Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
File:                     o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer (raw, json)
Hash identifier:          ntCVhJm0tr4munw9cb8/LLezpHNP1bUejlxFi0IldFY=
Subject key identifier:   A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B269AF02B321C3B358A5CABAF650B0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:47:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 194.127.234.0 -- 194.127.237.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:69:af:02:b3:21:c3:b3:58:a5:ca:ba:f6:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a37a126d7854ecd565ae82970c693f3359f85f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:bd:0e:23:b6:42:d9:9e:bb:e7:e0:16:19:
                    06:86:8f:70:c2:c3:7a:dd:11:76:2e:2b:d9:f0:55:
                    7c:9f:f7:33:34:b8:ea:6c:0d:69:c6:89:1f:8b:47:
                    e4:ac:18:14:7e:cc:09:ba:9b:59:99:32:f9:7e:ed:
                    fe:00:b0:2c:74:da:bd:b6:bd:52:69:15:7e:30:7f:
                    b0:a9:0b:78:7f:f3:fd:ab:36:3a:8d:d3:c6:9a:44:
                    35:b3:b3:ab:c7:92:3c:21:e1:79:dc:a3:ff:ed:38:
                    0d:06:00:87:62:be:eb:15:d9:6b:26:9d:a8:87:ec:
                    81:ea:dd:d3:7d:30:8d:29:5d:80:f1:92:a3:7b:6a:
                    a1:07:be:0a:81:da:53:0d:73:2e:bb:6b:ba:60:40:
                    fe:63:90:8c:28:b8:45:f0:31:45:75:8f:57:71:b1:
                    c4:be:05:77:05:7a:64:3c:36:94:05:27:d3:89:ab:
                    9d:01:88:df:1f:72:f3:de:f8:90:e8:a3:22:9a:d4:
                    9e:b1:b1:87:99:4c:b0:98:55:dd:32:9a:2f:c6:c7:
                    be:24:3c:68:e9:a6:94:c6:7c:d3:39:57:f6:f6:e9:
                    c8:eb:f3:d0:63:86:a9:c9:96:31:12:16:a6:00:fe:
                    42:de:b0:ef:58:8f:ff:0b:c3:75:da:db:54:e3:ae:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.234.0-194.127.237.255

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:28:9e:21:60:e8:2a:15:c7:b0:62:04:e9:cc:67:22:e5:
         9b:1a:3a:bb:d6:d6:37:05:8d:ca:fd:c8:8d:0c:6b:04:40:14:
         bc:1b:88:1f:c1:5f:ec:31:68:c1:d3:0f:5c:5a:99:12:7e:7d:
         45:cd:70:b0:8f:45:56:6b:ba:45:b2:76:d2:dd:b1:86:03:9b:
         b3:5a:d4:33:ff:aa:56:f3:f9:73:0e:4c:1d:53:db:fa:a7:ed:
         e3:aa:0a:6a:ad:1c:ee:ff:39:96:80:02:13:31:94:f2:ae:df:
         e9:e8:26:df:a3:d0:73:9d:08:1b:c9:2d:fb:8e:a8:52:ec:fb:
         d7:42:4d:35:e9:e5:fd:99:b9:d5:8f:6d:84:9d:a7:2f:a2:93:
         7c:24:9a:90:41:59:8f:d1:ea:1b:14:67:99:ae:93:33:64:4f:
         49:4b:61:30:b3:e1:6b:0b:b6:99:9b:f0:27:fe:53:6f:c2:ac:
         ed:2b:98:e0:d5:d6:0b:4d:a4:eb:a4:0c:c6:13:04:48:9b:22:
         a9:17:79:72:cf:ca:65:d2:45:ea:ae:72:d6:e8:30:ca:a6:49:
         c1:b2:b0:f4:85:ff:51:a2:8e:e4:e8:ed:d4:24:87:33:4d:91:
         2f:a0:06:72:f3:47:8f:21:5d:b0:53:1e:4d:fd:9f:1b:86:09:
         93:e3:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----