Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
File:                     Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer (raw, json)
Hash identifier:          oyXilUIr3e/90Kziq9btZjKsaAt66Dd0pFvSycvWPFI=
Subject key identifier:   67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7FB8E0232D321CEE7560710880FEF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 5.145.0.0/19
                          IP: 185.74.156.0/22
                          IP: 2a00:d520::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:fb:8e:02:32:d3:21:ce:e7:56:07:10:88:0f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67d16781bca64c2b236434edeffe6e452e7162d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:14:4f:1d:34:21:7a:8d:15:1e:65:2b:90:
                    7c:c9:45:5b:8e:d3:66:13:c2:b6:a9:ad:f2:1a:54:
                    ec:bb:4a:e6:d6:48:a6:b7:57:03:d7:30:64:6d:d3:
                    aa:ec:38:20:57:d9:36:84:44:9b:8b:f4:3b:03:5b:
                    92:39:84:26:5a:69:38:c3:a8:99:52:88:5f:a0:72:
                    9a:f7:52:c3:39:d8:7a:44:9f:e1:5e:cd:27:bd:e5:
                    b5:88:08:8d:bd:90:b6:e0:40:b6:9a:25:ab:f6:87:
                    dd:c2:b6:52:73:6a:4c:6f:55:e9:67:66:2c:af:52:
                    50:76:d7:79:59:c2:ae:52:36:1e:e1:b7:81:03:a0:
                    fe:b6:5d:38:0b:98:d7:0b:e6:9e:c5:94:e7:f2:bf:
                    ed:a4:ac:1f:81:0e:0e:f8:76:32:8b:cb:93:d9:15:
                    c0:71:67:22:18:c6:55:0b:83:b8:e2:39:00:be:5e:
                    80:a3:50:a4:d9:97:77:a6:f2:37:2e:e3:e4:29:af:
                    a5:17:4e:ef:79:dc:a3:89:46:70:68:af:b8:38:7a:
                    0a:e3:d8:da:8b:e7:56:d6:1c:80:d6:18:6f:d4:26:
                    b9:b8:be:21:ba:7f:91:8b:2d:4a:38:bb:20:fc:5a:
                    32:fb:56:03:6a:e0:ac:b6:c8:91:c1:4a:0e:09:0c:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.145.0.0/19
                  185.74.156.0/22
                IPv6:
                  2a00:d520::/29

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:48:e3:3e:80:9c:ec:27:5b:b9:d0:46:d2:12:2a:c5:86:
         06:a8:48:85:1c:de:18:ad:9c:d8:d4:30:0a:3d:19:49:c8:df:
         99:eb:65:80:8f:70:64:a1:58:72:84:33:f0:ac:da:ee:3b:87:
         4f:2b:f9:49:b1:fa:77:cd:9d:28:bf:3c:65:e5:39:ab:e3:44:
         ba:0d:b9:d8:88:da:54:cf:98:84:cd:57:8b:ec:01:bf:f2:fd:
         4a:30:04:71:75:1d:d7:73:41:e7:b2:0e:51:cc:51:0d:75:15:
         b9:51:ce:47:43:58:b8:f8:dc:27:ff:48:df:1a:92:78:04:8b:
         74:00:45:c7:a5:a6:de:a1:6a:f1:f2:33:fd:5d:ee:32:07:6a:
         b4:49:2d:70:0a:1c:ff:03:92:03:d9:79:dc:1c:95:c8:ae:ae:
         0b:f3:7a:d3:a0:85:0c:7b:d0:c4:66:33:9d:cd:c7:d2:b9:cd:
         52:e7:39:ca:67:92:5b:2a:51:1e:0e:18:a9:07:4e:04:f8:ff:
         24:ea:88:f6:33:2c:f9:a0:37:c7:8f:e8:f6:24:fd:7e:1b:53:
         bb:44:39:1d:ac:2f:92:7d:b1:44:d8:16:0b:d4:60:a4:74:b9:
         52:23:b1:81:fd:5f:3d:8b:f4:4f:79:91:ab:9a:55:5a:12:0b:
         5f:81:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----