Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
File:                     2ko-wHuXhY5oNKWh-I64_jG_eyA.cer (raw, json)
Hash identifier:          iHlTvaSefv88UQzdnXheHRTCTXnMubumkNjmHiZS6S8=
Subject key identifier:   DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DCC81679F5DF9BEDE2EC8B9560EAB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42838
                          IP: 77.87.16.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:cc:81:67:9f:5d:f9:be:de:2e:c8:b9:56:0e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:70:ee:12:e0:30:ac:68:a0:44:9f:5b:7a:
                    a7:2f:e5:e5:04:3a:b4:98:1d:80:05:af:c4:d0:b2:
                    c1:d9:32:ac:1e:d0:6b:34:e8:a7:f5:47:77:9f:42:
                    d1:c6:66:1b:b6:07:e1:53:45:8c:30:25:b3:9c:a9:
                    17:88:53:70:c6:e0:3d:e2:0c:d2:e6:f5:80:58:ab:
                    79:f1:e2:90:cd:7d:be:ce:b8:88:a4:de:d4:04:75:
                    bf:74:00:2a:13:22:9e:a0:4a:59:aa:8e:b9:78:5f:
                    0e:44:31:49:e5:f5:bc:35:8f:33:94:47:41:da:76:
                    0c:9c:8d:a4:16:3c:62:48:0c:cf:38:28:22:72:f6:
                    07:08:57:8a:09:b2:8e:ca:8e:6d:1c:a1:b0:1d:30:
                    2c:7a:29:02:a1:03:8d:bc:b3:58:3e:8e:90:17:6d:
                    e5:7d:99:93:b8:79:9d:32:b3:24:35:c3:c7:10:c2:
                    3b:82:7d:ff:a3:0b:1a:8f:e6:79:71:43:2e:14:5b:
                    15:0c:61:f9:eb:31:0e:ff:98:f2:49:ed:0b:fc:44:
                    e9:f0:41:1e:b4:ba:ac:7b:da:ba:ba:0f:50:85:c0:
                    eb:5e:e1:c7:19:68:bb:77:a2:56:61:2a:45:24:c4:
                    4b:5a:13:85:6b:ac:ea:0e:be:b1:7b:05:65:43:ae:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.16.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42838

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:73:36:2c:89:73:fd:6e:d8:fe:2f:7c:c4:f0:d5:e2:b7:
         84:ec:5d:79:a0:db:c3:58:27:be:9f:a0:59:8f:56:ef:29:03:
         02:78:dd:5f:90:e9:15:41:47:49:63:1e:f2:91:c5:f1:93:10:
         83:61:3c:7a:8c:f3:b3:b0:9f:11:96:b9:4b:f6:1b:45:55:80:
         80:f5:2b:a7:94:1e:ec:ce:b0:74:79:57:95:2e:fe:d2:20:4a:
         f8:7b:fe:ec:3e:b6:3b:9e:02:66:24:b2:ad:09:3c:38:82:7a:
         4c:83:ce:43:df:7b:9e:b0:74:f4:77:ed:a3:e0:7c:a7:eb:8d:
         ae:5b:e8:14:d4:7f:31:73:1b:5b:be:40:ef:a4:b1:d7:9b:58:
         75:ec:e2:19:de:a5:8a:59:ff:ad:ec:f5:81:6e:a0:05:13:ab:
         7b:16:e7:74:3a:7e:83:e9:bc:95:1d:7b:c9:ab:da:8d:05:69:
         98:28:b8:e1:70:c1:f4:8a:11:86:e6:11:39:f9:74:09:b1:0c:
         39:b2:51:6c:ff:32:5b:5e:3d:f9:6f:76:8a:2f:9e:bc:ef:df:
         5c:c0:06:bb:4b:04:78:f4:e1:68:e6:73:12:f5:7c:be:25:d4:
         75:0d:82:17:3c:2c:6f:72:21:f6:53:7f:b2:a7:c5:e2:4b:51:
         c7:c0:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----