Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
File:                     CZ05RkE90RFhtGx99q02Kpk41dQ.cer (raw, json)
Hash identifier:          qnMc1bRGj5wd2HACFzjyVpcWuUexJfL22ZOHZIMqTIA=
Subject key identifier:   09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6CD10FD78E516E74DD37D4D87C608
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208777
                          IP: 45.84.84.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:cd:10:fd:78:e5:16:e7:4d:d3:7d:4d:87:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:a6:2b:b4:1e:3c:83:af:e4:90:7b:0a:da:
                    5b:f3:26:64:c1:24:f6:be:c2:32:84:d0:40:ed:56:
                    95:b6:d3:da:53:3d:60:f1:08:90:69:7a:68:7c:5d:
                    7b:73:d4:07:2e:fb:98:b6:00:f1:d0:12:99:29:98:
                    cb:26:fa:cc:85:0b:09:33:a0:b1:07:6d:b9:b8:31:
                    25:29:6c:b2:57:71:3c:84:8f:4d:01:a6:04:6f:fd:
                    ed:39:3a:8b:9c:c4:ca:ce:46:52:bd:86:17:26:a2:
                    1b:26:2e:cd:9a:16:c8:66:b8:d6:ef:2f:dd:fc:34:
                    b7:78:67:4b:f9:8d:ea:ed:9c:55:c3:57:05:d7:46:
                    9e:7d:67:bd:0e:8b:09:ed:15:69:cf:44:3b:de:b9:
                    d4:a5:87:d5:28:5b:f8:23:45:13:ba:0f:e9:30:32:
                    74:5a:6a:ec:12:89:82:12:17:dc:48:28:6e:2c:d3:
                    90:3b:f5:6d:e6:b2:6e:26:62:bc:98:08:bb:10:a1:
                    b6:72:18:58:41:af:be:52:33:e2:a9:98:9c:00:63:
                    7b:0b:16:cf:58:35:81:6b:3f:9a:a0:b0:ce:ae:55:
                    da:76:94:1f:7f:b2:6a:a3:48:cc:16:9a:b3:69:6c:
                    60:1b:09:96:31:ca:15:34:c0:f4:e4:9d:29:70:f6:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.84.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208777

    Signature Algorithm: sha256WithRSAEncryption
         11:26:56:d9:e8:76:e0:d4:4d:72:5a:f8:09:c3:0c:0c:bb:c3:
         01:2b:a3:02:04:ac:fd:60:c8:89:73:c0:52:f6:17:3b:18:55:
         40:00:98:3c:b6:c5:bc:c1:ab:22:86:56:e2:6a:25:d4:49:c4:
         88:53:fe:06:cd:7b:8c:43:a8:b0:e3:f4:1c:76:60:b8:ff:51:
         53:91:62:33:83:38:3c:58:55:bd:81:e7:53:2a:41:e6:c7:27:
         58:2d:f0:62:60:05:15:18:f3:d0:26:8e:95:66:59:21:77:cd:
         6e:2b:51:20:47:2c:01:4f:ed:c4:23:85:e2:b6:52:f8:55:ba:
         7e:04:1d:21:c5:3f:ba:04:d8:57:23:c3:87:ab:05:60:a2:89:
         2a:10:5f:b6:96:b6:22:ad:99:6a:ea:18:e5:aa:0f:5a:c8:2f:
         f6:50:36:dd:ca:52:7f:a2:dd:5d:2d:f9:80:92:df:f7:c9:a9:
         bb:b9:f0:5a:85:ca:ba:83:fb:80:fa:a1:e4:a7:a6:b0:2d:b6:
         f9:fe:f7:ed:1b:fe:f3:56:79:5d:5d:38:f5:58:ec:c6:c4:0a:
         06:9c:3f:2f:64:aa:9a:32:74:1d:1b:97:f0:10:a3:64:c9:9c:
         30:98:ce:38:5e:bc:e0:86:be:88:f4:c5:44:06:0f:4e:a9:0e:
         7d:16:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----