Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
File:                     o_AJmtht2ENOUvjG_d7rLD7Wxso.cer (raw, json)
Hash identifier:          SrGmIv0VHsQZxbrd5dH5rD7ta5QPDxDhAzapk0eTQcc=
Subject key identifier:   A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F4A12D44CFCC99A53855F81E7B294
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202728
                          IP: 2001:67c:a7c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:4a:12:d4:4c:fc:c9:9a:53:85:5f:81:e7:b2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:fb:2c:be:96:e8:09:b4:56:b3:ea:37:f0:
                    63:b2:6e:82:4e:e1:c9:b4:d4:2e:50:6f:b3:21:90:
                    76:4a:6e:1d:ba:8d:09:6b:c6:42:c3:90:6c:2b:d1:
                    a7:f6:36:e9:98:ce:39:58:70:fa:ad:70:74:81:a1:
                    4e:01:d4:12:9b:74:c4:b4:e8:c3:e9:60:11:19:f3:
                    64:9d:c6:b4:a5:85:4b:b4:7b:ea:5b:a6:f8:6a:5a:
                    0d:8e:fd:8c:a2:43:66:42:55:38:a3:46:40:57:5a:
                    10:80:1f:ac:27:e6:0f:67:05:7b:5c:37:24:36:ec:
                    4e:96:05:bf:63:02:4a:aa:cc:cd:8a:43:ac:42:18:
                    a5:b9:0d:bc:9c:6a:a3:bd:c2:69:da:3f:e8:95:b0:
                    d5:90:8d:5d:05:52:c5:cf:6c:03:8a:24:5e:3d:fb:
                    a8:f8:0f:c2:bd:6d:0c:14:bc:9c:65:72:cf:76:22:
                    29:56:c7:37:8c:17:fa:00:94:27:8f:a2:d8:aa:4e:
                    01:33:2d:2b:ed:96:ea:c9:25:a5:c8:5e:35:28:a5:
                    c9:1e:b0:08:40:d6:ef:ef:f4:c4:7d:19:46:65:4e:
                    00:ea:13:3b:a4:45:76:54:65:f6:72:f6:86:cf:2d:
                    72:c6:6d:69:95:96:f4:b1:85:90:cb:5e:35:c6:f0:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a7c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202728

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:ea:aa:63:f5:9a:4d:b1:f2:d8:65:44:e5:12:24:9f:d1:
         7f:6c:4c:5c:b3:61:12:b1:65:cb:6e:0e:52:cd:22:1a:81:25:
         43:fc:2f:eb:21:a7:c8:d4:cd:e5:c6:87:61:17:0c:7b:2b:0f:
         1a:93:dd:43:c6:8e:0f:bf:0c:22:9f:3e:cf:a1:12:7a:9b:81:
         70:4e:cc:86:63:71:e2:01:3b:ce:63:3e:13:95:fb:13:3e:96:
         33:0b:c9:0e:c2:9f:4b:1d:61:0e:2a:7f:65:b9:72:76:ef:26:
         1c:c4:8e:f4:66:71:19:ec:bc:8c:5d:ca:f9:b5:8e:de:f6:ce:
         99:d4:c2:f9:e9:55:24:2a:6c:cb:22:8b:07:36:17:a2:43:14:
         86:84:78:14:c4:c7:ad:a3:78:13:e8:b0:a4:4a:21:c0:4a:96:
         46:a7:24:7d:d1:17:95:53:3b:c0:eb:95:20:f2:da:f7:5c:81:
         06:08:bb:df:42:87:08:1f:41:d0:ee:22:72:d2:49:8a:35:5f:
         85:6e:c9:35:0c:12:89:3b:73:ac:97:6a:ee:f0:b1:26:f5:68:
         f8:c4:90:4d:99:37:a0:f9:b6:17:58:0a:b5:86:66:75:14:6b:
         7d:0a:48:7e:dd:9b:8f:e9:0d:3c:9a:46:53:95:e0:bd:4f:94:
         a3:a1:e6:6b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQlj0oS1Ez8yZpThV+B57KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2YwMDk5YWQ4NmRkODQzNGU1MmY4YzZmZGRlZWIyYzNlZDZjNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXD7LL6W6Am0VrPqN/Bjsm6CTuHJ
tNQuUG+zIZB2Sm4duo0Ja8ZCw5BsK9Gn9jbpmM45WHD6rXB0gaFOAdQSm3TEtOjD
6WARGfNknca0pYVLtHvqW6b4aloNjv2MokNmQlU4o0ZAV1oQgB+sJ+YPZwV7XDck
NuxOlgW/YwJKqszNikOsQhiluQ28nGqjvcJp2j/olbDVkI1dBVLFz2wDiiRePfuo
+A/CvW0MFLycZXLPdiIpVsc3jBf6AJQnj6LYqk4BMy0r7ZbqySWlyF41KKXJHrAI
QNbv7/TEfRlGZU4A6hM7pEV2VGX2cvaGzy1yxm1plZb0sYWQy141xvCtfwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFKPwCZrYbdhDTlL4xv3e6yw+1sbKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2NjZTAx
Mi0yY2I5LTRiZTYtYTFiNi1kNTE2N2U2NzU2YjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvY2NlMDEy
LTJjYjktNGJlNi1hMWI2LWQ1MTY3ZTY3NTZiNi8xL29fQUptdGh0MkVOT1V2akdf
ZDdyTEQ3V3hzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAp8MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMX6DANBgkqhkiG9w0BAQsFAAOCAQEABc7qqmP1mk2x8thlROUSJJ/Rf2xM
XLNhErFly24OUs0iGoElQ/wv6yGnyNTN5caHYRcMeysPGpPdQ8aOD78MIp8+z6ES
epuBcE7MhmNx4gE7zmM+E5X7Ez6WMwvJDsKfSx1hDip/Zblydu8mHMSO9GZxGey8
jF3K+bWO3vbOmdTC+elVJCpsyyKLBzYXokMUhoR4FMTHraN4E+iwpEohwEqWRqck
fdEXlVM7wOuVIPLa91yBBgi730KHCB9B0O4ictJJijVfhW7JNQwSiTtzrJdq7vCx
JvVo+MSQTZk3oPm2F1gKtYZmdRRrfQpIft2bj+kNPJpGU5XgvU+Uo6Hmaw==
-----END CERTIFICATE-----