Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
File:                     GZdiXDlfuGf12AjVNZehHOfzxMs.cer (raw, json)
Hash identifier:          Wi+5FC1YSmBDo0vcMh9G0CdFcQCSC5WcU1vwsm+t47U=
Subject key identifier:   19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252144BC43E2A7589A2A9C9E282FCBFB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61394
                          IP: 185.9.152.0/22
                          IP: 2a03:2fc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:44:bc:43:e2:a7:58:9a:2a:9c:9e:28:2f:cb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:5d:b6:26:c7:9f:76:25:32:cd:dd:2d:71:
                    82:65:c3:42:40:11:4d:15:72:ac:2e:c9:04:d8:42:
                    2f:35:ed:66:46:45:99:47:64:24:e8:b6:e3:f6:68:
                    00:45:24:b0:86:90:b3:27:d6:68:56:34:db:3d:18:
                    f7:e0:44:8f:fe:58:39:e8:32:af:41:b1:7b:d0:61:
                    9b:cf:92:85:9d:aa:41:16:c1:09:d4:e9:1a:b3:7c:
                    40:3d:eb:a3:25:98:d4:4a:ab:95:ec:1b:44:4d:69:
                    24:17:04:a7:28:11:b8:8c:8a:7f:0b:0c:05:a4:87:
                    35:86:f6:7e:1e:f2:d9:8e:75:6b:d0:99:e3:57:24:
                    06:e8:5c:63:42:ed:be:db:45:b4:57:81:cb:f8:eb:
                    99:c6:bc:82:54:a6:4d:8d:b0:88:56:1a:ba:a8:99:
                    a5:7f:6c:a0:38:df:45:94:4d:e1:8d:79:6e:fd:d7:
                    70:70:85:5d:7f:99:ef:71:57:dc:3f:94:8f:31:19:
                    8d:c2:a2:38:95:fb:b6:a7:9d:93:cd:1b:d9:d7:23:
                    5c:06:21:ad:b8:40:35:c4:a1:a5:8c:4e:85:61:43:
                    ef:4f:f2:db:ce:a6:e1:a9:a4:a0:08:03:54:c7:06:
                    28:57:09:f3:12:b2:dc:52:aa:85:16:f6:77:70:8a:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.152.0/22
                IPv6:
                  2a03:2fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61394

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:41:f4:e8:d3:7e:3f:ea:77:98:44:ea:aa:47:72:68:d2:
         a9:20:01:a0:63:c9:bb:a1:99:bc:2c:30:b2:4a:bf:44:cb:92:
         a2:54:92:a2:7e:9f:92:2c:9a:2f:ec:6a:cb:2b:94:be:e8:ff:
         08:55:15:cc:e3:d8:31:44:f2:c1:b6:7e:be:fe:a0:26:91:e4:
         71:b2:ba:aa:da:21:35:dd:fd:8c:b8:3f:59:6a:35:86:d5:87:
         82:22:72:43:d5:e3:76:33:b5:fb:70:31:d7:91:24:15:ee:10:
         a1:47:7d:4a:21:1f:30:83:e2:a7:1b:1b:b8:69:92:4f:b4:52:
         7f:91:53:8d:ba:61:a9:51:b7:60:09:86:a9:50:f0:52:c0:35:
         b6:62:72:74:8a:b5:ec:34:d1:c7:d1:3b:12:4b:b1:93:ff:5c:
         1d:1d:48:13:01:35:fb:6e:b9:20:a1:c2:21:8b:8d:05:76:f3:
         56:60:d3:cc:cb:db:a2:6f:0e:97:b0:fa:85:f0:b7:e5:e2:ec:
         df:9e:8f:3c:ee:c6:9a:eb:1a:b0:56:dd:cb:cd:f0:9b:05:c6:
         fe:79:68:18:50:9b:cf:60:a8:ae:7c:f4:f3:06:1f:0f:06:8e:
         29:4c:bc:88:cd:f7:64:9e:72:32:29:ca:87:61:2d:1b:8d:df:
         d1:22:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----