Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
File:                     5oS0UXk_YkGGF7yTT16CUT_Daok.cer (raw, json)
Hash identifier:          hxovhUucNhAt6L5zzB6WveI6JoSwXSO6FO0kofHCiMs=
Subject key identifier:   E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E35766B17FE52F85E6346DB8F1F1C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 204734
                          IP: 185.205.20.0/22
                          IP: 2a0c:1400::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:35:76:6b:17:fe:52:f8:5e:63:46:db:8f:1f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e684b451793f62418617bc934f5e82513fc36a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:00:0c:81:0c:9e:f6:fa:c6:40:27:83:46:
                    50:45:a8:94:01:1e:0d:43:ea:d5:e2:d3:8c:5a:c3:
                    6c:75:b4:d3:02:8b:65:4c:f6:33:f9:d8:21:35:b8:
                    a9:1b:d1:c4:9c:61:ba:2a:87:e5:81:fd:fe:05:22:
                    fd:07:36:08:63:44:66:73:de:c3:6d:f8:ee:16:60:
                    54:69:1e:93:a4:16:9e:8c:1f:b7:08:60:0a:7c:1e:
                    75:25:45:67:4e:41:e8:04:6b:05:72:32:9e:aa:2e:
                    2b:ee:b4:e9:05:82:7c:70:83:a6:d8:2b:db:2d:c9:
                    57:1b:85:9e:9b:c2:73:50:cc:01:b6:62:46:3c:0c:
                    7a:60:c8:18:76:d1:be:ff:b6:52:dd:9c:a1:02:66:
                    6f:1d:bf:59:28:ad:5b:d2:f4:22:f2:e6:d6:f6:13:
                    36:ec:39:ca:0b:26:4d:5b:0b:7f:53:e4:f8:01:95:
                    d6:ba:1f:f1:4b:07:61:5e:0c:56:ea:4d:9a:b7:2c:
                    12:7a:83:2f:05:b4:28:6e:48:f2:85:ad:f7:91:40:
                    4e:39:0a:aa:62:ee:f8:d5:98:6e:ba:c0:91:1e:6e:
                    47:75:3a:df:49:9e:b7:61:8a:04:c1:cf:eb:b9:be:
                    5a:c0:40:b3:e0:ab:a5:fb:6a:ae:31:5b:ad:8c:45:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.20.0/22
                IPv6:
                  2a0c:1400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204734

    Signature Algorithm: sha256WithRSAEncryption
         28:de:9e:cf:10:b2:fe:2c:6e:85:42:f5:28:b6:2a:25:fc:83:
         c8:b4:b7:cc:63:72:cb:25:6c:85:40:01:2a:46:c1:0b:d2:72:
         78:94:5b:73:83:35:ee:11:35:32:8f:f9:c0:e2:67:c9:d8:56:
         d2:48:fc:79:95:a2:16:cb:c4:4e:71:e3:64:bc:54:0f:a8:55:
         57:b1:2c:c4:c5:0f:48:96:96:10:d6:db:96:12:0f:6d:ef:59:
         fc:f9:86:d5:9e:f7:2d:57:f9:e7:99:f8:c6:74:ba:26:89:69:
         fe:34:c8:79:54:af:d8:84:54:2e:58:15:eb:82:7d:94:b4:20:
         69:18:29:3a:31:73:f1:4c:2e:02:9c:7f:34:f5:0a:e1:67:bd:
         a1:3e:77:db:24:51:09:d7:81:79:16:fa:0c:65:31:c8:48:2b:
         36:26:61:61:26:01:98:15:5f:5a:79:be:54:8b:fa:7a:f7:4e:
         a9:69:8b:63:cd:05:4e:64:48:8b:e3:2e:5a:88:67:78:8a:7c:
         ba:4e:e6:82:eb:ed:bd:8b:eb:79:47:33:85:07:66:d8:29:60:
         81:ea:55:d6:35:b0:95:24:61:fa:8d:49:b9:d1:b8:3c:2f:31:
         18:73:a3:0c:49:67:2d:8a:e4:4b:7d:5a:b8:b3:fb:b1:1f:46:
         a9:ea:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----