Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
File:                     2ilr0AMdba2mxzBzYI89EeRFzkQ.cer (raw, json)
Hash identifier:          LnaOfhXBSIfhPZvyQhKo43qTVAO5tPgcqs+V9dlKXA0=
Subject key identifier:   DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423697ECF61E9296B45BB6C846DE4703F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57536
                          IP: 91.232.190.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:7e:cf:61:e9:29:6b:45:bb:6c:84:6d:e4:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da296bd0031d6dada6c73073608f3d11e445ce44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:8d:bb:7f:bb:eb:99:fa:d6:88:ce:1e:4c:
                    d9:af:f1:a0:34:f0:41:6b:6f:95:91:90:78:f7:a6:
                    b6:d9:18:60:b9:93:c0:24:d3:be:89:f9:d1:af:91:
                    11:61:2b:6a:f3:31:61:44:8d:32:7a:8c:25:aa:8b:
                    f0:e8:31:77:43:bc:c1:f6:5c:08:8d:51:38:f7:1d:
                    fb:de:da:ce:2e:1e:7a:9c:90:b5:05:c2:f9:da:b4:
                    cb:e0:8d:72:90:53:a0:b2:87:a3:d5:cc:cb:62:11:
                    ca:15:ae:c1:08:7c:f3:98:93:2e:61:a3:f8:9c:b2:
                    59:d2:ba:71:cb:21:8b:95:be:48:7e:86:49:fe:19:
                    a9:56:dd:ad:71:c5:bc:ab:ca:85:58:95:7b:7c:04:
                    40:e4:7b:a7:9e:de:ce:d2:82:72:79:db:4b:5c:bc:
                    29:d6:37:2a:31:af:7d:d3:ff:ff:b4:65:ec:99:ec:
                    23:f1:f4:ac:05:32:d7:32:8b:1b:ba:6c:71:b9:7a:
                    73:fd:89:c9:3b:09:27:61:04:6c:71:4c:66:1b:ac:
                    dc:f8:0c:cc:b2:46:87:f7:0d:28:5c:36:96:35:9e:
                    8e:6b:71:4a:33:8d:1c:45:de:21:48:11:89:e1:14:
                    2a:81:91:10:1b:1f:8b:b7:59:99:60:7b:59:e9:69:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.190.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57536

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:b0:1a:1a:e4:ce:48:1c:ac:87:7f:42:22:5c:5e:84:2a:
         80:ee:93:da:db:9a:c8:f7:a4:32:20:bb:48:66:2d:19:4a:b2:
         5b:a4:2b:09:ce:d2:e8:35:8d:21:49:0a:eb:79:aa:77:dc:5e:
         24:bc:ca:22:8c:06:69:2b:dd:4d:d7:69:a1:6d:82:d3:07:74:
         bf:55:46:dd:a1:60:78:db:e2:a4:21:3c:c8:2a:74:de:4a:11:
         4b:6e:31:ff:25:5f:89:f0:af:b2:13:5d:f8:65:1f:d3:ea:26:
         c5:d3:ac:e4:d7:8e:d6:30:91:ec:bd:4f:ab:fd:d8:1e:d9:13:
         a7:5d:28:71:9f:4c:62:00:82:85:1d:3d:35:2e:78:fb:91:f5:
         10:59:82:30:7e:c4:1e:2d:74:43:cc:1c:94:36:f6:36:be:a5:
         ec:75:4e:9e:20:c0:ec:76:b8:cb:4f:e0:41:18:54:81:ba:9c:
         c4:76:69:d4:ff:8d:9d:b5:fc:5b:da:59:18:ce:47:8a:4d:5e:
         0f:18:09:67:86:10:bd:f0:65:df:bc:56:55:52:11:3e:e5:a2:
         95:c4:3c:7f:fe:d9:4d:98:d5:a5:7b:41:58:f0:05:59:0d:1e:
         fa:2b:31:dc:91:26:64:51:3f:9f:27:c7:8c:a8:b2:3d:28:fa:
         1d:c5:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----