Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
File:                     oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer (raw, json)
Hash identifier:          CEGgImmywLxEgTmwP3yuh5v4wCWEKWGPIeSmFdFD6js=
Subject key identifier:   A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019610624A62DCECB13F8FF72FE1843DDC15
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 07 Apr 2025 13:13:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60539
                          IP: 185.143.238.0/24
                          IP: 2a13:aac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:62:4a:62:dc:ec:b1:3f:8f:f7:2f:e1:84:3d:dc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  7 13:13:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:42:62:22:79:06:33:3b:b9:6a:65:1d:0e:
                    9d:cf:47:bb:37:70:cb:c6:23:46:36:29:01:7b:78:
                    f1:cf:29:5f:28:b8:02:f4:f2:a5:a8:f1:d8:0d:87:
                    00:24:7f:24:2d:cb:3f:77:7f:c2:af:d6:40:fe:88:
                    bf:a1:6d:06:71:0a:e2:64:8e:5b:15:d6:75:68:6d:
                    64:5c:30:fa:f8:2d:5e:5b:a5:69:39:cd:a0:7a:68:
                    4f:73:bb:34:4e:01:77:4c:3d:38:d2:7c:71:9a:a6:
                    dc:ac:d0:f5:62:91:ee:ec:11:73:2a:ca:0d:63:cd:
                    be:8a:87:74:24:64:a6:89:99:fe:6e:67:4f:f8:fe:
                    f2:a6:56:8b:27:a2:67:0c:49:e0:fb:59:b3:35:1f:
                    be:26:24:be:20:12:04:23:f6:39:e6:b0:4a:4a:ca:
                    eb:b0:c6:9c:e7:09:e4:b2:2a:b7:bc:64:67:e7:6a:
                    84:87:b0:7e:a7:52:8b:b4:e1:e7:b8:b7:39:0f:be:
                    4e:a0:4e:85:17:20:ef:26:52:cc:3f:ca:dc:bb:02:
                    08:9a:a1:ad:ae:e2:f0:a1:b3:df:2f:f0:53:e2:6a:
                    03:51:ed:c1:89:0f:79:0a:cc:65:bc:e8:59:3f:69:
                    1c:ab:b0:0a:e0:5d:fb:f0:b2:30:3e:a7:0e:d8:4d:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.238.0/24
                IPv6:
                  2a13:aac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60539

    Signature Algorithm: sha256WithRSAEncryption
         40:11:21:ec:93:4d:a6:e5:65:0b:7f:d7:90:bb:f5:af:b0:0c:
         d8:86:55:1e:2b:2f:33:6a:f7:20:95:e6:da:2a:d5:e7:5c:a6:
         aa:40:61:62:84:58:83:7a:f6:de:58:eb:8d:25:b1:b8:5c:db:
         1a:d1:53:50:64:38:49:15:53:78:62:61:d0:be:cf:c0:73:91:
         f1:0c:b6:58:6f:a0:e8:3a:4c:2a:88:f1:04:51:87:35:b1:1e:
         c9:40:c5:6d:7f:7b:87:25:5e:aa:be:a4:37:26:92:30:a8:eb:
         b4:2e:84:f3:a0:62:df:2c:16:e1:90:db:f7:7b:95:36:ce:5f:
         a3:0e:9a:24:3c:04:18:e6:2e:21:92:f9:e1:1c:3b:1d:ca:d4:
         6b:f2:e4:5e:f2:97:84:60:02:74:2d:05:a7:68:ab:a8:29:74:
         4a:8a:6f:0a:df:79:b9:9b:84:c6:5d:ea:1c:e9:3d:24:ba:8b:
         63:44:47:d5:24:14:5a:c3:14:35:4b:73:6e:d7:bd:44:ba:ef:
         4a:47:fa:32:60:d9:a8:de:8e:2c:0a:f5:8b:c1:53:1d:67:2b:
         57:b2:93:1f:fc:2f:eb:fc:56:3b:04:08:36:63:be:cf:21:af:
         06:c1:56:79:ab:70:5a:63:c9:1a:c0:41:34:32:4e:ff:a9:e2:
         4e:53:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----