Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
File:                     ZeuO9EGD-OOpyIenviaz8HE8E70.cer (raw, json)
Hash identifier:          H63YEkBcgK1TlswS/Z7QZ9QA8VKHqdlBTrA7xWisv4U=
Subject key identifier:   65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9FD1CA6ADF68ADB1B536904CBBA00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34711
                          IP: 195.64.178.0/23
                          IP: 2001:67c:2a44::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:fd:1c:a6:ad:f6:8a:db:1b:53:69:04:cb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:12:c4:59:45:65:29:08:4a:64:10:b0:e0:
                    e2:aa:af:f8:5e:ef:a2:bf:bb:e2:47:ef:d9:7f:4a:
                    95:13:1f:9c:08:5f:9a:28:72:09:37:0f:38:b2:b2:
                    0b:9f:49:29:a8:51:eb:05:cc:37:bd:de:2f:8f:89:
                    74:81:ad:3a:e3:38:41:df:5f:c5:f2:0b:43:c8:e3:
                    c5:a4:13:31:8a:62:e6:83:61:55:bb:62:6c:29:b7:
                    a0:14:85:1f:44:db:b1:5a:1f:7f:32:31:83:af:cb:
                    b9:7d:d2:fa:4e:55:51:9a:5e:fb:32:a0:e7:b1:0d:
                    4b:61:25:3e:9d:b5:07:66:c3:95:73:38:c8:d9:5a:
                    75:a7:fe:8b:8e:76:4f:3e:ff:e1:3e:e7:44:34:b0:
                    ff:c7:ba:37:c6:55:83:7f:95:c2:e7:0c:03:16:a0:
                    3c:51:86:b6:19:1d:ed:08:37:48:3b:45:8d:c0:09:
                    69:fc:41:72:5f:92:d8:87:61:4a:d2:69:6c:9e:94:
                    57:1a:a5:12:a1:de:f3:aa:1d:7b:c1:7d:be:04:bc:
                    08:95:0c:cf:90:b7:96:f6:09:41:25:89:cd:b6:28:
                    0e:bc:ed:97:15:c9:81:43:6f:51:30:8e:3f:a1:4e:
                    52:74:5b:2a:b6:13:57:eb:18:18:cd:9d:82:9a:22:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.178.0/23
                IPv6:
                  2001:67c:2a44::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34711

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:1e:19:55:92:47:af:57:81:89:93:56:06:19:6c:55:9c:
         ba:f8:c0:55:9f:0b:40:89:e7:43:dc:ca:84:a3:d4:fb:9f:fb:
         93:c1:27:43:79:4a:f8:63:14:5f:bd:42:b1:f9:aa:a1:a7:ee:
         6d:8f:ab:b4:ac:af:7f:e1:f5:9f:48:ea:ce:38:1d:33:bb:bb:
         24:57:27:e1:86:fb:24:4b:a6:7c:38:1f:d7:98:63:71:3d:08:
         c8:ad:b3:4c:41:84:6c:27:5c:6d:63:37:e9:bf:ea:61:29:b8:
         f3:e4:59:6f:ab:2e:93:fd:bb:2d:1f:14:ef:5b:53:c5:05:c4:
         5c:4c:49:40:99:6f:97:e4:9e:de:82:47:93:32:f7:04:56:ee:
         82:58:33:3f:f5:05:a9:7f:d5:a3:cf:20:0c:dd:1c:d8:bc:01:
         03:1a:e7:39:8d:8d:5a:5f:ad:1e:52:df:4f:83:46:a5:bc:b7:
         00:5b:f0:e8:7e:01:9f:51:2d:48:f0:41:22:94:ac:3f:f2:8c:
         8e:11:ac:bc:e5:d3:35:b8:5f:e5:14:60:6a:8e:40:61:0a:12:
         94:2b:f1:17:67:82:11:bf:28:de:3e:a4:70:a9:10:ab:ac:58:
         be:da:98:98:76:0d:9b:be:4b:24:c2:2e:0b:6f:65:36:98:38:
         70:fd:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----