Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
File:                     Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer (raw, json)
Hash identifier:          4cHiKn+RGqrrPOGzMUUZVLJeh2ZE3rTkuM2Ewl6fjqU=
Subject key identifier:   66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3F1BB6C27D84DB3A62D59B7F993E9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200216
                          IP: 2a13:6940::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:f1:bb:6c:27:d8:4d:b3:a6:2d:59:b7:f9:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:29:3d:9b:c3:9b:d5:4d:a0:75:06:5e:ca:db:
                    46:f2:0a:a9:ef:43:c7:d8:f3:92:88:2c:4a:41:4d:
                    8e:02:a3:1b:db:77:75:da:66:36:c7:2c:d5:e5:0b:
                    3f:6e:be:81:14:27:b4:5c:90:1c:d6:41:b3:5a:d1:
                    23:3f:73:93:9d:f5:04:78:31:8e:ca:0a:66:c0:a6:
                    11:82:b5:f8:07:c0:32:42:80:e5:1d:da:3e:ed:fb:
                    03:35:d5:85:18:14:d4:a8:ef:41:0a:f2:60:67:bb:
                    a6:38:d5:71:8b:2c:93:fa:7d:1b:c6:58:cd:14:82:
                    9d:4b:4b:92:cf:40:26:57:b3:ea:14:15:8a:c7:8b:
                    94:f8:96:0c:9e:41:96:0a:1d:cd:35:5f:3d:d9:4d:
                    4d:7f:62:c4:44:67:84:b6:0e:5a:4b:b4:24:7d:64:
                    3c:cd:90:2a:6e:61:29:15:8b:82:1c:4f:35:21:81:
                    33:c8:4d:a0:26:15:75:c0:3b:3d:a9:05:db:27:7d:
                    b4:1f:e0:6a:7e:e7:14:77:a2:0c:b5:0f:cb:b5:00:
                    74:c0:ab:af:21:06:86:ed:0f:ce:64:b6:91:c7:92:
                    52:75:bc:c6:38:c9:4b:06:d7:e0:36:71:9e:6e:2c:
                    ee:de:04:01:22:92:38:c4:79:4f:d2:45:70:46:a6:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:6940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200216

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:2d:21:b9:05:58:bd:7d:8d:67:58:8a:44:69:74:15:46:
         4e:e3:65:f4:cc:a1:db:3d:d3:77:68:c5:aa:97:3f:08:06:7d:
         b7:82:b1:6d:b2:74:4f:3e:c1:2c:2b:8a:35:e5:a9:0c:70:a0:
         f4:c6:79:27:9b:ce:31:2d:c9:40:23:ae:62:00:4b:78:7e:2f:
         61:09:ac:10:52:d9:cd:2f:ca:bf:a1:01:f7:e4:3c:7f:d5:a9:
         0a:a1:72:17:8b:c7:a8:89:31:99:1f:d6:6e:13:b0:8b:95:00:
         fb:ee:93:a2:f0:10:72:79:f8:74:10:38:63:8f:f6:5c:10:c3:
         9f:4a:83:c8:a2:af:f2:a5:72:be:37:b9:94:5d:67:49:33:a4:
         ca:1e:31:ff:76:8d:82:fa:07:bc:3a:f0:6a:e7:ac:62:40:62:
         d7:ed:04:7e:26:52:ce:cd:8b:5e:e6:49:79:c0:80:29:f1:dd:
         2b:22:0b:0f:29:00:09:98:2e:e8:52:41:84:09:6d:e6:d6:6e:
         3e:eb:7f:9e:fe:3e:ba:ae:2f:18:b0:a2:0c:b0:f3:42:0e:c8:
         6e:90:ab:7b:8b:f8:7e:34:4c:f9:71:d7:ee:5b:54:0e:ec:49:
         08:e8:6c:65:9e:9a:ce:bc:4d:f6:5b:09:b9:96:37:39:80:b1:
         92:ff:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----