Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
File:                     o3JENI5x7Bvl9QB8jV7-cSWSByI.cer (raw, json)
Hash identifier:          4T4Q6wN7iFyy4D5+awPeeIfOMknI2lwMNIJwPlANZIo=
Subject key identifier:   A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D956EB527BCEA15AFFE93D35EAEFCE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200617
                          IP: 45.145.36.0/24
                          IP: 2a13:5840::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:56:eb:52:7b:ce:a1:5a:ff:e9:3d:35:ea:ef:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a37244348e71ec1be5f5007c8d5efe7125920722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:24:02:cc:bf:37:14:18:98:1d:e1:1c:da:
                    bb:21:76:e1:92:e1:b3:00:d0:a8:05:fd:25:35:02:
                    bb:4e:e5:08:d6:7d:ec:e9:82:af:37:bc:7d:31:95:
                    7f:18:57:17:b6:a2:4b:2f:25:33:ff:8f:5e:c6:92:
                    21:3d:a9:e4:ce:3f:8c:16:bc:77:bc:e0:90:73:e9:
                    84:63:b2:be:e3:79:63:60:be:f0:8b:73:67:56:fe:
                    0d:5b:43:30:ff:a6:b5:87:6c:59:fa:8c:aa:79:8e:
                    16:53:4e:0a:f1:30:fc:42:b8:f3:02:00:af:32:1c:
                    b8:4c:0e:52:07:87:c0:2d:21:fe:61:35:8b:e9:6c:
                    3e:03:be:71:be:ca:6b:d4:c8:d1:6e:f7:35:8a:15:
                    81:25:d1:a9:dd:c5:9e:30:8f:ff:eb:6c:27:80:34:
                    90:4f:86:6b:32:d7:88:0f:a6:40:ee:d9:c2:8a:20:
                    1e:e0:06:31:21:68:d7:f7:6a:29:d0:bf:57:25:a8:
                    7a:96:80:e5:ba:05:1f:71:e9:9c:d3:5c:d3:17:97:
                    ab:aa:ee:71:86:94:83:35:5b:a5:c0:bb:21:fa:77:
                    01:ef:9a:6b:7b:6f:d8:6f:5c:e9:e3:b1:0e:32:b8:
                    a0:df:14:53:89:8d:85:dc:36:03:dd:86:2d:0c:3b:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.36.0/24
                IPv6:
                  2a13:5840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200617

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:94:73:19:50:87:98:0f:64:59:f8:ed:55:2b:a6:58:11:
         c5:8b:9a:02:8a:84:5c:dd:33:83:27:60:8e:33:01:d0:f6:0b:
         35:f9:f3:1b:bc:18:4f:23:cf:8c:17:78:9c:85:35:d8:b2:9c:
         e3:e7:b2:b3:58:01:fb:a2:4f:30:36:51:19:eb:36:70:17:e1:
         2d:5b:c3:5d:cc:83:24:41:37:43:50:25:8e:d6:1a:8c:94:43:
         6a:ad:e4:fe:d4:b7:28:a3:69:b4:4b:66:3c:d6:be:d5:61:40:
         63:54:58:dd:b6:75:c0:54:90:09:fd:2d:42:5d:ac:b3:c9:9c:
         49:58:77:ad:92:6c:41:9d:48:b5:0a:93:af:ed:c4:40:ca:83:
         ed:0f:93:fb:91:e4:bd:2a:40:5b:91:15:e3:e7:19:41:ee:47:
         fb:c7:67:46:c4:53:bf:70:24:17:4d:df:76:bb:56:7d:a5:4c:
         35:28:f5:19:75:39:4e:08:9f:a2:ea:58:28:ea:c7:9d:2b:8f:
         b0:a7:a4:bd:d4:e9:1e:d1:a0:c1:15:74:53:4c:b1:b1:e9:26:
         d6:6d:3b:0c:d9:72:36:86:4e:9f:91:a7:ad:14:ad:11:55:6d:
         25:98:ba:82:5f:42:19:4b:aa:f0:b4:73:2f:ce:7f:e3:63:78:
         9d:c0:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----