Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
File:                     wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer (raw, json)
Hash identifier:          45KHFMEFltv7l4AUu1UDItrL+/boeotFCeAQb8G7Dr8=
Subject key identifier:   C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA10FB7C9454ABD93DFD9B32EDA4B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200402
                          IP: 185.84.56.0/22
                          IP: 2a03:6ee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:10:fb:7c:94:54:ab:d9:3d:fd:9b:32:ed:a4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:bf:82:a9:3a:64:f9:84:8f:17:eb:6c:21:
                    c4:59:58:57:b7:86:44:36:ed:8d:ba:d6:56:05:4a:
                    9e:c9:dd:2b:51:af:a9:78:7a:a9:b7:0d:db:42:70:
                    77:6d:84:3d:b5:bf:45:d5:a1:d5:df:e2:14:3e:66:
                    41:40:b4:b6:7a:58:43:0a:bb:ee:0c:4a:ef:a5:a5:
                    c9:d1:65:a4:23:0d:c7:d4:51:e8:f9:72:80:66:c7:
                    ed:46:ed:e1:d0:67:e3:0b:9d:21:39:4d:e7:5b:74:
                    c0:6e:8e:fe:65:00:aa:b0:ef:bc:53:fc:bf:ee:45:
                    aa:6d:86:ed:c8:87:7c:1c:b5:6c:b7:b2:79:f2:3e:
                    4f:a3:9b:8e:62:28:7f:65:f2:e7:40:8c:74:0b:ac:
                    53:0a:3d:30:49:80:21:1d:30:d5:c9:cf:8d:35:42:
                    be:42:c6:00:ac:2a:82:6e:5a:c8:2e:7d:30:a4:23:
                    42:8e:c7:0c:d1:88:53:5d:fe:45:a8:92:3d:d6:b6:
                    d6:6b:81:0f:2c:6e:58:f6:38:35:da:b9:a4:42:29:
                    83:e9:97:d1:3d:da:a5:e1:97:54:17:f6:fa:94:ce:
                    b5:93:ab:73:61:e4:6b:0a:75:2d:3e:d7:48:a1:4b:
                    9f:27:eb:1a:4b:0c:92:fe:e4:6f:5a:a9:f8:42:25:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.56.0/22
                IPv6:
                  2a03:6ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200402

    Signature Algorithm: sha256WithRSAEncryption
         34:38:5a:57:1e:55:f0:5e:90:7c:5a:f3:18:4b:9e:a5:3a:4c:
         2c:62:1f:93:15:ac:6c:04:fa:72:9a:32:55:15:a4:5e:27:5f:
         36:0a:9f:33:e6:cc:bb:3f:7b:cd:02:0b:89:30:37:8e:74:44:
         51:9f:5d:0f:56:52:e9:8a:c0:c7:fc:cc:51:49:94:03:d4:84:
         a7:da:c9:b4:d2:6f:c0:df:3b:59:99:66:41:96:f7:0b:ff:80:
         dd:03:7c:d8:ec:a9:de:c8:7e:f8:2b:30:02:9b:61:49:e0:d4:
         1f:37:5c:a7:e5:a5:57:46:18:00:e0:8d:a3:49:3a:cd:70:6a:
         ff:a6:5d:f7:49:a5:5e:fa:75:63:1e:c2:37:80:e9:3c:c8:a6:
         6a:c4:01:44:de:74:1d:89:0d:a3:2e:b2:44:35:d4:e3:7b:fc:
         70:61:be:53:17:b2:f6:4b:b9:66:a2:44:8b:67:c9:cc:aa:fd:
         34:88:3d:a7:14:a0:d6:9d:d9:41:b1:90:d0:93:72:3a:4c:27:
         2b:da:5f:b2:69:8a:10:4f:32:ab:9e:ee:c8:5d:a7:ec:93:8d:
         c3:6f:1c:25:d0:ac:e8:f7:1c:7e:0a:e8:82:e0:4e:c7:29:37:
         e4:0e:76:b0:ca:56:08:17:c0:77:7c:fe:a6:c8:69:93:b3:2f:
         65:f1:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----