Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
File:                     oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer (raw, json)
Hash identifier:          V0TSO9wU0qG1r1oebHs7D4HdWP6fhUhRFGPKnc+9Hfs=
Subject key identifier:   A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D741EF8DF9EEADF5E58CFBA9F34A4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.14.124.0/22
                          IP: 2a0e:e80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:74:1e:f8:df:9e:ea:df:5e:58:cf:ba:9f:34:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:4d:8b:d5:d5:9d:6d:b3:18:19:09:92:2b:
                    3a:4e:ce:f6:de:41:90:83:bd:a4:70:73:55:2d:8e:
                    71:23:31:f3:8d:02:60:43:7d:46:8e:5c:4b:83:3a:
                    2a:54:57:27:c2:cc:15:b4:9e:64:aa:c4:65:01:da:
                    f5:0c:02:23:55:2c:f0:21:10:64:ed:a0:21:5c:84:
                    30:a7:7b:f6:9b:8d:a4:79:60:e1:36:4c:50:ed:25:
                    30:94:c3:01:28:53:5b:b3:d3:0e:40:a7:05:1f:5f:
                    26:97:37:ee:e5:c8:2f:f0:ea:8e:ba:2c:64:0d:aa:
                    86:50:de:88:95:ed:67:0b:ac:80:d4:83:6b:5a:5b:
                    20:c9:bd:69:cd:ae:08:c9:1a:be:4c:c6:87:8a:d8:
                    2d:4e:c8:17:bf:cf:71:4a:56:13:7f:bf:2f:1d:36:
                    26:b5:8f:ff:13:82:37:ab:f6:9d:9d:46:b1:df:08:
                    e3:97:5d:78:58:7c:d2:39:54:0d:10:d7:82:13:cb:
                    7b:8e:10:74:42:6f:22:11:34:2c:d9:43:19:69:8b:
                    e8:33:ab:d8:8b:97:27:b0:e5:d7:b6:9f:d2:4e:ca:
                    bb:26:e4:46:d2:7f:3c:18:8f:39:77:e3:7f:52:b8:
                    bb:5f:b5:4d:b3:90:c5:58:dd:8a:06:3d:e6:65:d2:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.124.0/22
                IPv6:
                  2a0e:e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:69:ff:b5:c4:b5:20:51:37:ec:51:3a:44:20:8e:12:59:
         2a:b8:54:9d:24:eb:08:dd:51:d3:02:3e:be:ee:e8:a8:00:dc:
         2c:0b:b1:06:ec:21:23:ef:ac:75:ba:1f:9f:8f:37:cf:f0:49:
         3e:9b:be:3c:8f:c9:85:30:1e:19:98:66:fc:4d:e0:2b:56:1b:
         86:fa:9e:55:56:27:df:5e:80:50:e4:6e:5f:68:c1:65:9b:e6:
         c5:b8:20:d7:c5:87:f8:e7:07:71:42:17:b3:d0:6d:06:ba:f8:
         bb:34:a0:11:7b:9c:74:8a:e5:8f:aa:61:73:71:89:09:68:00:
         0c:90:7f:cd:8f:d0:c7:76:94:4a:06:ce:72:d0:03:ee:b1:97:
         58:83:a6:9f:6c:f7:b3:47:b7:23:ed:f5:dd:d8:61:cc:d3:43:
         37:f0:24:3b:57:c1:7a:ee:f4:08:8c:bc:6c:70:e4:55:c4:1e:
         f4:cc:74:c5:c3:c8:af:47:1b:8b:16:96:53:7c:18:da:2e:51:
         b3:02:44:17:69:0b:1b:96:8e:06:37:1e:39:4d:07:f3:11:96:
         e5:29:3b:cf:c9:f8:24:ad:35:53:9c:68:04:7f:88:cd:ef:7a:
         e1:a1:43:be:a2:b9:a5:a2:84:ef:26:7b:31:3a:a3:da:f8:10:
         e2:c0:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----