Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
File:                     ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer (raw, json)
Hash identifier:          Zp5l+hdo0U6QhwhOYWKo536jlhv4L3VGtyXfdZ1ZyBI=
Subject key identifier:   66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427488AD2ADD133258349FA3FA6C45401
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207045
                          IP: 185.123.112.0/22
                          IP: 185.125.96.0/22
                          IP: 2a0c:6400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:8a:d2:ad:d1:33:25:83:49:fa:3f:a6:c4:54:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:c5:80:db:d7:05:31:02:15:84:53:61:8b:
                    29:76:f8:51:20:27:4f:88:e6:21:2c:ff:b1:d5:07:
                    86:60:2e:7c:95:98:8b:5b:65:78:bf:9d:01:27:8b:
                    ce:2a:f7:ae:ec:e6:90:59:bc:ac:77:34:a9:75:77:
                    f4:fa:39:e8:e0:22:ac:84:38:1e:1f:b3:4d:e6:9b:
                    63:e7:65:b7:86:75:20:17:dd:1f:5a:8f:c9:8e:fb:
                    e5:5f:0f:6d:47:02:47:5e:13:1a:51:94:fe:4c:53:
                    95:9d:18:44:0b:7c:26:dc:03:2b:99:52:3b:37:37:
                    5f:90:c0:0c:d6:a1:80:01:ff:06:24:60:cc:b7:8f:
                    4a:2e:45:33:1c:f8:e3:63:84:4d:b7:0e:fa:27:fe:
                    83:23:e7:c0:19:ce:af:2a:45:55:a9:2c:ab:8b:10:
                    b4:eb:ef:ae:5a:dc:fd:4c:26:22:06:d1:cd:61:e5:
                    a8:47:25:4f:23:a9:ce:bb:26:74:f9:7c:70:98:a3:
                    1a:30:21:55:db:e5:83:1a:1a:38:b1:08:df:06:e0:
                    f3:0c:0c:83:d7:35:94:63:21:b4:3c:49:b1:1e:08:
                    78:77:0b:12:87:52:60:ed:cc:0b:4f:8b:fc:a9:56:
                    40:87:81:48:9b:1c:1d:ed:a4:12:6f:2a:33:54:99:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.112.0/22
                  185.125.96.0/22
                IPv6:
                  2a0c:6400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207045

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:0f:07:56:a6:56:71:6b:d3:b6:ba:3f:b8:49:ef:f2:1c:
         31:d3:f0:0d:11:41:2b:f5:96:8d:70:4b:d9:15:33:c0:41:6a:
         af:4b:8a:21:b0:0e:b5:95:d1:ef:3e:af:16:26:1b:42:79:82:
         3b:69:84:44:6e:14:d0:0e:b9:c3:fb:75:02:2a:12:0b:66:fe:
         b6:8c:c9:6d:fa:a8:e1:f7:d7:65:54:f6:7e:80:b7:5d:c4:dd:
         ed:13:dd:ca:79:53:ff:9c:00:7e:9e:74:c5:82:48:42:29:1d:
         73:c8:55:df:8d:a5:80:13:c5:f2:fb:ca:92:c6:32:06:6a:f3:
         ba:70:4b:16:8a:f4:a3:e9:a7:92:d7:95:47:1d:0a:9c:d0:40:
         20:38:48:7d:b2:8b:ea:5d:47:4f:37:36:99:35:75:2f:af:d0:
         59:a1:7e:38:34:6e:8f:ef:70:df:79:ac:03:a6:db:84:b2:99:
         61:86:42:86:ee:98:85:32:94:48:e6:f3:ec:19:c9:70:98:33:
         03:a4:87:86:d7:54:c0:d9:e7:20:84:91:91:f4:5c:14:cd:6f:
         e9:6a:44:b1:2d:99:b6:78:7c:c2:0b:1d:98:6e:62:2e:54:ac:
         84:e0:2d:33:d4:1a:af:76:7a:a6:3f:17:ba:87:08:49:71:7e:
         c6:4a:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----