Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
File:                     VZcyBKNpaAWG3if5RvyBZlYyqoM.cer (raw, json)
Hash identifier:          VXMoO2CoSX0rb0QSpzpn4VhgDmGPgCTzaZqZHLhW5bA=
Subject key identifier:   55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961F8259548025A7F8C50627A064F515D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Apr 2025 11:42:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56711
                          IP: 31.193.248.0/21
                          IP: 2a04:60c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:82:59:54:80:25:a7:f8:c5:06:27:a0:64:f5:15:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 10 11:42:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55973204a369680586de27f946fc81665632aa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4d:4e:3b:86:9b:ed:ac:e7:ec:65:9e:f3:01:
                    4e:e5:90:0b:70:79:ac:34:dd:a2:0d:ff:6a:76:de:
                    dc:a5:6f:2a:dd:c6:f4:f3:e7:85:23:70:ab:87:e9:
                    1c:60:50:7a:98:e0:c2:33:33:99:9b:3a:7d:9c:ac:
                    0e:61:bd:38:8e:d8:f1:28:73:86:02:60:ec:8d:20:
                    a0:ea:76:65:52:dd:53:85:80:9e:71:85:e2:e9:32:
                    59:4f:4a:91:08:1f:50:d9:53:6d:e3:4c:e9:42:98:
                    af:3b:dc:7b:c6:aa:d7:23:e9:78:af:e1:fe:6e:03:
                    a6:1f:f9:17:73:33:bb:dd:06:2c:50:4d:b9:b6:a5:
                    ef:96:d5:d6:81:b3:35:9b:0d:77:10:b8:df:8a:ad:
                    10:9e:99:e5:86:d7:e6:43:1b:fe:06:fc:ba:9a:2e:
                    8c:77:c0:af:f0:16:ac:9f:af:91:ea:73:cb:55:9d:
                    ff:d6:52:ad:78:e3:dd:52:2a:2f:62:1a:4b:bd:10:
                    4c:88:85:64:57:3b:e3:8f:8b:66:68:15:4e:d7:8e:
                    70:fb:59:77:e9:5e:c7:96:45:e8:44:91:be:90:9d:
                    46:44:4d:99:c1:26:f1:2d:79:04:a0:ae:65:fe:bd:
                    9d:45:4f:96:4f:e2:29:ce:50:3c:7d:0b:78:05:90:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.248.0/21
                IPv6:
                  2a04:60c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56711

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:e9:81:e9:d9:0b:62:5b:0a:56:3d:aa:5e:a6:40:f7:33:
         36:aa:de:36:c4:45:41:b6:40:71:b1:e0:ee:c9:9b:d3:d8:c9:
         3b:9a:e4:91:e1:9a:ff:93:0c:cb:b1:08:bc:75:7b:cd:17:4d:
         8b:3e:43:7c:e4:4d:05:99:ac:80:99:67:d0:23:46:b9:8a:2a:
         5d:ac:ed:eb:1f:66:95:a1:fa:af:5a:8e:63:7c:c1:97:56:91:
         f4:c1:bf:d6:c9:8f:2c:e0:e8:24:40:94:f7:3a:f3:8c:d0:cf:
         9f:a6:d6:9a:76:4a:e9:75:c3:26:76:24:0e:58:d2:79:20:22:
         58:f3:e1:b8:d4:c1:dc:1d:6e:30:3f:93:46:52:20:a7:60:61:
         68:09:eb:89:70:a0:03:fc:d9:7b:1b:8e:09:02:a9:c9:24:bb:
         e8:13:b3:cd:48:e9:d2:19:26:a1:83:c1:4d:6c:09:8e:1e:ee:
         21:bb:bf:cc:f7:4c:18:44:b3:53:ff:4e:a4:e8:3b:16:e5:1d:
         ee:49:23:40:a6:1b:70:a9:ff:81:16:c1:2d:8b:ca:0c:b3:ba:
         9a:44:c7:63:ee:2a:15:55:7b:24:ac:d4:81:3d:47:ef:6e:fa:
         ff:77:de:bb:f4:7b:72:e9:4c:94:49:2b:06:fa:7d:24:df:44:
         5e:36:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----