Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.cer (raw, json)
Hash identifier:          JThu2wjCXi/1vjOW006t011+jH+aIhriTDLRHU4b6qw=
Subject key identifier:   EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C3D51F019EA44703F8E70BDEAB7A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42320
                          IP: 77.72.112.0/21
                          IP: 2a02:a70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:3d:51:f0:19:ea:44:70:3f:8e:70:bd:ea:b7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:86:c3:64:8c:80:51:b9:c1:19:54:69:41:
                    e2:03:17:12:2f:6d:26:a8:84:4b:1e:fa:91:47:bf:
                    92:b9:62:2a:96:67:e0:c7:70:45:6d:6f:fd:90:29:
                    44:6e:c2:ee:78:f6:93:74:d9:d7:ca:83:00:d4:51:
                    3a:49:1c:88:b6:ba:ad:86:ff:5a:9f:fd:ff:1a:42:
                    1d:93:08:6b:9a:e6:4e:90:28:03:cc:2a:36:fa:54:
                    53:6f:37:d2:f9:04:b7:98:52:ab:07:8c:4a:8d:30:
                    7a:53:cf:c3:26:8d:ec:63:c2:17:f9:d6:77:ae:89:
                    33:9e:e2:32:59:79:a9:c8:0a:a8:4b:d7:45:2d:77:
                    12:22:5b:1b:76:0c:b8:9b:43:b2:47:21:ad:86:da:
                    60:c1:a5:d6:ad:27:c3:eb:e0:41:ab:18:8e:97:c1:
                    60:61:61:b2:c7:79:82:26:13:35:99:90:04:90:d7:
                    c2:9d:c2:2a:6c:d4:82:e0:21:df:95:c0:2e:f9:3c:
                    45:c6:9d:38:ae:1d:81:37:e2:fb:4a:4f:be:78:cb:
                    72:79:c0:a5:5b:85:e8:da:65:7d:38:28:b4:10:2b:
                    14:2d:d0:ed:22:d7:f5:e9:e8:2f:63:12:3b:a4:a7:
                    ed:f3:79:64:3f:8f:93:cd:38:98:41:ff:b8:7c:eb:
                    35:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.112.0/21
                IPv6:
                  2a02:a70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42320

    Signature Algorithm: sha256WithRSAEncryption
         23:31:70:18:04:d8:de:b5:dd:c1:d0:e9:f3:19:2c:50:7f:d1:
         7e:d3:e7:67:60:14:17:6d:7b:75:e9:10:b3:2f:b7:b8:6c:3f:
         be:6a:ce:b8:77:84:c1:05:7f:29:e8:35:1d:09:88:04:a9:e0:
         ee:36:3e:87:fa:0a:ad:93:17:2f:12:a7:23:1a:f6:c2:80:e7:
         72:24:31:2f:f7:41:47:77:df:2f:59:a9:08:26:41:0d:54:f2:
         f1:bc:46:8a:0e:66:d8:0f:d1:5a:82:1d:f1:6f:01:1b:86:21:
         9e:17:af:5d:91:a5:e8:c2:12:40:50:15:fa:5c:68:99:8b:c1:
         2d:61:9a:dd:65:2a:e6:b4:69:f7:ea:b7:34:de:69:a7:e9:e8:
         8b:61:bb:8c:f3:07:65:18:ba:09:78:4a:9b:0f:44:5b:fa:5b:
         7c:0c:84:f8:ae:50:98:9c:8f:cc:7f:95:e8:6e:d7:6e:d4:02:
         6a:b2:32:2b:20:a9:8e:6f:db:35:d9:a7:6f:c5:f9:67:81:ce:
         f4:9a:bb:95:bb:e7:b8:51:2a:7b:bb:ac:f7:1d:7e:0e:57:b5:
         b3:b9:fd:93:c5:29:14:65:4e:53:50:de:29:b4:b3:4d:37:66:
         27:f4:90:02:0d:4b:b6:10:ae:ca:55:73:3c:bc:4b:03:81:67:
         71:69:40:e0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQmbD1R8BnqRHA/jnC96remMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjAyOTQ0Nzk0NTkxODI0NTljMTVkOGNhMDEwYThhN2Y0N2Y4MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiiGw2SMgFG5wRlUaUHiAxcSL20m
qIRLHvqRR7+SuWIqlmfgx3BFbW/9kClEbsLuePaTdNnXyoMA1FE6SRyItrqthv9a
n/3/GkIdkwhrmuZOkCgDzCo2+lRTbzfS+QS3mFKrB4xKjTB6U8/DJo3sY8IX+dZ3
rokznuIyWXmpyAqoS9dFLXcSIlsbdgy4m0OyRyGthtpgwaXWrSfD6+BBqxiOl8Fg
YWGyx3mCJhM1mZAEkNfCncIqbNSC4CHflcAu+TxFxp04rh2BN+L7Sk++eMtyecCl
W4Xo2mV9OCi0ECsULdDtItf16egvYxI7pKft83lkP4+TzTiYQf+4fOs1TwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO8ClEeUWRgkWcFdjKAQqKf0f4DIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzViY2U0
Ni1jYzliLTQ4M2YtYjk0MC0wNDdiYTBlNjJkZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNWJjZTQ2
LWNjOWItNDgzZi1iOTQwLTA0N2JhMGU2MmRlNC8xLzd3S1VSNVJaR0NSWndWMk1v
QkNvcF9SX2dNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDTUhwMA0EAgACMAcDBQAqAgpwMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwClUDANBgkqhkiG9w0BAQsFAAOCAQEAIzFwGATY3rXd
wdDp8xksUH/RftPnZ2AUF217dekQsy+3uGw/vmrOuHeEwQV/Keg1HQmIBKng7jY+
h/oKrZMXLxKnIxr2woDnciQxL/dBR3ffL1mpCCZBDVTy8bxGig5m2A/RWoId8W8B
G4YhnhevXZGl6MISQFAV+lxomYvBLWGa3WUq5rRp9+q3NN5pp+noi2G7jPMHZRi6
CXhKmw9EW/pbfAyE+K5QmJyPzH+V6G7XbtQCarIyKyCpjm/bNdmnb8X5Z4HO9Jq7
lbvnuFEqe7us9x1+Dle1s7n9k8UpFGVOU1DeKbSzTTdmJ/SQAg1LthCuylVzPLxL
A4FncWlA4A==
-----END CERTIFICATE-----