Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
File:                     oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer (raw, json)
Hash identifier:          fkDybPM/mOJlgrDuKY8qSLgc3BzYKFfwK/2vc/f91HM=
Subject key identifier:   A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423695C12E4488FFBC2C06AF45D2F0E07
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39825
                          IP: 185.223.208.0/22
                          IP: 2a0c:5c00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:5c:12:e4:48:8f:fb:c2:c0:6a:f4:5d:2f:0e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a1208242656123c0c90b6168d09b2d8a67617bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:d3:3d:57:b3:9b:f2:3f:b2:aa:97:5d:cd:
                    47:3e:cd:b3:b7:1a:aa:2e:48:ce:c0:8b:a4:d9:48:
                    85:29:26:84:a7:bf:55:7f:ef:62:91:52:63:f5:bb:
                    cd:2d:7f:e0:ef:b9:46:22:9e:b5:6e:6c:c6:ae:9c:
                    f2:f4:6f:f3:4a:f4:36:f2:60:23:27:51:c9:56:70:
                    41:a2:b8:a2:3e:d9:6e:e4:93:48:3d:67:23:7c:ae:
                    4c:ed:a9:d3:fe:8c:63:f8:f1:62:ea:2e:4e:6b:f4:
                    4c:23:ee:9b:25:86:8d:a8:f9:fa:c8:b3:c9:8c:6b:
                    fa:cd:c0:b8:2f:63:ef:8d:1c:e6:22:22:82:f7:27:
                    b1:30:8b:3c:10:e0:7a:68:e6:85:32:e5:2f:f4:f7:
                    06:8e:bc:e5:48:75:76:f1:a8:0a:9f:d2:01:9d:33:
                    e9:bc:ed:6f:06:3e:33:bd:57:30:18:08:86:ed:76:
                    b6:41:18:cf:2d:2e:f5:52:03:6f:8a:6c:5b:c3:db:
                    53:f1:5d:6e:6f:7c:fb:01:cf:63:3c:f3:1d:53:bf:
                    a5:5a:40:3e:6d:ad:8f:ad:94:96:b8:63:c1:f4:35:
                    31:fa:ff:9d:7b:e2:db:bb:45:d3:c8:30:53:1d:e4:
                    5b:12:f2:bc:bf:b7:7e:82:94:62:4c:07:e3:f2:3e:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.208.0/22
                IPv6:
                  2a0c:5c00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39825

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:95:15:40:65:9d:01:1e:f1:31:07:02:5c:15:f4:d3:7b:
         39:f9:5f:aa:9f:ae:c0:dc:21:69:3e:a8:47:5a:22:07:a3:bc:
         e2:b6:fe:6c:3f:3d:a5:20:73:4c:9f:b6:d3:9b:5f:a9:b2:41:
         81:20:dd:bd:63:65:03:96:f8:89:47:74:17:2a:90:96:e2:73:
         3d:e4:5e:bd:ad:ae:94:c8:1e:59:f5:b7:a9:44:1a:8c:e7:29:
         54:04:3e:f5:f8:28:3b:3a:47:e5:d5:8e:24:1b:f6:fb:1c:81:
         3d:8f:5a:4f:c0:df:42:85:c6:6b:f7:89:71:83:90:75:b5:e7:
         dc:28:37:fe:4e:80:ea:8b:25:24:3b:45:16:5f:bc:29:ac:3b:
         ac:b8:82:c1:b7:e4:74:b2:e8:01:f5:3f:20:84:83:25:eb:d9:
         bb:46:93:d7:7d:20:ff:5a:8f:e0:3b:19:8a:c2:0e:11:86:b1:
         f3:de:5f:f2:7a:94:24:26:2f:d0:a0:45:57:19:dd:2b:1c:6e:
         7a:31:19:05:3f:f6:3f:ad:07:a4:b6:de:3b:10:39:49:9f:d5:
         f0:5e:74:6b:1e:f0:1d:13:c1:b4:b4:fd:23:92:1d:8a:1c:89:
         11:01:ef:da:79:b0:01:2a:1c:fc:08:46:a4:f9:d6:22:36:2d:
         70:83:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----