Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
File:                     OPdGuBrsAONrm8t6CGQqZOkT2ls.cer (raw, json)
Hash identifier:          0EDW8wvJ8wkRJnkhNMiLoVtpvwVEZvXOaquQiOeDaaM=
Subject key identifier:   38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521E906B0C2D32D6099F7CF55A16A53
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 91.240.241.0/24
                          IP: 2001:67c:2a50::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:e9:06:b0:c2:d3:2d:60:99:f7:cf:55:a1:6a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:89:1a:53:e7:39:28:8d:2a:ff:48:3a:44:
                    5b:f3:8b:b9:02:e6:9f:12:eb:41:bc:71:b2:31:32:
                    93:cd:bd:71:51:31:bd:92:96:97:bf:80:b2:83:ad:
                    7e:57:04:85:90:f6:d8:bb:49:22:c1:c4:f3:ce:e0:
                    24:f5:20:e3:8b:2e:20:13:81:ec:dd:e9:74:4f:b6:
                    5e:92:5f:74:1c:c2:51:ff:88:11:a4:a4:76:46:50:
                    7d:39:bd:85:f1:d3:ad:9c:e5:77:bc:4c:aa:b2:ca:
                    ca:bd:25:60:a5:32:e0:52:8c:21:95:f2:a9:9a:7a:
                    02:29:f4:ec:e0:fd:8f:3a:31:7b:98:bc:e9:de:10:
                    bc:bd:d4:b8:3c:ba:ef:de:ce:20:ac:39:dc:5f:d7:
                    3e:f1:f6:78:a2:59:ab:2a:03:ac:d6:d1:c3:8b:21:
                    33:be:37:66:0a:e8:b8:4a:ca:a9:21:e8:9d:d0:1d:
                    00:9e:7e:56:0c:4a:9e:10:35:54:45:03:22:24:52:
                    3b:26:c4:e6:e6:8b:2a:c7:4f:49:88:69:78:e6:78:
                    95:e2:7d:2a:23:0d:5b:93:9c:d9:52:ca:97:58:a5:
                    d6:f7:40:83:5e:76:b8:5b:94:f5:15:b2:76:11:e5:
                    c1:77:41:7a:35:8f:5c:c5:31:94:c9:c7:47:58:09:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.241.0/24
                IPv6:
                  2001:67c:2a50::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:03:9b:3d:f9:ab:e0:c6:6c:f9:e2:79:f5:ec:ce:a3:dd:19:
         2f:6b:94:3a:94:d1:d1:7d:54:c7:be:1d:b0:ef:db:d9:d1:4e:
         72:ff:06:45:27:b1:70:58:4c:c6:d7:ed:13:03:52:71:33:a9:
         ef:2c:a3:30:8f:19:92:25:0e:e0:8a:36:f8:ea:f5:43:5b:87:
         92:2f:af:6f:7d:f1:a1:a2:68:30:9d:0d:78:92:93:ce:81:b5:
         55:f9:8c:b3:c5:83:75:c1:ff:c1:fc:ca:79:04:a3:24:d7:c5:
         0c:11:17:f0:c0:4b:1c:29:bc:42:93:84:e0:7b:63:6c:1e:a6:
         cb:f7:f6:0f:0f:b1:fe:17:58:ed:2d:ea:64:4c:98:d6:4c:b3:
         1b:eb:0d:7e:98:50:66:09:0f:35:ad:1a:b2:e0:04:35:70:68:
         3b:67:82:65:5a:e4:1b:55:73:c1:a4:3d:e9:7d:e1:da:05:87:
         c6:36:ef:8a:cd:40:25:e6:a6:15:dc:91:20:d6:e2:cd:fe:29:
         97:4e:0a:f5:64:b1:3b:5d:00:7a:64:1d:1b:57:8e:54:43:b1:
         5a:3d:2b:fd:26:f8:1a:f3:e2:c8:71:77:d4:6a:57:fb:b5:37:
         22:3e:a0:56:a1:87:73:3d:36:6b:48:7b:3a:b2:7c:98:0c:50:
         5c:3c:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----