Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
File:                     Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer (raw, json)
Hash identifier:          BJnNShS9pVfJizs8bkV4FJJ0SFU66GuhOg1dG89SmXg=
Subject key identifier:   67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F4452622113AE401FED44AA9A4E57
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196904
                          AS: 199926
                          AS: 203335
                          IP: 178.170.238.0 -- 178.170.241.255
                          IP: 185.16.192.0/22
                          IP: 193.105.57.0/24
                          IP: 2a03:dc40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:44:52:62:21:13:ae:40:1f:ed:44:aa:9a:4e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:46:d7:8d:d6:f3:13:e2:99:ff:45:04:44:
                    ca:3c:76:12:95:c3:8b:d6:f0:17:8f:5a:52:f6:3c:
                    03:74:fb:ad:c9:6f:65:c8:41:ea:57:11:2d:da:2c:
                    f3:17:7d:34:f3:cf:08:1a:44:e9:72:cf:2d:7e:4a:
                    31:b4:85:76:0e:f9:74:f7:46:a5:2e:3a:10:ec:df:
                    b6:6f:4c:17:5b:86:df:97:ae:e5:36:87:eb:13:b8:
                    ff:4d:8d:51:9d:f7:32:fa:f2:d5:07:f4:ed:45:39:
                    31:e7:76:03:b3:b9:75:58:8c:07:ff:a2:36:bd:3f:
                    88:45:06:c3:63:30:58:57:42:65:1b:c6:5e:e4:97:
                    db:c2:11:03:1c:2e:0e:14:28:c0:72:40:b3:35:7d:
                    2d:9f:da:a4:9a:e7:01:cb:ca:5c:e8:b0:b8:7a:2e:
                    dc:b9:c2:e7:c4:ba:9a:d0:78:3d:aa:a9:a6:80:bc:
                    98:7c:a5:64:a3:4f:1e:43:31:2c:f0:f6:71:40:31:
                    a3:c0:7f:e7:e9:24:94:82:a1:10:0b:0e:55:28:2a:
                    81:22:a3:e0:89:c4:23:56:08:36:bb:4a:ab:1e:2f:
                    5c:24:2f:5b:df:90:c3:b5:07:08:c7:33:94:7b:8c:
                    38:1d:40:21:13:6c:7d:bd:5f:52:fc:aa:cc:53:04:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.170.238.0-178.170.241.255
                  185.16.192.0/22
                  193.105.57.0/24
                IPv6:
                  2a03:dc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196904
                  199926
                  203335

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:dc:08:c8:7e:a4:cc:dc:b6:a7:55:7e:56:11:bf:3b:57:
         6a:e2:fc:e6:1c:ec:7f:46:ab:e1:13:ce:8c:a7:95:58:38:81:
         ce:84:17:1c:34:4a:34:1f:08:82:59:ef:0a:bc:22:a8:c9:69:
         f5:76:80:88:48:4f:f9:df:36:2c:f6:de:85:a3:a1:c7:85:a5:
         c2:42:57:e3:68:a6:07:c7:3e:2e:b5:28:08:c1:59:e8:25:27:
         58:65:b4:e3:88:b3:59:06:af:30:19:b7:7a:0c:0c:e9:5a:05:
         1d:a4:98:7b:1e:51:ab:65:ca:0b:af:cc:df:78:3e:81:7c:ae:
         c1:e0:6f:f4:94:78:1c:22:72:de:e8:1d:72:f6:e8:c2:cb:5d:
         2b:41:7a:36:eb:d5:be:13:88:71:cd:3f:9a:ad:a0:94:00:db:
         45:d2:c4:04:d0:f6:d2:84:8b:d2:c1:28:03:8e:58:83:a8:32:
         ce:3f:bc:b2:b0:4c:3c:13:d1:f0:6e:c0:b1:11:fa:d0:3a:9b:
         c3:7d:e1:70:01:b9:52:a8:96:cf:c6:ea:50:de:fe:63:2b:1c:
         f0:2d:7f:67:bd:77:fe:33:71:b6:cb:bf:0b:2b:e6:1f:d1:58:
         24:a2:41:a2:a1:cf:e3:01:af:1c:c9:1a:53:d3:d7:c6:8f:a2:
         01:5f:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----