Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
File:                     oCcpAmWOFcs0vVCcOVC63iGnltI.cer (raw, json)
Hash identifier:          s2qH42OgsD8Fk/KFkTamOgYCuYxb6RIkeXtGLkvorLY=
Subject key identifier:   A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F61E68614DA48A4FF5B3BC52089C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209382
                          IP: 45.67.236.0/22
                          IP: 2a09:7d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:61:e6:86:14:da:48:a4:ff:5b:3b:c5:20:89:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:37:37:aa:53:65:b9:04:9e:82:e6:6c:bc:
                    61:61:4f:32:73:0f:76:bf:07:52:9e:c1:f5:68:75:
                    66:e3:62:12:db:c6:08:2b:7c:2a:8d:fa:3c:26:a3:
                    ff:b3:92:d1:5d:64:a3:85:e0:cd:b4:ac:16:d1:7e:
                    76:78:04:70:50:8a:d4:83:3f:3a:69:39:9d:2a:a6:
                    e1:1b:77:7f:32:0c:2e:a0:b4:97:e6:67:21:82:36:
                    46:36:bf:0c:da:39:5a:75:fc:55:aa:35:73:7f:19:
                    c3:8a:bb:99:25:1f:1c:4d:d4:4d:96:a0:3b:08:4a:
                    fd:ef:b0:4a:2f:f3:dc:41:1a:76:96:7a:c1:d3:5d:
                    92:ee:91:c0:81:28:71:3b:4e:92:f5:e8:32:e5:ce:
                    02:b1:7d:89:40:88:1e:e7:3b:71:35:aa:a3:20:bf:
                    7a:db:58:67:f4:f5:a2:75:08:55:eb:9a:da:ba:74:
                    40:7a:9c:25:23:91:c6:53:2c:e7:c0:dc:ef:fe:d3:
                    83:e4:e3:5c:a3:59:ef:8e:aa:2a:9c:5e:21:5d:6d:
                    d2:de:dc:c6:5e:49:f5:77:48:8e:1b:cd:5e:32:0a:
                    01:cb:b7:0d:45:ab:54:96:ff:28:fb:07:d0:ee:e5:
                    3f:d3:65:9d:26:bc:2c:45:77:10:62:df:99:a2:9d:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.236.0/22
                IPv6:
                  2a09:7d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209382

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:9e:04:b1:60:1d:cd:9e:4c:90:1a:eb:2e:fa:95:f5:a8:
         76:ab:45:7c:b5:69:bc:1c:88:1f:fd:14:1a:21:18:f1:28:13:
         64:58:42:fc:86:55:2f:af:e5:dc:ea:08:c7:bf:e1:48:da:32:
         e3:5f:fd:41:5c:11:1a:9b:9f:23:08:eb:f5:d6:c2:c7:3b:2e:
         19:a2:8c:2f:8c:fc:9c:45:b2:59:31:43:ab:33:8b:4f:40:ae:
         39:3b:4e:43:69:60:00:95:76:5f:20:69:3a:dc:e3:a2:f8:91:
         a7:b3:97:27:50:d4:a6:3e:0f:d4:d2:66:58:84:37:ea:4b:5d:
         63:67:f5:23:c2:f2:8f:ba:81:81:25:fc:fc:67:91:56:05:90:
         41:c8:67:6f:52:f6:73:94:5f:66:a2:d1:91:84:14:c5:95:b8:
         e5:84:cb:d9:6c:26:2f:bf:eb:b1:34:2d:9e:d5:7b:5f:34:77:
         4d:d1:af:da:e6:d8:df:cd:eb:44:21:ab:5d:87:6e:e2:45:98:
         d1:fe:6b:db:f7:f7:f2:00:48:7d:0f:67:0f:a5:15:19:56:ad:
         d4:11:18:50:38:1d:c8:94:36:b0:6d:52:7d:3c:84:ed:04:52:
         2b:3d:de:d6:d9:50:85:8f:0d:0e:47:79:61:e2:c7:a4:61:15:
         70:b8:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----