Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
File:                     Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer (raw, json)
Hash identifier:          /hZusbA0t92MXXOxBpNDqynCQmlZcWokKyQR9wgtH30=
Subject key identifier:   67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7515115992CBCB5984F32B83A3E2F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43007
                          IP: 91.194.28.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:51:51:15:99:2c:bc:b5:98:4f:32:b8:3a:3e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:05:c0:4a:50:29:40:3c:4b:5d:b4:40:19:
                    bd:87:9a:a7:c0:5c:a9:85:22:91:ee:ca:89:9c:3f:
                    c9:90:ca:59:4a:76:e3:fe:e3:45:0c:ed:6c:19:86:
                    d9:ac:a2:78:75:a0:34:4f:b7:54:31:c3:e3:fe:06:
                    b3:94:a3:63:17:eb:4f:d1:6c:60:0f:28:e3:ef:9f:
                    78:59:cd:46:77:b9:ac:13:3d:1d:fe:c9:b6:44:c1:
                    e7:b3:dd:73:36:86:eb:f7:74:84:46:43:f2:a4:bc:
                    98:c3:fc:00:89:e6:f5:7a:57:54:9b:92:dc:0c:58:
                    37:cc:27:7f:bf:fb:99:ad:07:20:f0:08:7e:4d:70:
                    b1:5c:42:ae:3d:d0:2a:2d:f9:7c:8d:bb:da:43:82:
                    1c:4c:62:58:c3:1c:0a:7b:fc:76:09:91:15:9b:1d:
                    0f:57:4f:f7:03:3d:9f:4b:b3:df:8b:17:11:e6:3a:
                    41:91:8c:e0:5c:67:b7:1a:91:2a:b4:ed:73:a0:11:
                    60:13:c3:db:86:6c:a3:a5:9a:50:2b:73:f3:a8:94:
                    86:91:a4:2f:d7:2d:5b:2d:de:d9:33:9f:79:c7:f7:
                    ca:d8:8f:7e:61:df:0f:e9:ab:9b:d9:18:51:50:77:
                    0b:38:29:28:63:07:0f:8b:e9:52:2d:97:8a:a5:36:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.28.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43007

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:9b:f2:42:c2:83:c3:57:32:44:e7:a4:0c:de:ac:aa:a8:
         ed:04:b5:16:10:95:a5:57:9d:85:8c:dd:d7:7e:3e:07:86:19:
         57:8b:d8:4a:1b:1d:d5:7e:d9:03:f6:1c:93:5b:56:82:9a:cc:
         bf:c5:8f:49:e9:fe:5a:20:10:09:48:86:d8:09:a4:91:7e:9a:
         26:ae:3d:8a:4c:c3:fc:45:56:69:6f:99:ac:eb:61:8f:0f:87:
         a5:23:9f:45:ea:2c:1a:10:48:81:b8:25:ac:c2:44:e2:d3:71:
         75:b7:77:e4:a8:7b:6d:64:b7:22:89:ed:fa:1a:5d:cf:f6:34:
         2e:fe:b8:51:41:ae:ed:d5:85:74:15:ea:14:f0:67:7a:22:79:
         08:c7:85:a1:29:0f:e5:cc:e5:d9:b1:a2:03:00:35:9d:19:90:
         ac:b1:a8:bd:a9:74:a3:70:7f:38:c8:0a:3b:4d:ec:ef:56:53:
         26:45:ba:6f:b0:e0:b1:f7:6e:a4:75:92:b8:5c:b2:59:7a:5c:
         cb:74:11:bd:5d:31:f3:4b:81:81:55:59:e2:25:e4:6e:a5:39:
         e6:51:82:ed:c7:8d:34:0d:1f:cf:74:40:fd:2c:d6:00:57:2c:
         8a:ce:b1:a6:9a:34:75:99:4b:75:d9:cb:0d:16:1e:14:cf:c2:
         fa:6b:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----