:00:11:76:db:d8:e5:b5:03:c4:
         9a:b1:d6:73:56:a3:19:60:bc:72:ca:01:2b:5f:8d:c0:c9:04:
         95:38:11:b8:b0:71:a3:a5:d7:61:6a:bc:d0:06:e0:ff:26:dc:
         e8:96:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----