Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
File:                     2gKPaUMDSrdg84rkIJFU4iVciek.cer (raw, json)
Hash identifier:          URdVEXb69+Udstt7NN5C8yxIU6jRooezCSr+m23nXSY=
Subject key identifier:   DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194B21C1BA889D0AF70188B294D27D10EE2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 29 Jan 2025 12:49:34 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216217
                          IP: 176.10.94.0/24
                          IP: 2a13:f240::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b2:1c:1b:a8:89:d0:af:70:18:8b:29:4d:27:d1:0e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 29 12:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da028f6943034ab760f38ae4209154e2255c89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2b:57:b5:80:44:d1:bc:ad:ee:ba:d7:81:2d:
                    0d:e0:57:9d:27:8c:69:6d:b2:20:dd:9f:61:90:c7:
                    c7:6b:27:12:50:27:7e:45:8e:9c:9e:d8:3f:71:f6:
                    ab:86:81:f4:da:bd:70:85:e8:f0:40:19:55:7b:30:
                    d8:ed:2f:49:fd:c9:3a:3d:75:c9:75:0d:6a:e6:62:
                    2b:c3:37:a7:e0:15:f2:ee:fc:df:b8:8b:dc:a5:b0:
                    e6:f3:ee:6a:2d:fd:bc:b8:95:6a:10:8e:eb:08:5a:
                    8c:10:23:51:ca:03:47:1d:ac:92:c8:43:d1:d0:6f:
                    e2:8d:4f:f6:bd:4d:c4:0f:9e:ba:e2:94:79:0e:86:
                    94:41:c0:a2:b0:19:38:1e:aa:a6:95:cd:9d:fd:5a:
                    7e:b7:8a:99:e8:95:c1:be:1e:ee:98:77:54:da:be:
                    b1:cf:bb:f0:28:53:a5:84:0e:af:d9:a7:b9:70:35:
                    7a:40:a5:2b:23:e3:4b:8b:35:64:50:a2:5c:33:61:
                    e2:47:5b:81:ca:b2:98:1a:60:6d:84:a4:ae:24:99:
                    1f:f2:64:04:f2:21:2f:28:5e:a3:4e:ea:fe:9b:c4:
                    d0:ce:64:19:d5:63:bf:c3:fa:97:6b:7c:45:20:65:
                    e8:c2:92:79:75:10:ff:88:8c:e7:35:fc:84:88:19:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.10.94.0/24
                IPv6:
                  2a13:f240::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216217

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:27:6e:ba:d7:a9:22:b1:1a:b0:a3:59:39:ff:0b:ef:a6:
         fa:3e:6b:03:4d:46:79:42:fa:da:85:9a:b6:ab:1f:15:c1:c2:
         ee:01:e1:bf:cb:da:1c:4f:a8:b1:19:b0:dd:24:95:44:22:50:
         ca:0a:ee:90:ef:73:eb:32:05:6e:9d:93:24:8f:1c:50:c2:9a:
         93:f9:e4:f7:5c:ee:42:1b:a6:7d:68:de:90:1a:78:ef:02:0c:
         24:5f:91:40:7e:82:a0:5b:72:f8:30:13:7f:0e:be:8d:4f:58:
         9a:0b:f9:d6:b5:cd:35:9c:3a:17:57:dc:bf:b8:1a:f5:94:ea:
         41:60:fd:85:b7:13:6b:41:76:6a:38:b0:60:a1:0f:aa:88:7d:
         71:88:5b:8a:ce:3b:e3:bc:ac:bb:22:86:12:8b:72:80:cc:a3:
         e5:6e:f6:12:c1:57:27:99:c0:b9:db:2e:c6:f2:3e:27:82:2a:
         25:82:db:49:bb:40:16:2d:ba:15:9b:57:66:0b:7d:97:20:63:
         eb:b4:2c:a6:0a:c1:92:cb:63:a1:08:7c:9f:3d:ab:ac:42:05:
         b1:87:dc:ad:77:4b:12:f4:12:a9:11:78:5c:1c:3f:0e:26:81:
         7a:6f:d1:c9:58:28:94:4d:57:7d:e5:5f:17:7b:be:5f:03:95:
         a8:7f:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----