Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
File:                     ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer (raw, json)
Hash identifier:          7OoGEHG0suEtFF4OxuvQ2tNLJg83gJCK+2vAzjj2rZY=
Subject key identifier:   64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F57AAF891D24DC2F42C9EAC5737FA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200600
                          IP: 185.101.220.0/22
                          IP: 2a06:2140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:57:aa:f8:91:d2:4d:c2:f4:2c:9e:ac:57:37:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=64ff41a24fc48271b992327a2dae5a433bded050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:ea:d8:cb:57:95:ee:b9:b1:2f:7b:3c:3e:
                    fe:2e:23:9e:29:d2:2a:83:5b:ba:01:58:0f:6d:68:
                    be:81:cd:04:9b:8a:46:7c:4a:60:84:ee:8c:a2:e1:
                    74:06:b2:fc:88:b3:2b:e2:a5:91:b4:61:8d:96:d7:
                    be:d2:c0:66:20:57:ee:57:bb:f8:2e:09:11:64:10:
                    28:2a:93:64:27:36:72:90:b9:7e:11:64:e0:0f:53:
                    02:e6:f2:d2:44:6b:7c:cf:3e:44:4e:21:23:63:24:
                    6c:1a:43:38:d0:5c:02:7e:e5:5b:61:cc:8e:63:17:
                    be:38:c5:3a:ab:f1:39:8c:a5:2f:a7:99:63:aa:0a:
                    84:85:f3:61:bc:2c:4f:27:19:88:b2:a1:c3:5d:c7:
                    97:65:11:58:89:c9:49:92:0d:95:13:0d:a5:15:ad:
                    ab:29:5a:c9:e9:4c:53:71:df:cc:0b:c9:16:0b:fd:
                    e3:9a:20:21:ae:8a:94:14:53:96:17:6a:74:35:5d:
                    f4:ba:46:cd:83:4d:0c:be:ad:42:18:13:ef:7b:82:
                    2d:9d:de:3c:60:0d:70:83:b0:d4:34:7a:82:d5:26:
                    42:c7:e6:78:cb:4e:c7:b1:8b:51:74:69:56:7b:06:
                    93:06:d6:9b:da:76:cd:11:06:8f:02:c9:23:4d:a8:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.220.0/22
                IPv6:
                  2a06:2140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200600

    Signature Algorithm: sha256WithRSAEncryption
         39:83:9a:c6:82:be:9d:e4:2e:aa:b9:1f:65:d4:43:38:75:47:
         ad:55:24:82:ea:69:aa:7d:91:30:a4:0c:3f:d5:40:36:df:9f:
         48:68:db:a4:88:cc:71:43:59:9f:72:a0:3f:de:31:c5:a0:f0:
         00:cd:5b:3b:ec:74:ae:c6:96:6b:37:f4:53:e2:30:66:23:b0:
         96:f9:55:1d:b0:a5:c5:03:bb:8c:8b:7c:32:5e:20:6e:45:15:
         72:41:98:ff:29:5e:7a:62:2b:aa:3b:fc:5b:bc:24:47:77:47:
         b4:90:eb:9b:80:d7:d9:01:cb:89:7d:ce:29:60:d2:4a:7d:a2:
         4c:4f:b3:8c:92:21:0e:7d:7c:e8:33:7d:40:9a:ea:36:dc:92:
         eb:ea:21:c0:e2:8e:36:0c:70:be:8e:eb:68:59:5e:af:57:9f:
         87:7e:1f:de:a2:8b:19:2a:f2:33:56:87:c8:b6:bd:48:1c:ef:
         81:d1:6c:c7:12:e7:5f:f8:d8:de:d5:55:ac:1a:5e:41:2d:8b:
         a0:9d:13:26:c5:c9:2e:94:be:75:0a:85:03:da:13:0b:3d:31:
         4c:72:9e:5d:f0:e9:a8:a0:e7:27:15:ed:65:e4:ae:75:95:37:
         2e:55:f1:b2:a9:84:6b:63:24:2d:b6:62:7d:ee:f2:65:f8:8c:
         60:14:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----