Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
File:                     Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer (raw, json)
Hash identifier:          BR58EQGQMFkXwXbgYrX11aTeS6n5eVkJpYfRdENGTiw=
Subject key identifier:   66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B638997995B27BE02D09B2AF043E8B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 15721
                          IP: 217.21.160.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:38:99:79:95:b2:7b:e0:2d:09:b2:af:04:3e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:02:f9:dc:4c:ba:9d:9e:0a:c1:45:25:b6:
                    83:49:1e:13:cf:94:66:0f:ea:53:79:86:05:df:a5:
                    c2:6e:a5:cb:ae:88:53:8c:0e:63:8d:6d:0f:31:30:
                    ba:db:a2:91:b3:76:08:d5:06:71:31:8b:d9:58:1e:
                    d8:d8:ce:29:00:74:dc:b7:49:2c:2f:21:30:8c:a1:
                    57:98:1b:ab:66:c3:56:2a:38:1e:22:64:e9:0b:74:
                    4b:64:54:ef:87:fc:a5:3f:f1:c9:0f:82:3c:b1:46:
                    e6:7f:a8:f7:cd:92:9f:14:78:9b:8f:11:63:50:e9:
                    31:15:a5:79:db:69:1e:4e:01:1c:de:9b:96:06:9e:
                    ea:fa:8f:f1:f0:88:c5:37:e5:6b:0a:2b:43:ff:77:
                    72:08:dd:7f:29:3e:7e:cc:f4:e9:c5:66:c6:d1:dc:
                    b2:af:09:9f:1d:ea:a2:f1:98:5d:f5:e8:84:45:9f:
                    c1:de:25:fb:43:99:d3:dc:00:0d:93:d2:44:0a:12:
                    ce:66:05:42:99:96:51:d9:54:d4:ac:ea:0c:b1:c6:
                    7c:c8:97:e4:05:a9:56:01:89:86:80:52:9a:40:8d:
                    f7:0e:7b:c2:1f:7e:1e:44:83:1b:f6:67:32:a7:c8:
                    8e:f6:dd:d8:5f:be:0f:26:8b:bf:55:67:d9:71:e3:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.21.160.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15721

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:47:25:5e:c7:ed:f2:d2:57:6e:5f:d6:56:c4:86:63:f9:
         a7:4a:48:85:bc:00:a7:e4:b9:84:7e:c9:32:c0:ea:8c:b0:d7:
         86:0b:28:6f:a4:13:7d:f0:a4:87:fe:23:12:4a:51:dc:6b:1d:
         22:0e:89:7e:9b:64:12:91:11:24:44:9a:ee:98:fe:89:53:69:
         5f:9a:51:6b:89:16:bd:61:40:b4:25:66:5e:43:54:66:8b:76:
         ba:76:56:66:5f:02:2a:ce:68:e1:d2:55:bc:6d:6c:35:23:4e:
         67:51:2c:3e:e6:58:7f:4e:1b:e2:38:3e:71:57:09:01:1e:f2:
         7c:96:cf:ab:a8:db:ae:5a:57:79:98:ed:de:9b:ca:1d:2d:72:
         f8:67:11:55:61:e8:39:d1:4f:2e:b6:0b:67:5e:0e:c8:48:a4:
         04:00:41:91:99:0f:34:cb:93:e8:bd:be:ff:1f:85:cb:f2:6e:
         c9:7e:15:fb:09:39:ad:2d:a1:ad:74:42:8d:2d:ac:72:a8:b5:
         1a:b9:5b:9d:fc:ac:fc:a4:be:b5:6d:81:ae:0d:86:72:82:3b:
         28:ca:98:fd:d9:f7:cb:04:12:f6:60:3e:1b:9c:06:78:8f:17:
         ad:a9:8c:f4:3a:e0:f2:33:e3:1f:e5:49:80:d4:e9:ac:41:ce:
         91:e3:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----