Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
File:                     oZxkOUagWTlzVUINc7xF8U2ip2s.cer (raw, json)
Hash identifier:          8UqvVcHcMo/gbSlkwic5hz4AbYGU4vBOx8yGW1dsh+0=
Subject key identifier:   A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3E929BE2EC19697A02BB2F93ACA31
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213364
                          IP: 2001:678:d14::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e9:29:be:2e:c1:96:97:a0:2b:b2:f9:3a:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a19c643946a059397355420d73bc45f14da2a76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:fb:f1:eb:78:46:ed:3b:2e:38:fe:b7:d7:
                    e5:4b:af:6a:21:ec:3a:66:70:61:94:ac:45:2a:72:
                    49:93:f4:ee:79:f5:dd:39:a6:24:fa:c5:5c:32:a4:
                    00:90:0c:d7:c3:e4:8c:bb:9d:30:a4:22:bf:07:5f:
                    d5:3e:45:cd:f9:5f:a5:87:cd:75:41:f4:65:fa:8f:
                    33:21:01:45:b3:ec:91:e8:e9:c5:8d:a5:cc:dc:9c:
                    ec:ea:78:df:f8:64:f5:6f:9a:49:ae:fb:70:0e:42:
                    2f:f0:fd:71:ec:e9:4b:d4:27:4e:38:5a:f3:0a:b7:
                    0e:4c:3a:bd:0a:c0:9f:14:10:0b:76:77:7c:4c:a3:
                    d4:4e:d3:20:83:8a:3f:93:8e:4b:76:65:8d:f5:c9:
                    cf:d5:3f:ea:10:97:1f:7f:91:a0:0e:6a:2a:3c:ea:
                    73:65:81:56:65:0c:25:6b:fb:b4:4a:e2:fd:e6:58:
                    4d:42:5f:84:97:6a:4b:ef:5c:da:a5:7e:2d:77:38:
                    8e:47:ed:1c:b3:01:4b:57:54:56:14:2d:f5:51:f6:
                    14:aa:61:54:15:4b:03:ea:39:f1:ab:59:df:cc:0b:
                    1d:64:98:bf:f3:a2:3f:55:f2:5d:82:be:2c:fa:26:
                    6b:0c:1b:58:db:ba:11:45:5a:b1:97:75:f1:95:b5:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d14::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213364

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:5c:bb:85:8d:13:56:d2:3a:85:ed:ac:fb:34:ca:19:43:
         eb:8a:10:39:44:73:94:d9:5d:12:5e:5c:a4:d4:6f:31:1e:d7:
         b7:b9:a1:3e:ee:68:14:6b:11:4b:f6:41:96:31:cb:e4:63:b9:
         5d:2c:c8:5c:30:33:15:7a:e2:e0:e1:6a:5f:c0:cc:6c:35:f5:
         d7:0e:50:a2:8f:f6:4f:04:46:b4:f1:5f:91:69:ff:dc:ce:a3:
         b9:d3:52:f3:cd:ac:1e:60:39:29:83:fb:88:ef:97:a9:85:8d:
         5d:b6:45:2d:91:95:30:ae:8c:d9:6d:04:29:b5:1b:fb:ad:45:
         a1:ef:9f:23:b7:13:0c:66:7e:11:ef:9a:60:97:3d:a8:28:1d:
         eb:67:39:f3:9f:25:62:75:5a:3c:67:e8:ec:45:2e:9d:86:35:
         74:7c:90:8e:51:6c:a7:a5:12:00:50:ce:ef:50:7c:a8:5a:56:
         82:c4:22:08:ee:50:c0:82:41:63:5d:3f:c2:ac:6b:32:84:75:
         0e:a8:c2:50:cd:88:d5:7a:56:9e:0d:8a:cb:2c:0d:c2:4f:5c:
         d3:d9:45:94:01:91:3a:94:4f:48:5d:33:3c:12:bd:80:29:67:
         ce:20:a8:cd:4e:8c:a8:2c:04:e6:60:c7:46:30:56:c3:88:25:
         e6:29:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----