Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
File:                     Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer (raw, json)
Hash identifier:          RtFUUTGhP4YMJsjJVQZVUfJDVzIbYEIpQWz/DjbVMf8=
Subject key identifier:   67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F7641130EF77D150785BE40C0DBBD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 109.206.228.0/22
                          IP: 2a0d:c440::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:76:41:13:0e:f7:7d:15:07:85:be:40:c0:db:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:26:0d:30:06:b3:89:f6:f6:dd:bd:66:23:
                    20:62:1e:b3:a1:eb:e1:26:0c:48:2f:d0:cc:c8:c2:
                    2c:3e:9e:79:2d:c5:1b:f3:59:a0:9e:43:2d:d4:c8:
                    2b:f1:6e:d7:ee:ec:81:5f:be:21:e7:25:f3:72:bf:
                    94:71:39:f4:24:d8:ee:ee:aa:25:6f:ad:b8:43:39:
                    d6:6e:6c:73:30:c2:92:b0:8a:88:0b:1c:03:63:e1:
                    dd:a1:29:92:7e:07:e5:6e:28:4f:37:ce:04:c7:de:
                    11:93:e9:3c:92:15:62:ca:ab:c9:a6:da:77:1c:56:
                    8e:13:71:16:07:f7:c5:cc:d2:82:2c:ad:e7:1a:9d:
                    d0:ba:c8:7a:11:f2:cc:35:81:9f:80:3c:8a:e4:e8:
                    48:32:7c:4b:11:07:e5:47:b5:74:08:9c:f8:d3:19:
                    a6:80:1a:a1:dc:ed:96:fe:fe:99:1e:b2:a1:cc:ac:
                    5b:8d:c0:be:9d:ca:d0:df:81:7d:6c:69:af:9d:42:
                    4e:e4:ca:a1:66:fa:6b:e8:fe:d3:d1:28:72:19:83:
                    af:90:6c:17:2a:42:24:e6:f4:b8:1f:9d:87:9f:2a:
                    c1:c6:59:b1:78:a3:61:37:c3:d0:11:a1:d6:a0:23:
                    1a:9d:e3:30:71:01:a4:15:89:6c:75:09:27:83:ee:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.206.228.0/22
                IPv6:
                  2a0d:c440::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:cb:79:4e:1d:76:85:3a:30:2c:69:9e:2f:b9:f3:24:9f:
         47:44:f4:89:60:a8:84:94:70:42:d9:be:53:69:5d:6f:1e:51:
         c1:21:f1:9e:7e:f0:60:ff:93:07:e0:b7:17:c6:c8:98:6d:7e:
         f7:d8:fa:95:fc:46:9b:e6:5a:7a:e4:a7:c0:da:86:1a:95:7d:
         47:99:7d:a5:a2:28:35:69:a5:73:55:27:02:ba:a2:90:98:17:
         df:81:5e:56:34:e3:0a:67:41:2b:f5:a0:12:1e:c1:20:4e:c4:
         d1:a1:5b:b5:b1:27:c9:c6:c7:df:55:e6:f8:28:92:38:1d:24:
         1d:fc:a8:5e:6d:b3:72:ea:fa:d3:6b:9c:fe:50:42:2f:99:e1:
         1a:e5:6f:57:5d:4f:b8:5e:0d:b1:31:ea:7c:ad:e9:d4:66:64:
         01:70:da:de:99:81:45:60:12:56:9e:0a:af:13:aa:17:0d:97:
         bb:19:93:74:76:f6:2f:35:1d:80:24:6b:54:1f:e4:af:7c:ae:
         5e:43:9a:f9:77:d9:45:f0:1e:9e:a5:99:11:bc:1b:d8:08:71:
         ef:79:83:1e:f2:12:12:d4:ae:57:17:f9:ca:a1:09:93:21:53:
         fd:86:d7:9b:71:49:8e:32:a0:aa:c4:bd:e4:bc:bd:a4:ca:03:
         54:eb:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----