Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
File:                     o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer (raw, json)
Hash identifier:          Jqiqic0Bbs90ZE6RjEB+D2oN8AyRrrF64mc7hKJm1ZQ=
Subject key identifier:   A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC2DADBEAFE29BAF7D6AE6CDE28670DFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:29:32 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 60850
                          IP: 185.0.26.0/24
                          IP: 2001:7f8:146::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:db:ea:fe:29:ba:f7:d6:ae:6c:de:28:67:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:79:82:7e:b1:df:65:cd:c6:a9:f3:ad:e4:
                    5e:d2:97:1d:c4:71:ee:c4:85:8a:43:f2:59:9d:ad:
                    fd:df:f5:8d:dc:b0:a2:aa:35:1c:86:24:44:13:52:
                    21:13:da:3e:79:e4:86:51:98:a2:6a:75:3f:dd:a0:
                    7d:d5:97:0c:4c:75:bc:f2:04:71:a8:f1:14:b7:eb:
                    e0:e2:03:42:88:7c:30:81:6c:1f:eb:db:35:3d:41:
                    cb:e6:51:c8:5a:1d:5a:6d:57:fb:fd:2c:6e:08:3f:
                    8c:01:83:08:e5:5b:6b:83:4d:bf:51:39:f8:16:a2:
                    ce:45:5f:e6:40:4a:96:9b:93:82:16:5e:9a:8e:b6:
                    6f:78:9b:d2:d3:5f:52:66:45:cf:ed:c7:45:86:2a:
                    57:5d:b4:cf:a9:14:c0:13:a3:0d:a2:37:33:31:4b:
                    f5:c7:92:ee:fa:ac:28:a3:d7:17:58:1e:7d:ac:c9:
                    2b:a1:1b:e9:9f:e6:54:75:e4:53:41:61:a9:db:a8:
                    07:67:d7:8a:3d:4a:43:f1:be:23:43:93:21:67:14:
                    64:83:cc:a4:bb:97:19:95:81:ae:d3:2d:97:86:e1:
                    39:97:26:b6:27:c3:b6:5f:62:f5:2b:fa:56:15:12:
                    82:06:86:c2:5f:41:92:dc:22:37:b1:c9:11:53:70:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.26.0/24
                IPv6:
                  2001:7f8:146::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60850

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:53:63:fe:e4:7c:2d:58:4b:ef:f4:54:a3:58:b1:f7:93:
         14:d4:b1:d7:98:8f:1d:9f:f0:43:b0:8e:2c:2a:85:d7:c8:e9:
         ee:e5:2a:ab:b1:85:59:bd:db:05:b6:df:b3:a8:4a:81:ef:2b:
         8c:0b:cf:8f:03:31:45:31:ac:10:43:7d:19:31:bd:d5:8c:c7:
         5d:6e:16:d1:32:bb:92:de:c0:1f:f2:d3:ca:66:cd:bd:13:19:
         89:11:59:2c:72:bf:92:0e:5a:99:08:4a:6e:ee:dc:51:8f:9b:
         e1:7d:64:e2:8a:00:56:c4:3b:5d:43:26:8b:09:d1:73:e5:32:
         31:93:ee:50:80:d8:ee:ea:c3:74:ae:0c:27:ea:5a:5d:da:bf:
         6f:c4:4a:c8:d0:65:31:bd:ef:34:f2:2a:0d:b4:32:e0:d0:51:
         29:39:f0:90:76:34:2b:c4:f4:4c:6d:f1:f5:8d:a1:8c:8d:67:
         d8:58:1c:f2:3e:e2:58:e5:0f:d3:6b:5c:8a:f3:68:5f:1b:4f:
         53:23:3c:35:40:24:99:19:d6:9d:aa:ba:ec:79:50:59:76:01:
         cb:d9:6f:8c:f1:ad:a7:ed:aa:52:e1:0c:99:b5:89:f8:e5:ba:
         9e:ce:4d:f8:2f:f7:45:b2:df:74:b0:41:be:05:9d:4f:26:25:
         7a:87:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----