Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
File:                     IHeZAnMp8iaCdkVzryEV2pWp9r8.cer (raw, json)
Hash identifier:          0YhjALhkWzR9zlU0D5jza+8WMDdJrHnA8IXDCrliaUI=
Subject key identifier:   20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01955C01727F69F294D995668E5DEBC5DE1B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 12:35:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210945
                          IP: 2001:67c:808::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5c:01:72:7f:69:f2:94:d9:95:66:8e:5d:eb:c5:de:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar  3 12:35:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=207799027329f22682764573af2115da95a9f6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:cb:2a:dc:1b:ff:19:15:ed:22:5b:52:72:
                    21:f2:3e:f7:a1:3b:8a:e0:e6:d6:85:ef:5e:51:c8:
                    d7:c6:1a:a1:fa:88:1a:ff:f2:d9:25:96:3e:22:82:
                    26:af:ef:07:83:c3:69:7a:07:ba:7a:83:8f:5c:47:
                    b4:4e:ca:bb:30:6a:57:e1:3c:dd:40:8b:98:ca:17:
                    b7:2e:6c:dd:88:1c:ce:b1:5a:ae:74:90:e2:97:56:
                    58:63:e3:17:bb:af:6f:ca:d3:f1:77:c6:a1:a9:4a:
                    5c:84:3a:9a:eb:0f:1e:09:27:1e:70:eb:dc:77:bf:
                    33:ce:4b:bd:e1:8d:dd:2e:2e:99:8f:df:dc:9a:5f:
                    d5:2a:db:fb:ff:77:a6:0e:d0:a2:6f:8a:aa:23:1c:
                    12:b4:39:f1:35:b1:37:5e:44:99:03:71:ed:64:e1:
                    85:da:ae:1a:b2:87:6e:b7:f4:4f:9c:15:11:84:ff:
                    58:4d:56:a9:b1:e8:1d:9a:2e:bc:27:8f:94:7b:9b:
                    8f:1c:95:5f:0c:1b:22:52:83:0b:21:26:29:44:49:
                    30:cb:dd:4b:7f:6c:53:24:08:56:2a:7a:03:e9:cc:
                    92:58:c4:0e:8a:d0:f1:81:f2:e3:80:6b:01:ec:24:
                    ce:65:3d:c6:ea:36:0d:13:aa:7a:c6:e2:02:9b:b7:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:808::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210945

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:1a:91:f9:0e:6a:aa:be:cc:e5:40:9a:0d:85:35:f6:4c:
         72:f4:44:d6:79:31:f1:a0:5a:84:33:8c:52:16:02:9f:f0:39:
         c5:d6:e7:ba:57:d3:9b:ee:78:da:36:18:de:76:ce:58:57:2f:
         f0:71:ba:5a:44:0b:e2:c6:46:9e:70:dd:5c:5c:6f:c8:01:89:
         c6:31:e0:04:ef:db:c5:af:9c:04:cc:da:6b:cd:0e:9d:88:a6:
         72:80:7f:de:e5:d2:22:e7:c6:b9:23:6d:d7:e2:f3:77:83:11:
         a4:1e:cf:11:a9:a9:c4:c3:d7:a2:2d:fc:a8:46:cc:7f:ec:73:
         bc:6b:c6:ae:3b:92:24:d2:5f:70:16:39:9d:12:d0:9b:bb:18:
         7e:a7:cb:1d:1c:8c:ae:4d:fc:94:a0:57:44:10:91:02:34:c0:
         ab:97:9a:54:cc:ce:79:b4:40:e4:b9:63:a6:91:20:6a:d3:f0:
         f9:ca:c7:fd:30:8e:77:d7:11:42:69:04:fd:5e:9a:14:78:9e:
         24:8c:e3:b9:ea:8e:98:52:60:d2:ef:7f:e7:2c:38:d0:7b:0c:
         dc:25:47:f7:5f:45:56:bc:fb:1c:c3:f9:49:99:46:f1:44:e4:
         55:ff:d6:42:7d:63:89:c5:e2:a5:7f:6b:33:f0:e8:72:ca:0a:
         8a:9b:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----