Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
File:                     EharzETJqVVAzfWx3FQux9Ef4Ho.cer (raw, json)
Hash identifier:          8HmtBWLy2v8EjCJXhFQd6sIvdu4G9cGJT2I1XvjjJGc=
Subject key identifier:   12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01962B487AF1B57843FA1F3D1871FF2DA2E4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 12 Apr 2025 18:34:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210000
                          IP: 31.41.34.0/24
                          IP: 2a12:3fc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:48:7a:f1:b5:78:43:fa:1f:3d:18:71:ff:2d:a2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 12 18:34:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:ae:fd:12:63:18:ac:7c:54:af:44:92:77:
                    b0:f0:19:99:e3:47:8e:a3:62:4c:ae:74:18:f1:df:
                    7c:22:90:1d:79:37:bd:b5:19:27:f4:35:4b:c4:ec:
                    d8:90:e8:f1:0e:eb:bc:61:20:b6:a5:62:b8:ae:18:
                    4e:32:35:6b:58:96:6f:f1:a7:36:94:2d:d3:2f:6d:
                    69:21:37:cd:bd:7b:48:66:5f:53:5d:da:8c:2f:d6:
                    f9:f7:17:0b:0f:ec:a9:22:b1:3a:55:a6:7e:d2:30:
                    d7:06:55:be:01:fa:7c:84:00:39:a2:63:f8:64:ab:
                    4c:68:38:ee:67:d5:50:f3:d2:87:f3:b8:3d:93:88:
                    50:b3:52:63:39:4a:e7:5f:05:8b:d2:7d:a8:b3:13:
                    b0:66:c6:ea:b8:7e:4a:4d:49:90:48:d4:e9:f1:b8:
                    f9:5a:75:c4:ea:ae:4f:f6:f6:ad:fa:94:76:42:42:
                    3f:41:b6:97:5f:67:44:ea:ab:2a:7d:8b:9e:33:96:
                    89:d0:74:08:1f:a8:03:6c:e7:c3:5e:12:07:c2:92:
                    7d:be:61:36:1d:bf:88:52:15:b1:09:12:87:d8:1c:
                    85:a7:c5:34:e0:22:77:44:16:da:33:6b:13:40:14:
                    a0:be:aa:01:0a:ba:c9:83:af:42:1c:e0:36:db:62:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.34.0/24
                IPv6:
                  2a12:3fc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210000

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:f0:cc:f6:dd:73:fd:18:73:65:04:e0:e2:87:1d:91:e0:
         7c:c5:07:78:d6:c0:97:d7:18:79:d4:e5:83:24:ff:2f:57:eb:
         69:47:ab:1d:c6:de:1f:85:54:cc:9b:4c:70:10:72:7e:83:91:
         45:52:a8:29:0b:b0:be:11:6f:f2:0a:2b:3f:1e:87:ee:95:1b:
         0f:cb:69:ee:e7:4f:bc:d6:dd:90:b0:4b:4f:a9:c0:d0:23:76:
         e1:67:e4:4a:be:f8:92:87:4e:ca:6b:1f:2f:eb:d9:f0:d4:de:
         8c:95:82:a3:e3:ad:40:01:17:cf:25:a8:f6:b9:63:bd:b8:a6:
         4e:7a:fb:f7:f2:da:32:93:c9:f8:20:f5:c2:e3:97:d6:ac:04:
         88:b5:c5:93:35:be:9c:64:55:43:17:39:8f:76:15:c3:e9:c9:
         1d:c9:55:6f:21:b7:1d:ae:d0:42:ba:e1:4f:cd:0f:82:31:f6:
         fe:70:d1:5c:bc:99:7f:8c:f5:06:10:26:eb:a0:5f:50:11:4b:
         cb:69:d2:77:2f:b1:a8:b9:dd:ce:83:60:08:1e:73:b8:5e:6b:
         59:c8:54:6c:33:71:49:81:4d:75:c6:68:52:b2:b5:be:da:e7:
         21:f0:f3:c3:2e:fc:4d:55:e0:f9:c7:28:ab:86:1b:fb:aa:4e:
         60:23:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----