Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
File:                     ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer (raw, json)
Hash identifier:          /+VeSePrJACtMz/X07LB8vB5wOyQiM0if4GBndfeusg=
Subject key identifier:   65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420686899F89CEBD70B71F9202D631328
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213692
                          IP: 91.238.195.0/24
                          IP: 2a13:dc80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:68:99:f8:9c:eb:d7:0b:71:f9:20:2d:63:13:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:67:09:fe:d5:18:c2:23:9a:18:ca:a5:8f:
                    70:28:82:d0:12:b0:1e:c3:68:9f:70:00:81:ea:08:
                    b8:06:74:dd:fb:b7:61:99:65:dd:7e:7a:ac:8d:61:
                    6e:61:10:75:3a:14:8c:ef:c2:8f:b1:9c:0c:23:68:
                    6a:ef:91:a2:66:01:fb:70:0e:ed:64:02:12:a2:cf:
                    c5:2f:bd:de:4c:db:e8:bd:ed:53:58:b2:88:a3:38:
                    8c:4f:9d:d3:32:ce:5c:d6:5f:54:9d:8a:93:54:f9:
                    76:59:72:02:b2:6d:f0:6e:62:c1:3d:e4:4a:33:9c:
                    18:7f:fd:87:65:a8:da:59:54:28:64:2f:9f:ef:28:
                    c3:72:b0:09:e6:7f:7d:aa:c9:5e:d3:3c:a8:5e:f9:
                    43:8b:1b:44:3a:62:17:4a:36:85:af:a3:bd:aa:f6:
                    58:c2:03:33:7d:71:02:ef:a0:e4:09:df:ed:59:0e:
                    e9:cd:c3:a7:0f:46:93:f6:ae:8c:8b:c5:53:2a:55:
                    ec:88:4a:1e:ef:46:3d:a3:46:da:70:da:9e:28:5e:
                    66:58:3b:9c:90:bb:57:91:d1:ab:2e:3b:00:d8:2c:
                    a8:72:a6:da:cc:2e:73:b0:35:e4:2d:60:6c:a5:15:
                    e7:0c:b1:20:76:7e:a7:fd:4a:20:4f:00:ea:fd:be:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.195.0/24
                IPv6:
                  2a13:dc80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213692

    Signature Algorithm: sha256WithRSAEncryption
         19:68:e2:08:f6:db:fd:87:7f:7d:43:e2:b7:b3:1c:1f:09:be:
         53:37:f0:54:46:49:9f:d5:c2:07:40:e8:b3:52:94:ba:4d:42:
         f2:55:ca:3d:74:5c:6e:fc:9c:01:21:ff:4b:97:36:a7:49:ee:
         e0:c1:11:33:8b:c8:30:31:a9:a9:f1:37:67:23:65:6b:ae:5c:
         4b:df:c8:9e:bf:de:fe:2a:53:29:86:ee:58:c1:23:c7:4c:3e:
         27:9a:59:74:6d:30:91:59:73:c8:9c:8a:47:92:75:76:3b:63:
         c0:20:4d:6b:ce:1a:54:dc:c7:57:96:73:a3:5b:df:98:5e:e9:
         7c:ec:1e:8d:ae:60:18:87:82:37:4e:bc:a9:65:11:fd:26:74:
         9e:ad:be:e6:cb:76:91:8d:4d:86:5c:e7:6c:5d:dc:0a:12:e3:
         86:aa:c2:52:3e:2c:49:fc:b0:23:f0:61:5f:0b:c3:45:55:cf:
         c7:1d:0e:c1:1c:ca:17:6c:ea:51:cb:b5:77:1f:ae:06:05:dc:
         24:1e:e4:4a:97:83:28:4a:47:d0:96:23:3c:72:46:58:e8:08:
         05:31:72:b0:d5:ca:91:a4:db:06:98:6b:a3:12:f3:ab:1e:72:
         8e:99:0d:04:5a:f1:06:5f:d8:54:cd:71:d5:8e:03:cb:ed:6a:
         1a:2c:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----