Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
File:                     K21-UZH4H_ChnxArFxirT54Oo6A.cer (raw, json)
Hash identifier:          RyyegHWA11IzV6lhCzB86PoLvAICTUtoqcy9xxzyTmg=
Subject key identifier:   2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA204A145482970C8CAA77C8D62AF2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 21416
                          AS: 199009
                          AS: 204582
                          IP: 45.144.44.0/22
                          IP: 2a0e:eac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:20:4a:14:54:82:97:0c:8c:aa:77:c8:d6:2a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:63:57:c0:32:5e:64:bc:9d:35:09:ce:59:
                    01:dc:77:5b:c6:ff:38:a4:f4:eb:1a:1f:e9:c2:9e:
                    8f:b6:9a:53:68:aa:3b:ce:19:8d:bd:aa:97:9b:e9:
                    46:c4:db:67:08:2d:30:bb:e7:2a:65:9e:43:82:da:
                    41:45:9b:9a:0f:4f:67:a4:ad:b9:64:97:b5:a9:1a:
                    c3:d8:20:dd:1d:aa:aa:23:9d:03:72:cf:c6:8d:30:
                    18:81:cf:be:02:76:38:9f:c3:2b:55:61:47:c7:ae:
                    0b:72:f8:d2:72:f9:df:85:d7:47:6e:7f:d5:50:6c:
                    54:c6:4f:67:b0:0b:30:9f:0a:c2:20:42:a8:bd:80:
                    28:92:29:34:d8:99:62:57:6c:7e:3b:64:e9:2b:af:
                    2d:b6:02:4c:45:3e:c1:bf:cb:fe:7f:cb:4b:ab:49:
                    3d:56:c3:b0:cb:f3:53:6d:ed:d5:0a:96:60:c5:e3:
                    9e:65:36:a5:c6:3a:e7:45:4b:f0:16:55:05:89:fa:
                    97:e8:78:18:41:b9:6e:ca:76:59:d7:b8:84:6d:0f:
                    71:38:3c:bd:f3:45:65:c0:b6:31:46:06:30:fa:f2:
                    61:56:54:f3:41:5c:fb:89:d6:c4:b4:92:c8:d3:21:
                    d8:cf:25:35:aa:e5:01:ae:fb:11:a9:b1:b1:dc:0d:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.44.0/22
                IPv6:
                  2a0e:eac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21416
                  199009
                  204582

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:0f:ae:45:6c:25:93:19:da:ae:b3:63:c7:2e:f1:b5:d4:
         62:02:4a:5e:03:e2:93:54:25:3c:f7:51:72:be:20:8e:30:bf:
         33:cb:f6:2f:fa:01:0a:7b:da:d8:6e:a9:1b:e5:77:91:d4:82:
         0c:44:43:9b:6b:cd:97:ee:7c:68:1c:4f:61:33:76:fd:64:78:
         49:66:f7:cf:02:73:fb:dd:92:64:7e:4c:96:bd:e9:2a:8f:b5:
         b2:db:50:02:af:2c:eb:42:10:fd:79:ac:e3:29:b5:f5:17:a3:
         8a:76:9e:ae:76:5a:c7:98:1f:71:6b:48:e0:a7:31:29:5c:77:
         16:a1:39:2c:05:0c:5f:f7:2b:a8:ca:d1:19:e8:95:ab:98:4a:
         49:cd:dc:36:e9:67:be:38:57:c4:18:c8:b5:a6:45:3a:51:92:
         5d:3b:e9:56:3c:d2:de:25:40:7d:48:4c:ce:29:fa:14:c7:ae:
         71:7d:2c:b1:3f:50:32:88:4f:32:13:63:b1:6d:1a:97:51:6d:
         1e:36:04:03:86:3c:f3:0d:72:ad:e1:e3:4f:ba:a0:2c:eb:f8:
         1b:ed:fd:c8:ab:33:1b:06:bc:7e:a7:6c:47:c1:bb:ea:0a:0e:
         0d:99:e8:6f:72:97:82:98:70:e0:54:c1:f9:a5:0d:22:ce:2c:
         02:44:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----