Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
File:                     oisfTQq0ODaycVOQgo2QdyzJ2No.cer (raw, json)
Hash identifier:          eeokBZA/qX5pRhlv5ELvAKNKne1JHcZmSPIOG7IwuXA=
Subject key identifier:   A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DC3D2157F1B6F445AC0C78D7C48EE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 28995
                          IP: 62.140.160.0/19
                          IP: 2a02:2670::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:c3:d2:15:7f:1b:6f:44:5a:c0:c7:8d:7c:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:9a:78:04:bb:f8:16:fe:bd:2f:64:bb:e7:
                    ce:8f:18:4f:09:ea:de:15:3b:fc:44:77:07:23:c3:
                    a1:20:c0:ab:ad:41:49:51:95:e4:aa:0f:09:f0:4c:
                    22:c9:14:25:ff:4b:a0:94:b5:a8:fa:91:61:3a:7a:
                    68:75:a4:aa:a1:bb:9f:de:2f:c2:73:6e:37:38:ea:
                    73:92:64:89:01:b6:11:25:db:64:7a:0c:da:2f:1d:
                    27:2f:98:f4:73:ab:75:cf:c8:69:34:4c:83:07:0f:
                    90:99:c9:f9:9b:8e:96:2f:ab:7c:0a:6d:f1:dd:63:
                    89:b2:59:5a:46:02:02:5b:ad:70:2f:f4:6a:0e:52:
                    81:93:bb:a3:de:cf:8d:78:f0:95:c5:ee:9c:1e:42:
                    fb:6a:e1:e3:32:19:f1:f4:88:75:c6:f2:00:b7:64:
                    1e:52:24:4f:ca:ea:a6:62:9e:4d:77:07:19:6c:d7:
                    d7:3d:28:36:3c:fb:30:c8:0e:a9:7a:dc:92:cb:b2:
                    18:ee:d7:bd:84:e3:be:e0:e0:df:04:6f:a7:07:46:
                    30:dd:70:79:27:6a:a4:29:47:7a:af:eb:d6:ca:16:
                    40:13:2a:92:df:6f:77:4b:dc:cd:d2:de:64:db:82:
                    2a:4d:c7:9d:46:9a:14:51:e5:c9:52:1a:c4:bd:29:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.140.160.0/19
                IPv6:
                  2a02:2670::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28995

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:f3:e6:72:9e:27:c8:bd:ef:d8:73:23:ee:1d:8e:85:a4:
         d0:d5:5a:eb:8f:b7:ee:fe:d6:f8:41:6f:bf:43:5d:bb:d3:80:
         a7:39:7d:e8:9b:90:12:73:f8:80:d9:dc:f9:54:c7:a2:b0:f6:
         18:d3:82:e7:52:5e:c2:19:97:b4:b0:9d:83:8c:3c:29:0b:52:
         79:c7:40:33:1d:d3:a4:4c:ec:7e:3e:b8:1b:8b:13:c2:46:d5:
         2a:de:58:50:8c:6b:cb:11:f7:c6:63:1b:66:8e:b0:f7:75:9c:
         f6:30:d2:e4:ec:86:17:05:55:2c:ba:44:95:40:ff:4e:21:28:
         2a:94:27:78:96:5e:4a:ec:06:cc:da:d3:c4:c1:29:56:18:4e:
         18:e8:db:17:43:fd:f2:ad:4b:79:51:cc:ad:5f:3c:47:83:37:
         8b:98:77:50:aa:e3:9d:4a:d9:3b:29:2a:50:de:b5:51:a8:7d:
         06:24:b6:69:b4:b5:3f:a4:aa:a2:80:6e:38:b6:86:ec:77:42:
         72:04:d0:d5:1b:01:8b:a9:ce:c7:b3:ea:b3:58:97:37:db:0a:
         df:4e:c1:c4:a9:6a:b9:41:dc:29:4c:e1:78:f2:e1:84:d2:2c:
         0d:f7:6f:b9:c1:b8:97:62:80:a0:92:89:25:b0:56:b9:93:e9:
         34:a1:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----