Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
File:                     Z5IEIPci99fzxLJagOF9cpAXEYA.cer (raw, json)
Hash identifier:          sUZCoy35OU3WBei6SkRcDoDDu7rqEHi2nMBp4w8cPqk=
Subject key identifier:   67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC009F0CC8183C2054E7A990013540
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201210
                          IP: 185.82.36.0/22
                          IP: 2001:4d70::/32
                          IP: 2a05:8cc0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:00:9f:0c:c8:18:3c:20:54:e7:a9:90:01:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67920420f722f7d7f3c4b25a80e17d7290171180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:c3:a2:06:75:d0:4f:b8:09:ce:da:dc:ec:
                    86:b7:7a:05:10:5d:b3:bc:97:a6:b1:65:ce:66:83:
                    68:9b:02:ff:b7:ec:df:a2:39:98:f8:e9:62:20:fc:
                    95:77:5f:5a:8e:ae:e7:2a:b9:23:0a:1a:ab:88:90:
                    c7:09:11:32:ae:fb:97:72:c1:c7:89:c2:48:74:c9:
                    b8:6f:c0:13:05:af:1a:50:e9:6d:79:94:a5:a5:65:
                    74:c7:90:b9:da:ae:19:a0:b8:db:61:25:61:cb:c1:
                    a4:4a:6f:08:ac:cf:f1:67:de:f2:32:14:65:be:8d:
                    51:f6:7e:ea:39:26:4a:c6:74:e7:48:9b:d9:3c:89:
                    51:1e:a4:48:11:48:ac:90:94:a7:24:2b:fa:2a:b3:
                    c4:4c:c0:16:24:f2:7c:03:e3:d3:44:46:81:d3:2d:
                    82:eb:fd:7b:a7:6f:08:18:73:47:74:84:04:36:4b:
                    0a:8e:52:37:27:58:8e:7b:74:91:51:fd:21:1d:06:
                    6c:ef:51:6e:40:2f:b6:85:24:9b:a9:65:91:5a:36:
                    b0:71:21:8d:d7:31:c3:8f:32:45:b2:87:b0:b2:fd:
                    a7:cb:19:b8:e2:3a:ab:2b:a0:17:7d:90:45:71:09:
                    6b:d4:a5:bd:ca:31:53:4d:7a:2a:81:b7:53:35:57:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.36.0/22
                IPv6:
                  2001:4d70::/32
                  2a05:8cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201210

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:fc:8b:4d:47:ec:d2:75:48:df:7a:65:27:69:ea:49:2b:
         27:a5:23:a2:48:2d:09:6a:df:60:21:b8:05:73:ea:28:60:c7:
         6a:62:15:5f:c7:12:20:c0:f9:47:16:0d:c5:d1:8d:cb:52:b6:
         9d:bc:fa:9c:06:2d:52:36:d1:38:f2:13:cf:46:d1:29:60:a8:
         b6:99:38:81:1d:1b:ae:32:bd:9b:a8:f9:31:b3:b3:ef:3b:b7:
         f1:d7:26:78:09:0b:2e:20:ad:bb:ab:95:23:05:04:0b:65:3e:
         35:77:2a:78:54:a9:f8:33:1c:89:dc:df:f7:ea:c9:72:5a:78:
         f1:f5:24:a3:b8:16:a1:4d:9a:e0:53:f2:03:28:53:50:d1:8e:
         4b:cb:c9:41:d6:30:98:2f:b9:c4:64:3f:bc:3f:58:8b:f6:52:
         30:56:0a:74:27:e4:4a:99:93:4d:a5:91:e6:73:80:49:a4:5f:
         95:53:89:f1:0c:ee:70:64:fe:83:f4:03:73:16:19:92:e7:49:
         1f:f8:f6:05:0c:68:7d:82:5e:83:cc:8e:1c:6f:b7:7c:1d:4c:
         40:24:f9:8f:3a:b8:21:3b:99:9c:b0:92:bb:33:7f:9b:0d:e2:
         85:f9:8d:ab:44:81:2a:ae:22:de:0f:7b:62:7c:86:d6:31:e1:
         cd:9e:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----