Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
File:                     ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer (raw, json)
Hash identifier:          XsDylx7PqJaYERWFG7CsIX55iebLMuBVqkB1QXM8p9U=
Subject key identifier:   66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F2296BCA175C36A74F6034D1C15CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209496

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:22:96:bc:a1:75:c3:6a:74:f6:03:4d:1c:15:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:fd:f8:b4:98:a4:c7:81:f3:e5:59:1f:47:
                    df:ae:d3:5b:91:8e:42:3d:5c:1a:27:61:36:75:46:
                    49:da:14:ea:7d:41:c6:03:d4:5e:c8:d5:4b:51:7b:
                    0f:89:21:15:83:cf:87:91:59:52:41:fb:f1:ac:09:
                    23:3f:08:e7:64:ef:21:b9:94:01:f8:97:4e:69:93:
                    14:76:95:8e:51:b8:91:2e:03:d8:c6:f5:e9:a9:7a:
                    85:60:0b:8b:82:0c:c8:e8:65:9e:97:91:5b:e7:2d:
                    a5:08:db:84:1e:5b:bd:c6:bc:d4:a5:77:1a:a2:36:
                    ea:b8:05:41:ea:ef:00:e8:64:93:16:42:d2:2b:17:
                    fa:d3:63:ce:dc:c0:78:1c:87:63:3f:46:9c:cb:6d:
                    80:39:8c:89:c8:2b:7e:73:b6:8b:5e:63:c6:d8:39:
                    a9:7b:d4:54:09:13:02:86:ea:4b:99:f5:5c:8e:d8:
                    91:17:1c:05:7f:5c:92:fb:b5:b2:e3:d7:a9:0d:e5:
                    f4:07:b1:c3:82:b7:f6:df:d2:68:1a:9a:36:a8:59:
                    40:9d:6d:c9:e4:b0:73:eb:4f:ee:3f:a0:40:3c:27:
                    2a:5e:57:2e:56:1c:a3:09:e7:ea:29:d7:57:81:6f:
                    83:b6:70:92:34:df:49:0e:3e:41:17:a6:6f:35:84:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209496

    Signature Algorithm: sha256WithRSAEncryption
         2c:7f:14:fd:f5:43:5d:dc:a8:ef:c5:5f:90:06:6e:c9:9d:9e:
         13:b4:d4:d1:3d:55:5d:93:24:e7:d9:fe:92:0e:ef:82:9b:95:
         f3:47:e8:d2:e8:b1:ee:c7:45:e6:cc:63:90:20:a0:bd:3a:01:
         ee:c5:23:fe:26:78:28:2b:ce:5d:50:ca:cf:6e:9b:8d:e5:48:
         0e:cb:d3:a5:ea:a2:95:3c:99:a9:61:0b:ff:b9:b6:ff:38:d1:
         62:a5:ae:ef:ee:fa:98:f5:60:71:13:ff:b4:b6:1f:ec:45:f4:
         3f:40:71:bd:8a:3d:8f:69:d4:6a:7b:48:c2:65:c3:74:08:e1:
         b7:6c:6c:22:3f:0a:0e:67:67:25:2c:fe:92:72:ce:c3:f1:a7:
         ce:96:d2:44:b5:ee:2c:25:ab:43:5e:1d:23:81:d4:b9:2b:d6:
         a5:23:1b:87:e6:c7:df:4f:ea:91:e3:1f:b0:a9:47:23:df:8d:
         74:4e:4b:bd:b7:58:31:65:1c:94:a2:fe:0f:0f:05:5d:90:ea:
         3e:4f:ed:4d:9f:da:16:9d:1d:6e:db:75:52:aa:7c:9a:80:ee:
         0e:ed:97:a2:31:ec:3d:bf:07:52:a8:2b:c6:50:60:f1:a2:da:
         21:a2:09:6c:d6:14:c6:6c:c6:79:bd:1a:10:ef:10:b0:e6:ec:
         6e:18:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----