Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
File:                     i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer (raw, json)
Hash identifier:          7veW6Sg9jpjxIc2TMMNiv7W5eBsoeWC3H1Xl7/69hF8=
Subject key identifier:   8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B6706173163A9D24D08C4A7790B892
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:55 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207899
                          IP: 92.119.212.0/22
                          IP: 2a0f:66c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:70:61:73:16:3a:9d:24:d0:8c:4a:77:90:b8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:ec:85:d6:ad:0c:be:fa:f8:ba:0f:80:12:
                    c2:a8:e1:24:a1:ad:e1:c2:9a:7b:9e:29:03:3c:ee:
                    19:62:95:83:2b:33:63:19:6f:42:96:3d:40:07:ca:
                    2e:ba:63:6a:84:94:48:46:43:0c:d9:c4:30:da:4f:
                    33:a4:be:dd:9a:3e:66:91:59:f9:3d:5b:d3:c2:44:
                    97:77:af:bb:6e:67:96:12:79:37:5e:4b:40:9d:fe:
                    f7:a8:a9:35:79:04:6b:66:7f:5d:28:9b:91:63:72:
                    30:08:0f:7a:7c:dc:4a:d2:cf:7c:bd:17:e1:31:40:
                    59:fb:c2:01:36:55:75:52:f5:b3:dc:79:02:b4:ed:
                    5d:30:a4:68:d3:cc:f4:d5:0d:f5:d1:20:ab:d4:ae:
                    f4:1c:4c:26:7b:fc:3b:d8:45:4f:4d:d7:de:14:9f:
                    cd:65:06:3c:4e:b1:56:e3:05:90:ea:85:60:80:e4:
                    39:c2:2e:01:80:a9:5b:63:45:e8:e4:86:86:5d:62:
                    ae:6e:73:ef:16:f0:14:67:4e:9d:10:c8:44:2a:c3:
                    29:06:b0:0f:22:8f:da:3e:89:6f:ea:60:f2:bb:33:
                    ae:0a:08:d1:69:31:45:4e:0f:eb:13:42:19:d8:41:
                    56:5c:c2:64:64:ca:3c:13:0a:d4:f9:c0:b2:56:a3:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.212.0/22
                IPv6:
                  2a0f:66c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207899

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:35:39:56:19:77:9d:66:64:ed:17:ec:ef:a1:a2:95:d3:
         ba:e2:7a:89:4d:94:87:7a:9e:aa:8a:be:09:d5:6e:03:b9:7e:
         3f:87:1d:bf:43:88:f5:50:3a:c9:d3:24:e8:a7:74:56:8b:ba:
         1c:51:b8:69:f4:05:8b:68:93:50:99:f5:ad:21:67:2d:52:90:
         1f:b9:fe:16:43:56:c6:29:29:85:20:67:f2:eb:07:ee:b1:19:
         ec:a3:4d:a6:35:3b:66:2e:9a:11:52:f3:9e:3a:16:d7:e4:f0:
         a9:31:7d:58:41:a9:62:7c:94:9b:b3:ae:2a:a0:92:55:44:ec:
         b9:44:e6:a4:c3:34:42:bf:b6:5b:c2:de:b1:ed:3b:57:1f:ee:
         dc:88:ce:74:6d:b7:71:a2:6b:60:ff:90:f1:22:be:29:89:dc:
         11:34:58:da:36:87:51:6d:68:43:02:7a:57:07:fb:35:f4:bd:
         1b:c6:25:77:ce:60:a0:ff:f8:1f:6f:c3:9f:fc:0f:c8:ce:b8:
         81:75:c8:ab:7a:0b:43:d2:6d:ce:78:0d:0a:2b:92:25:b2:4a:
         02:83:d8:4a:4a:b1:2e:5b:ea:ef:90:6c:63:97:a6:8a:86:ee:
         8c:ef:51:a9:2e:6d:c7:74:fc:1d:4f:fa:e8:46:50:54:74:a0:
         81:00:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----