Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer (raw, json)
Hash identifier:          Ca0Akddesu9OH1/qIPm71rZitl2OYWWJGcXTaW8z0AM=
Subject key identifier:   1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D70DF85D1A9BA1EFAE7B5F97E9FC71
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:03 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21230
                          AS: 199001
                          IP: 84.43.128.0/17
                          IP: 185.221.32.0/22
                          IP: 193.110.216.0/21
                          IP: 2a00:82a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:0d:f8:5d:1a:9b:a1:ef:ae:7b:5f:97:e9:fc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:0c:15:6c:0a:ad:ee:bd:aa:28:cb:5b:bf:
                    6c:51:aa:73:db:94:da:3b:8e:24:2f:a8:12:60:33:
                    2f:a3:bf:b8:d1:55:a7:bd:b9:a9:af:3d:75:09:de:
                    c0:a0:10:87:38:31:cf:c8:3d:62:6f:9e:8f:ac:a4:
                    7c:03:f1:9d:49:54:11:f8:5e:e5:7d:c3:bc:7a:90:
                    9a:ba:4c:23:e4:16:43:d1:49:54:c8:de:65:45:7a:
                    43:3a:2b:26:b8:37:9e:d9:ad:15:bf:8b:ff:f7:43:
                    99:20:76:29:a2:5f:6b:80:67:1f:b6:fc:22:53:bf:
                    0c:32:eb:e7:35:70:11:49:03:ec:50:4f:73:71:ad:
                    9f:7b:f1:75:f9:85:c3:4a:d4:bb:81:aa:e3:95:98:
                    11:74:c7:f5:1c:33:48:e6:8b:48:d6:ed:06:a0:98:
                    a7:b3:e5:56:26:03:13:56:5f:de:8b:a7:cb:75:44:
                    56:04:be:87:5e:3a:9a:38:db:5c:8d:04:36:6f:12:
                    aa:bc:9f:ce:86:4c:2b:90:b1:83:cd:4c:2b:35:64:
                    27:65:d1:08:e8:1a:48:48:f0:51:6e:45:ec:22:9a:
                    c0:50:55:8d:4c:82:21:26:7b:06:c8:af:ef:ba:46:
                    74:86:0d:a8:ed:11:f6:d4:4d:fe:bb:13:e4:b7:b6:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.43.128.0/17
                  185.221.32.0/22
                  193.110.216.0/21
                IPv6:
                  2a00:82a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21230
                  199001

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:e7:66:7d:ce:b9:94:85:42:95:22:66:f2:11:8a:2e:af:
         86:4d:9e:a8:17:13:e9:ab:c1:95:6b:5b:eb:ea:34:58:c6:97:
         da:99:05:88:ff:eb:27:06:53:70:78:4e:9c:a5:64:45:a2:3d:
         11:c5:11:2f:14:69:d6:75:57:bf:4d:ca:d4:f6:13:08:2c:ce:
         47:90:dc:88:77:01:79:55:7c:d9:2e:90:f5:2b:e8:70:4d:79:
         c2:34:10:96:33:68:20:d7:77:82:cb:38:ab:b3:aa:e5:cd:49:
         24:db:3f:68:30:28:91:9b:aa:1e:15:f4:aa:30:d3:d1:ad:2a:
         cb:9c:1b:04:b3:8d:c0:c1:93:64:97:55:2c:3a:0d:93:13:83:
         e6:eb:7a:51:9b:d9:03:6a:9e:68:03:11:80:7e:57:85:f1:5a:
         44:ab:48:65:0b:1e:f1:82:15:c1:ae:26:20:85:b9:cd:0b:55:
         43:db:75:53:9c:57:e3:74:05:f5:26:4b:8b:03:6d:51:d3:d8:
         e6:5d:79:cd:ad:0a:bd:4d:a3:29:2f:3c:df:ab:42:51:5c:e4:
         ec:f7:c5:7a:91:40:b1:40:d5:83:3c:41:45:de:20:c2:87:5d:
         71:8f:f2:b9:c5:c1:65:d3:9f:32:68:64:7e:af:09:d3:f5:3c:
         28:1e:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----