Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
File:                     Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer (raw, json)
Hash identifier:          EqYapRqJ6jgqNxkPzp8/ve0ep9aeH6d3KU9lbh7oR6Y=
Subject key identifier:   65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942143FCB66E3F6D34AE1E562781981711
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 09:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.33.124.0/24
                          IP: 2a10:a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:fc:b6:6e:3f:6d:34:ae:1e:56:27:81:98:17:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:0b:e9:3b:f6:b0:49:fd:bc:5a:4b:fd:2d:
                    fe:39:7f:69:3e:21:6a:74:20:8a:26:f9:cc:76:42:
                    a2:aa:c4:96:59:76:8c:77:f6:ac:52:31:31:5b:c2:
                    87:b6:b6:8b:1a:24:e9:9c:90:81:8d:bb:b5:9f:a3:
                    b4:0e:da:77:14:42:f3:75:83:73:ab:ef:86:47:2d:
                    e0:85:57:68:bc:df:10:77:57:ce:2c:77:3b:a7:d1:
                    dc:ed:05:b0:fe:f5:ce:17:02:b9:8e:a9:87:1d:8f:
                    21:90:e8:82:e2:a1:fe:bf:17:6f:16:63:6b:b6:eb:
                    b9:47:92:15:b1:4e:4a:9e:c8:c0:a7:25:e4:4f:61:
                    4e:f8:9e:16:56:49:07:a5:6d:d2:0f:ba:0e:ee:cf:
                    b1:2c:b7:88:b1:9e:11:ce:64:9a:ac:45:e7:ba:aa:
                    d7:12:7d:c2:f5:72:97:6f:86:d5:4d:bb:51:28:0b:
                    fb:7e:5b:70:c3:fd:94:91:17:46:d4:29:83:78:c8:
                    2c:7c:a6:21:bb:26:a9:7a:ab:f1:23:58:79:8c:d8:
                    eb:d9:0b:88:74:fb:52:86:bf:47:21:ba:64:89:98:
                    93:d8:e1:21:5c:69:ac:e9:55:7c:b0:6f:6d:62:41:
                    67:33:ed:b9:1a:ac:44:d1:00:2e:61:3d:09:49:7b:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.124.0/24
                IPv6:
                  2a10:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:40:0d:25:8e:3d:0e:78:5a:84:2f:a5:00:8c:86:79:64:
         bf:7a:ee:09:d4:6e:22:f9:41:2b:ee:3e:6e:6e:f0:78:b6:a7:
         a9:a3:b1:0d:14:03:3a:ff:48:48:7b:11:38:4f:00:d8:58:99:
         12:b1:44:19:80:66:c6:4f:9f:b5:8a:c5:79:af:6b:71:76:33:
         1f:bc:5c:66:ee:e0:85:4b:8b:23:65:ac:f4:80:36:13:c2:4e:
         10:8e:0c:cc:27:5d:6a:43:20:ca:58:87:0e:dd:06:0b:b8:53:
         3e:33:52:b3:75:0f:5d:35:bf:20:99:cd:f0:3d:67:74:02:52:
         5b:dc:ff:4b:be:87:4e:2c:8f:c6:1f:c4:4e:98:44:3d:c6:90:
         23:1d:ab:b5:ca:a8:20:db:d5:05:40:23:f4:02:45:64:ba:c2:
         22:d8:f4:10:2e:8f:bd:c6:ee:0a:11:82:55:b5:9d:ff:6a:71:
         a9:da:db:9b:08:20:a9:e4:8a:54:e3:20:70:e3:5e:1a:7d:95:
         01:2e:fc:10:7e:56:54:a6:a9:02:28:6e:0c:b7:21:41:de:f7:
         31:36:0e:dd:75:59:0d:44:83:2f:58:7f:de:80:c0:5a:c8:2d:
         8f:d6:e4:96:65:cc:43:99:90:4b:14:9e:23:24:3b:09:11:f3:
         28:da:7a:2e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ/y2bj9tNK4eVieBmBcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWNmOTk5NjJmOTg5ZjdiNzMzZGE3YWE3MGVhZjllNDEwNTJhZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteYL6Tv2sEn9vFpL/S3+OX9pPiFq
dCCKJvnMdkKiqsSWWXaMd/asUjExW8KHtraLGiTpnJCBjbu1n6O0Dtp3FELzdYNz
q++GRy3ghVdovN8Qd1fOLHc7p9Hc7QWw/vXOFwK5jqmHHY8hkOiC4qH+vxdvFmNr
tuu5R5IVsU5KnsjApyXkT2FO+J4WVkkHpW3SD7oO7s+xLLeIsZ4RzmSarEXnuqrX
En3C9XKXb4bVTbtRKAv7fltww/2UkRdG1CmDeMgsfKYhuyapeqvxI1h5jNjr2QuI
dPtShr9HIbpkiZiT2OEhXGms6VV8sG9tYkFnM+25GqxE0QAuYT0JSXtFtwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2E1MmIw
NC1lZmIwLTQxNWItOWIxYS00MDllYTEyMDg5MjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYTUyYjA0
LWVmYjAtNDE1Yi05YjFhLTQwOWVhMTIwODkyNi8xL1pjLVpsaS1ZbjN0elBhZXFj
T3I1NUJCU3Joay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwSF8MA0EAgACMAcDBQAqEAqAMA0GCSqGSIb3
DQEBCwUAA4IBAQBiq0ANJY49DnhahC+lAIyGeWS/eu4J1G4i+UEr7j5ubvB4tqep
o7ENFAM6/0hIexE4TwDYWJkSsUQZgGbGT5+1isV5r2txdjMfvFxm7uCFS4sjZaz0
gDYTwk4QjgzMJ11qQyDKWIcO3QYLuFM+M1KzdQ9dNb8gmc3wPWd0AlJb3P9LvodO
LI/GH8ROmEQ9xpAjHau1yqgg29UFQCP0AkVkusIi2PQQLo+9xu4KEYJVtZ3/anGp
2tubCCCp5IpU4yBw414afZUBLvwQflZUpqkCKG4MtyFB3vcxNg7ddVkNRIMvWH/e
gMBayC2P1uSWZcxDmZBLFJ4jJDsJEfMo2nou
-----END CERTIFICATE-----