Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
File:                     Pzb_0WIVIeks8ueBQZDTolPgBjc.cer (raw, json)
Hash identifier:          pVHYK4meBULL4EBs218nQCd+eLGI6OT3eHKkXuAYVA0=
Subject key identifier:   3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019428259BC516540A7DE743B8A2526BFC6F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215286
                          IP: 2001:678:110::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:9b:c5:16:54:0a:7d:e7:43:b8:a2:52:6b:fc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f36ffd1621521e92cf2e7814190d3a253e00637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:8c:37:20:1a:32:1c:f1:e7:f3:6a:4c:87:
                    76:f9:f9:ad:f8:01:ac:8b:4d:3a:a7:f4:8e:ac:e3:
                    07:b3:af:5d:9a:23:a1:c3:75:b1:41:27:37:46:5c:
                    d2:9f:10:ed:5b:bc:eb:4d:a6:89:7a:a3:8c:f0:e4:
                    e1:a7:a2:f1:73:8a:d8:1e:d1:99:90:04:44:14:8b:
                    14:bd:04:fb:04:94:62:7f:0a:59:39:54:03:d8:b8:
                    15:09:36:73:29:73:bb:52:e1:d3:e7:0d:1a:49:24:
                    8b:6f:c4:bb:95:fe:13:04:ba:44:04:2d:61:0a:a2:
                    82:46:f4:fb:68:bc:70:82:46:dd:43:14:e0:86:fd:
                    43:1f:7a:9d:5f:42:ed:30:c1:c7:a8:ff:d2:99:03:
                    29:ea:f0:eb:3d:58:08:25:6d:e3:d0:9e:52:4b:81:
                    6f:3e:b8:9f:2b:2b:2d:fc:aa:ff:5b:e2:9d:aa:04:
                    a9:bd:ee:cf:c1:f7:eb:b5:21:81:fe:cc:9f:5b:5e:
                    26:34:04:c5:22:cb:a5:64:69:81:ec:73:82:47:49:
                    03:b5:eb:83:42:04:a1:11:bd:4d:6b:dd:71:11:95:
                    ea:88:d0:8e:dc:7c:22:9a:37:68:15:69:37:c3:dd:
                    0e:c9:9e:6f:17:50:4d:0f:f9:07:2b:79:f1:31:3e:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:110::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215286

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:60:80:85:2e:02:b9:87:04:6b:74:57:c9:02:f1:8f:63:
         3d:5b:69:b7:de:64:0c:1e:cf:75:d6:f5:98:46:80:98:fe:3a:
         77:02:d1:e7:34:39:42:87:4b:77:fd:36:89:2f:3e:75:55:3a:
         38:16:50:e4:f1:2d:6f:74:60:ef:b3:d6:5e:45:ab:18:8d:d4:
         20:54:38:64:ba:e9:4e:02:b2:71:25:3f:79:43:d5:66:5c:54:
         c2:6f:26:df:73:67:62:1f:84:c0:af:68:88:b9:14:ad:3c:d7:
         2d:d8:d4:eb:c0:0c:34:ba:38:d0:ab:4c:cb:b9:fd:6c:6a:b9:
         a1:3e:b6:86:4f:c6:ed:99:43:7c:cb:4d:1c:05:97:df:37:5d:
         d8:c4:e1:a4:d1:cd:cf:50:7b:8b:43:3c:44:c9:74:76:9c:ab:
         b6:8f:05:19:d6:33:af:03:3b:c8:38:a7:5a:34:a5:5b:88:76:
         65:29:53:1c:be:b9:9d:e0:e4:1e:71:55:4e:b6:20:b3:e9:85:
         98:da:20:dc:9a:8b:77:34:03:61:1f:b4:6e:8a:94:ec:73:a7:
         be:9d:ee:95:4e:c9:cd:0c:e9:d1:78:9a:2e:39:a3:9f:12:95:
         a2:84:a5:37:1a:b9:82:df:4d:de:ef:13:95:b4:e2:23:cb:50:
         61:2c:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----