Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
File:                     Z9zZJr83DT-gGDoTi1ewmDzaygo.cer (raw, json)
Hash identifier:          KyRf8KH5+mlEnvAVZZp0y3Qteh+XCNHKJwr3t79kYKo=
Subject key identifier:   67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942445A29FA1A9752F26B8B71F94EBF1A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42750
                          IP: 185.195.72.0/22
                          IP: 2a0a:5540::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:a2:9f:a1:a9:75:2f:26:b8:b7:1f:94:eb:f1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:3b:92:23:9d:ac:fe:3c:09:bc:89:ba:4f:
                    99:d3:13:f8:c9:ad:db:19:81:41:fb:54:7d:36:a5:
                    c4:a8:1b:38:4f:d5:dd:6a:ad:60:2b:34:e2:38:e1:
                    08:53:63:ec:b3:1d:f6:3a:96:86:10:45:18:2a:c8:
                    42:21:58:a1:dd:02:cd:55:d4:99:14:7b:f9:49:4a:
                    a1:36:f6:eb:32:96:4f:7c:2a:fe:11:13:8c:d2:31:
                    ea:d1:52:16:79:15:5b:91:83:71:46:4b:02:b5:a4:
                    20:36:cb:3e:d6:fe:50:de:c3:76:ac:5b:e8:da:c1:
                    1c:a6:9a:4a:3c:b5:74:15:c4:83:63:37:5f:44:ca:
                    00:2b:ad:fc:03:09:04:43:f4:8b:b1:97:cd:28:f4:
                    72:eb:5f:8c:1c:64:52:79:e0:ba:e6:85:45:9a:7e:
                    f9:0e:43:86:98:6f:98:92:88:6e:f3:e7:09:48:58:
                    6f:cd:52:fe:63:13:e4:af:a1:8e:c3:31:65:e3:95:
                    38:45:b9:cc:63:0f:b0:53:fa:25:ec:9f:cb:e6:f3:
                    b7:9d:45:6d:82:0a:30:a5:8f:c2:17:60:ee:a6:8a:
                    0a:74:d7:78:a1:bc:d7:41:9f:c2:52:ff:d6:89:2a:
                    d6:02:62:76:6d:9a:d0:bd:b3:b2:f0:1a:fb:1f:af:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.72.0/22
                IPv6:
                  2a0a:5540::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42750

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:3d:fa:62:eb:3e:e1:59:6f:db:56:02:9e:5f:d9:22:94:
         21:fa:02:67:70:53:a6:31:36:e0:ce:cf:fe:f7:ad:68:09:1d:
         cc:6c:5b:70:3d:e1:2f:28:69:94:4d:f4:cb:71:18:a7:91:74:
         e3:d0:fe:d2:41:b5:a3:b0:6b:3f:94:2d:27:ff:68:e8:28:11:
         6e:45:e7:d7:68:1e:15:73:8a:c9:a7:8a:3c:b0:e0:30:e0:58:
         e6:34:aa:70:14:2a:09:03:75:c5:66:78:97:c7:b0:7c:d0:70:
         70:38:0f:4e:e0:60:75:33:89:9e:d2:25:d6:51:35:12:e3:4b:
         0d:9b:fe:62:d7:a9:c9:1d:36:89:70:93:a7:95:79:02:58:8f:
         21:5e:fc:33:fd:e5:63:38:bd:12:33:c2:4a:1c:dc:a5:84:dc:
         3e:39:3d:1e:d0:f4:26:d3:2b:14:33:13:a6:14:7b:65:1a:b2:
         62:9b:be:09:d6:f1:f9:ba:1b:44:c9:48:e7:66:66:57:bb:e6:
         18:46:70:24:47:58:65:be:e2:96:e6:a3:b9:d7:22:85:d3:b2:
         fb:58:a7:32:0e:dd:70:1a:73:98:eb:c9:3f:3a:23:f6:b2:97:
         1e:65:7b:e5:32:53:8e:a2:20:78:e8:a4:d2:b6:2f:14:01:09:
         d6:3a:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----