Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
File:                     o2n7GRvuUc3HQUppYxl_hrvzE6s.cer (raw, json)
Hash identifier:          /IjazYqn6omXULH3ZI89KqJQkFf9fDYvNdBGipAO4aQ=
Subject key identifier:   A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C44AF231C7E83732B7AF04F5F1FC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.164.228.0/22
                          IP: 2a0b:4400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:44:af:23:1c:7e:83:73:2b:7a:f0:4f:5f:1f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5e:7d:41:a0:79:c4:06:7e:07:d7:54:0a:ee:
                    06:21:4f:48:92:de:e0:d0:66:b5:e4:e8:2f:94:7a:
                    ce:01:79:ce:37:66:2b:9a:a8:90:f3:2b:f3:d0:70:
                    87:f5:1d:29:3a:2c:f2:25:e1:d9:85:35:8f:5b:a9:
                    d5:2a:80:78:d9:21:cb:70:4f:cd:93:42:1b:45:ae:
                    e0:82:2b:e1:d8:a6:43:1a:e5:f5:e6:11:b2:61:d1:
                    36:5d:b8:57:40:9f:d3:5f:2d:74:ef:c5:87:e9:74:
                    5e:19:f0:eb:0d:70:82:3e:4f:57:f2:1c:ea:53:b0:
                    72:3e:0d:cb:70:c4:8c:a9:d4:6a:a2:d0:8e:e7:4e:
                    36:52:1a:2b:f6:4c:7d:be:a0:05:ce:30:1c:c8:20:
                    6c:80:77:d3:10:32:c6:50:c6:c7:d3:37:2a:3b:12:
                    ae:b4:89:68:8d:83:cf:4c:5b:1a:8b:7d:f8:c8:64:
                    b7:02:a8:27:a5:ef:40:cf:dd:18:3b:e3:52:2f:ab:
                    f9:dd:bb:0b:6a:35:ef:7e:9a:1e:71:fe:59:0b:2e:
                    eb:86:d5:eb:b9:2c:bd:4a:97:54:67:03:0f:4b:ac:
                    66:a9:ed:8b:4c:50:38:09:84:0b:57:0b:5d:a9:6e:
                    d5:79:86:b5:9c:e0:4f:99:d6:60:03:a9:2a:83:85:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.228.0/22
                IPv6:
                  2a0b:4400::/29

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:be:6b:b3:9c:7f:f6:09:c7:62:a5:94:fc:6d:53:b7:42:
         0b:20:da:df:c1:cf:a7:8b:46:67:e2:2b:6b:f1:a7:b3:68:b9:
         ec:1a:5c:89:3f:8b:63:4b:85:51:c3:f7:7a:e3:56:b7:b9:7b:
         27:f5:43:91:cc:3a:68:22:5d:0e:90:c4:a2:38:09:9e:81:88:
         71:e7:93:58:23:f4:8e:a1:96:13:eb:5f:50:04:51:f8:ab:29:
         96:85:46:88:7a:c2:06:9e:7f:8a:22:ca:d8:75:72:68:27:8d:
         52:ea:33:54:a2:f1:87:23:1a:86:84:2f:50:22:fb:5d:1f:e9:
         e4:79:60:11:50:75:2f:fb:47:e1:32:7a:ba:4d:29:58:9e:d8:
         d3:7c:47:7c:4a:a3:82:b6:01:f6:ad:88:33:70:92:70:d2:ba:
         93:fe:8e:68:6b:4b:42:a1:c9:8c:d6:b7:1b:2e:45:56:e9:a6:
         8e:11:74:03:68:f9:12:49:6b:e0:31:25:c6:05:c8:b9:83:94:
         e0:10:d7:1a:c6:fc:89:27:6b:c6:ad:63:d6:5f:41:20:fa:a7:
         6e:d6:16:5b:32:30:10:3a:b3:fb:57:21:3e:24:2b:c7:28:43:
         6c:97:5f:77:23:aa:87:ae:77:41:06:82:e7:0a:e2:e9:f0:fa:
         14:5e:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----