Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
File:                     F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer (raw, json)
Hash identifier:          Y7+UgNGFq98Bj2l6R0i6OfLaNY3flADt9v+RuVuVcNI=
Subject key identifier:   17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D6369526316DF205BD1A8358571783
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41790
                          IP: 195.8.220.0/23
                          IP: 2001:67c:2374::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:36:95:26:31:6d:f2:05:bd:1a:83:58:57:17:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:95:2a:c6:d8:d2:28:b9:1d:27:e2:c7:45:
                    35:4c:32:36:0a:c2:21:da:5f:fb:51:e8:d6:20:9b:
                    0b:ef:c7:b9:15:8b:57:e4:e7:b6:22:6f:cb:c7:22:
                    27:3c:80:82:b7:31:a6:40:76:3d:40:2d:68:48:f6:
                    73:aa:4b:0d:33:01:e5:96:eb:e2:a8:21:7b:ab:78:
                    3f:ba:7c:c6:2a:5e:fa:08:5a:b8:76:d7:03:e8:e8:
                    df:61:e3:f1:cd:7a:24:fb:0b:0f:a7:ad:83:b7:fc:
                    4c:88:91:68:93:d7:a6:aa:a5:b4:11:cc:50:f6:ed:
                    d5:0b:ce:09:20:b5:ab:ef:48:1f:39:96:60:0e:33:
                    82:8b:b6:fc:0f:26:2e:cc:08:45:32:c3:72:7e:f6:
                    a0:60:07:ca:e6:7a:d2:81:c6:c2:f7:da:89:1f:b0:
                    e8:80:6d:52:2e:61:75:44:0c:b0:e9:b6:b4:d0:21:
                    82:d0:34:54:69:23:b5:43:30:96:44:bc:87:37:50:
                    29:12:3f:18:60:44:bb:9b:6b:a0:83:f8:76:c7:05:
                    60:ef:e6:39:82:47:b7:c4:6e:48:bf:ae:cd:64:73:
                    92:ae:ff:6e:91:66:f6:5d:16:97:da:43:eb:5a:b8:
                    6f:ff:f9:63:b0:6c:ee:00:e0:d9:1d:5b:42:19:ae:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.220.0/23
                IPv6:
                  2001:67c:2374::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41790

    Signature Algorithm: sha256WithRSAEncryption
         01:99:c4:de:75:e3:26:9b:86:4d:9d:7a:15:6d:5d:c9:ac:a2:
         fb:9e:b7:fb:aa:a4:73:fc:cb:20:9f:40:fb:27:4b:bb:c5:6a:
         cc:cc:e7:b3:9c:86:dc:e2:59:96:9d:8e:2f:eb:4d:32:9e:f2:
         a3:49:21:5a:d0:25:d5:9d:c3:b0:c3:14:54:9c:3c:13:9f:80:
         a3:a7:8f:f0:fc:97:ea:60:90:ab:d2:63:22:75:3d:b4:65:61:
         5a:de:c0:13:32:20:07:3b:d7:bb:7a:9e:8e:04:80:02:d6:b8:
         16:d6:35:31:82:78:ae:16:f9:13:10:d3:cf:76:bb:8a:c2:0f:
         48:93:e1:a2:90:83:0b:6b:86:fc:25:c0:f6:e8:7a:a9:e3:1f:
         7d:31:b1:19:48:48:54:93:59:c7:e8:6f:be:45:b9:03:78:2a:
         23:57:43:7b:c1:88:ac:d0:23:6d:cc:6c:1c:2f:72:ea:8d:2c:
         d0:8e:94:c8:ee:d4:8f:e2:19:19:32:1a:61:11:23:2c:ae:d8:
         b7:f9:fb:39:14:f4:10:6d:d9:30:91:d8:53:40:16:e1:12:63:
         76:6b:1d:62:96:7c:cb:5a:3f:cd:f4:86:9d:32:9d:cc:0b:d8:
         55:8a:25:0e:65:27:91:66:c9:91:58:1f:44:43:7a:a7:0a:be:
         11:6d:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----