Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
File:                     NztHo87nmYKtsXA0HQICYCczICM.cer (raw, json)
Hash identifier:          wqCRxdjKoofwF4o6cEOHktz3ObEOQIMrWA7l9Q4k4p8=
Subject key identifier:   37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067CD5A8BB50F0C3AF80A77893EAEC8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59503
                          AS: 61167
                          AS: 200568
                          IP: 5.159.16.0/21
                          IP: 2a03:45e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:cd:5a:8b:b5:0f:0c:3a:f8:0a:77:89:3e:ae:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=373b47a3cee79982adb170341d02026027332023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:2c:c8:39:db:4d:a8:bc:69:bb:b3:39:b1:
                    03:b0:02:c5:69:12:05:ab:85:33:61:c7:a9:7e:04:
                    79:50:bf:4a:59:17:f1:0a:d6:65:e5:8f:5e:e1:3a:
                    78:de:b2:59:10:a8:6f:e0:06:82:13:ab:1c:21:62:
                    6b:b8:ce:9d:d3:b2:4b:70:21:b3:4e:20:0d:d4:f1:
                    5c:35:53:48:69:0e:19:49:c3:f9:b1:fd:27:ad:55:
                    1f:77:7d:77:5a:67:7d:d5:fd:ec:d8:6b:e7:10:bc:
                    a5:90:38:71:0f:be:9f:4f:de:36:58:75:dd:67:37:
                    18:4c:6f:e5:02:ad:f1:63:e3:49:f2:77:f7:8c:d2:
                    a6:5b:5b:bf:c5:d8:8d:35:d5:28:ae:3e:ff:57:4c:
                    81:8c:d7:69:3f:ed:7c:41:0d:46:e1:2a:2d:8f:30:
                    1c:15:43:3d:c5:73:85:42:ed:35:c8:91:86:e2:4e:
                    b9:36:f3:38:06:c0:29:05:94:78:49:f1:54:4c:90:
                    53:47:a3:f8:31:c7:65:5f:6a:7f:fa:a5:72:a6:a4:
                    43:46:7c:60:2e:52:97:bd:d7:84:53:23:2d:d8:70:
                    12:50:c6:75:d5:e3:bd:a1:92:da:e1:64:ba:e2:f3:
                    b6:ec:5b:ec:52:6b:75:71:49:0a:5c:49:db:31:36:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.159.16.0/21
                IPv6:
                  2a03:45e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59503
                  61167
                  200568

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:28:56:36:c7:d8:2b:6d:e5:d4:41:44:f8:52:08:3a:50:
         4e:07:f5:f5:b6:32:04:b9:3c:da:73:ba:eb:52:92:2a:dd:03:
         bc:36:d8:56:04:e8:0d:75:54:b7:76:59:5f:60:5a:04:a2:eb:
         30:7e:7a:7d:57:82:16:3f:e9:4d:f3:45:cb:c2:75:90:95:bd:
         7a:a5:6d:d9:c6:77:49:de:ee:4d:e0:f0:39:cb:65:32:4a:27:
         40:3f:05:bb:ad:e1:a1:a4:ec:9f:8d:42:d7:57:1d:16:15:4e:
         95:b8:f3:5b:4c:e7:9a:3c:6d:04:65:25:24:aa:ee:bf:1e:50:
         6e:b8:42:d1:c2:18:fd:9e:5b:c4:2e:07:df:5b:3d:79:59:db:
         eb:39:dd:d1:dc:85:77:ec:fb:c2:f6:82:47:98:ca:72:91:fc:
         4a:59:8f:ea:4d:e3:70:90:88:c2:6f:4a:63:55:54:e6:c2:11:
         bb:ad:12:42:9c:1d:31:ba:03:ad:b4:28:30:77:01:14:b1:21:
         9d:08:35:48:3a:65:e0:88:22:b7:c5:18:e4:63:51:20:9e:78:
         7c:ff:c1:c9:cd:4f:fa:f6:cd:f6:00:c7:80:6e:eb:4b:67:84:
         37:a2:ef:a7:1b:dc:7a:c4:ec:49:34:82:d5:34:fe:68:07:bb:
         d3:0c:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----