Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.cer (raw, json)
Hash identifier:          iKndAHLtlwa8LEx0OFS0Dg0b2MuCTNc6acBbOYCTCd4=
Subject key identifier:   10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445025A563577B124530E831F013FAC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.97.44.0/22
                          IP: 2a00:6880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:02:5a:56:35:77:b1:24:53:0e:83:1f:01:3f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:c5:1d:65:32:5f:2d:9a:77:a7:ac:62:50:
                    68:1a:c8:39:7d:78:c1:c9:99:fe:ac:ac:30:51:c7:
                    4c:0c:e4:13:6f:7f:64:ca:c6:1e:78:b6:d0:e0:9c:
                    67:89:de:74:67:70:46:cc:ba:c9:fc:54:18:38:41:
                    39:03:b7:d0:49:f8:2c:4d:85:fe:2e:99:f9:b0:e6:
                    6c:44:4b:c0:7d:97:99:7b:b1:42:64:38:66:3a:7c:
                    9a:b1:6a:25:67:3a:5d:6d:8e:e4:cc:f8:82:07:2a:
                    3a:67:b6:c6:52:a8:66:a8:b2:60:be:00:6f:b0:c8:
                    c1:e7:4d:af:83:0c:e4:11:3a:5d:2e:a7:f0:be:e6:
                    29:38:a7:3a:13:49:cb:58:c4:c0:12:24:72:5d:1e:
                    6e:5b:8b:28:43:c6:12:15:9e:df:bf:e9:b6:f0:c3:
                    66:2b:55:d2:ff:0d:f2:74:09:91:46:9c:87:12:89:
                    22:af:2b:c3:3e:71:7a:9e:b5:07:20:8b:f2:cc:b3:
                    6f:cf:98:e2:2c:16:62:54:6e:b1:f1:97:5f:30:0f:
                    bf:b6:db:a8:2c:a4:50:22:b2:76:d4:df:f8:e4:c8:
                    54:69:81:ee:51:a3:a8:ee:b0:af:17:f9:30:19:50:
                    43:cb:fa:14:99:92:ff:c0:98:1c:65:c8:8c:f4:1e:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.44.0/22
                IPv6:
                  2a00:6880::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:ed:42:20:00:ff:d5:71:ad:e1:62:46:08:59:90:ca:c1:
         9d:a2:03:6f:71:00:db:0a:80:82:29:4b:e6:f9:75:44:be:62:
         d5:17:cd:99:0e:ac:8f:77:37:e1:2c:3a:05:31:10:18:9c:5e:
         8f:77:64:4e:39:f1:c2:90:b5:6d:33:98:63:48:32:d5:43:6e:
         b8:76:eb:f2:48:73:b6:7d:f7:75:3f:5f:a3:d9:d2:d3:bb:1e:
         d3:02:d2:bb:a6:67:62:96:07:b9:17:34:72:e0:f3:5c:d8:2d:
         0b:63:19:60:87:1c:5a:18:dd:35:74:91:96:60:20:61:60:2b:
         c0:d1:38:20:5a:f3:e1:95:8d:08:c2:c5:52:10:a9:c9:6e:f5:
         fa:cd:6e:2a:a6:aa:2d:69:8d:0c:fa:6f:a9:3e:ad:d3:77:3a:
         5d:7a:0d:3e:69:da:8d:04:a5:25:1f:fa:62:bf:e0:85:d8:44:
         70:b2:68:a6:91:8c:83:d2:c5:c4:0c:fc:e1:3d:4b:77:7d:d9:
         06:e6:7f:4f:20:67:01:e6:a7:33:87:b5:79:a6:c7:a7:40:ab:
         c9:0d:ae:7c:a6:62:44:96:18:d8:7b:2a:d9:f5:e6:9d:f9:c8:
         4c:ac:98:e2:e8:3d:70:38:a1:8e:14:20:3a:64:af:fa:26:c6:
         a4:ba:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----