Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
File:                     Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer (raw, json)
Hash identifier:          0/JF2IU/aNrUvu4bcV852PA9QAUyp3iwwUdVu2YOh7U=
Subject key identifier:   67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01958AA626AB865D5CDFE36CE25C0685A676
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 13:58:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207560
                          IP: 185.225.226.0/24
                          IP: 185.237.166.0/24
                          IP: 2a06:1680::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8a:a6:26:ab:86:5d:5c:df:e3:6c:e2:5c:06:85:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 13:58:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67dbf31d597746c9a1434706062a40653bc545c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:3e:0c:df:f6:5e:ec:65:2f:cd:47:68:6b:
                    e0:f3:c8:de:e7:ae:82:e2:d3:70:e1:17:48:ce:8f:
                    81:a7:da:de:69:73:6f:ef:7b:1f:a8:6a:8a:83:52:
                    e4:fe:58:25:ee:09:aa:42:1d:1d:bf:31:6b:e6:ea:
                    bb:12:51:2b:ad:bf:9a:7a:c1:88:10:20:11:6a:e4:
                    d6:c4:95:77:49:87:8e:60:3d:39:0b:0c:d6:c3:c9:
                    8b:fd:36:5e:d4:45:e4:c4:17:fb:c1:bf:92:0d:2f:
                    88:e7:a7:4d:41:26:fa:94:88:1f:f0:99:91:6c:3e:
                    8d:a9:94:36:64:aa:35:26:b5:87:b5:3d:4a:45:93:
                    be:fd:82:38:7f:d9:85:37:e3:d3:29:a0:a4:dd:4e:
                    ca:c6:a2:fc:84:b2:9b:52:bf:46:23:8b:03:1a:83:
                    de:f6:7e:a1:5f:9e:c9:2e:dc:d4:a0:de:9d:bd:95:
                    89:ba:dd:cd:07:00:42:a1:94:f5:d4:a6:70:57:e4:
                    e3:7a:c4:e7:a5:dc:3c:40:67:33:05:50:4a:14:7e:
                    55:63:26:ea:24:c5:b2:33:9f:83:f4:88:89:f4:cd:
                    dd:13:b6:dd:30:54:6f:e2:4c:07:bd:0e:ed:f6:eb:
                    6a:45:f4:9c:f7:51:2b:90:24:56:25:c7:52:eb:0e:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.226.0/24
                  185.237.166.0/24
                IPv6:
                  2a06:1680::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207560

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:4f:df:9d:f5:b8:22:d0:79:a3:b0:44:35:dd:b3:25:6c:
         20:84:36:03:99:37:10:69:c3:dd:ba:2c:fb:31:99:eb:bb:36:
         2b:64:1f:0b:93:56:b6:6a:05:36:ff:c1:d1:ac:58:8d:67:18:
         58:58:88:90:93:cf:a9:96:a5:f9:e4:0b:00:f7:4f:63:30:ae:
         61:31:5d:85:dc:47:11:0c:f9:97:60:c3:20:d0:e6:15:f1:c7:
         c5:64:ac:32:ca:df:96:c5:a5:ea:7f:53:17:90:7d:85:f7:74:
         ea:f4:91:f0:a1:58:b6:fb:43:18:a4:8a:8c:f7:21:31:5e:97:
         40:7b:c4:1c:7e:d1:ff:a0:5f:b6:dc:8b:ca:8b:c3:bf:14:8e:
         2a:7e:cd:a3:28:36:45:1a:75:57:9c:41:23:08:25:c5:39:45:
         50:13:af:3c:8b:24:eb:c6:6b:62:55:20:49:70:3c:5c:cc:1d:
         a8:c0:96:39:7c:e3:b5:bc:34:74:21:10:71:92:57:58:96:36:
         f7:fd:53:62:e8:ae:34:be:51:25:80:1f:a9:9f:43:50:9a:e5:
         6a:03:de:a7:06:0b:dc:48:ac:f3:62:a8:d7:c4:e3:74:9e:09:
         2a:7c:9e:c8:78:82:82:09:80:62:61:12:f1:6e:c6:10:2d:fa:
         be:f4:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----