Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
File:                     x_o8rcpOExoPvhueQNujg4M89Io.cer (raw, json)
Hash identifier:          KeSv+OfEU1aF9BKwofmQALsRy6749o1f1C8cV882eyY=
Subject key identifier:   C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195B318BE45F74C31243DBFDFF92529539B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 20 Mar 2025 10:28:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39568
                          IP: 185.230.204.0/22
                          IP: 2a0e:9f00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b3:18:be:45:f7:4c:31:24:3d:bf:df:f9:25:29:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 20 10:28:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:83:59:0e:d1:b1:cc:09:d2:d7:a5:34:18:3c:
                    6c:e6:95:b2:e2:08:f0:e8:d6:e4:88:2f:24:a5:86:
                    04:f5:01:b8:85:b3:5f:51:ab:8c:70:32:60:75:35:
                    58:b0:a6:e4:d2:b9:c2:5f:0e:ad:41:af:4a:c5:5c:
                    71:b8:c5:80:3a:88:2b:13:71:2a:75:48:c8:e7:b2:
                    6e:cf:5e:7a:2e:f2:c3:45:50:bc:ce:a7:7c:cb:1d:
                    cc:81:4c:80:69:b8:ee:f0:9a:80:e9:cd:2d:4d:0c:
                    8d:a6:3d:92:36:d9:99:21:4b:14:ea:ef:6f:33:f6:
                    fe:4d:c6:6c:9f:cc:ac:02:25:a7:f8:cf:76:07:0d:
                    f0:06:91:78:31:cc:4d:a5:75:58:f8:b1:5e:50:ba:
                    66:c1:3c:1d:2b:f6:24:56:02:34:00:36:7d:03:b8:
                    28:b1:61:a7:ab:b7:bd:d9:08:0b:c7:67:78:63:0d:
                    2a:d3:45:9f:c1:86:a8:b7:b3:01:2c:4e:7c:f7:63:
                    ff:be:0e:65:7e:33:43:96:71:4d:1c:77:e9:31:91:
                    1d:74:88:33:1c:37:83:f3:9c:c6:68:9f:78:6b:46:
                    99:b2:97:7f:ca:a8:5f:ea:ae:06:3e:c6:0c:9f:3d:
                    a2:55:5b:be:11:02:ea:cc:fd:ae:06:2b:5b:3b:8c:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.204.0/22
                IPv6:
                  2a0e:9f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39568

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:ab:71:d3:18:76:c0:97:fb:79:4b:d9:a0:fa:9d:cc:e3:
         ea:3e:db:a9:39:5c:52:d5:12:b0:2e:9e:81:73:0c:28:d2:b2:
         32:ac:22:8b:cb:07:07:fc:a3:b2:25:33:91:0f:6e:55:6a:3e:
         82:e6:ec:fc:c1:48:ad:f1:ac:c6:19:73:e2:ed:79:fd:ec:ba:
         d5:72:7c:16:c1:af:11:11:15:dd:b3:fa:ae:c1:dd:e5:00:50:
         38:82:c0:b0:b8:fe:d9:c4:24:61:b4:6e:a2:49:5e:25:f6:ab:
         ff:d9:25:94:b3:ba:e2:15:1f:4d:5f:51:86:84:80:68:6a:2f:
         0b:90:77:f3:f2:6d:21:7b:4e:89:a2:4c:59:c7:d7:7a:88:5a:
         1e:ea:a3:e6:99:98:c8:a1:d9:6b:e8:0d:bc:d9:78:82:d9:be:
         87:2e:6d:6a:a9:55:3a:a8:fe:e0:69:1b:aa:d8:dc:a4:f8:07:
         c1:74:7b:b7:9a:18:45:ad:f5:cf:de:55:b1:bd:ce:62:fd:5c:
         90:e3:45:7b:0d:4d:52:7f:da:19:dd:4d:4f:0d:03:ff:36:67:
         78:c2:34:b4:91:70:66:fc:fb:e4:fa:e7:d3:69:ae:f8:5e:aa:
         ef:8e:8a:44:a9:99:72:cc:08:b5:82:5f:1f:99:1f:88:bf:b7:
         5b:2a:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----