Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
File:                     cz2mpsToscTOPyBLtL_Z2GoPVh4.cer (raw, json)
Hash identifier:          6XvpgwbNvgFjZhd/xAf9PerX+FiPoAmR8L5kiVqwwjs=
Subject key identifier:   73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C30E9325E622441FA6935C67C24B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51280

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:30:e9:32:5e:62:24:41:fa:69:35:c6:7c:24:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:00:7e:8e:00:ec:c4:2a:1f:6b:30:83:f6:
                    d1:01:65:11:47:90:7f:72:cc:1a:87:d4:41:82:36:
                    57:71:fa:86:1a:71:3e:41:74:96:69:00:f8:4a:78:
                    3b:70:fa:9b:08:d7:55:16:b5:d4:48:81:1c:47:5b:
                    7c:c9:f9:45:72:ec:b1:7f:e4:7f:d5:78:93:c8:5d:
                    8a:09:39:89:ea:05:2f:66:1a:3d:1b:6d:98:8b:cd:
                    cf:f4:36:4c:0a:37:15:8c:21:41:ed:94:05:fc:7d:
                    19:a1:20:a2:6c:3c:40:cf:3c:56:45:65:0b:e1:f6:
                    59:a2:69:01:c2:26:54:bf:01:e4:8d:8d:49:08:bc:
                    aa:3a:ca:59:91:52:7e:89:d1:d5:38:c4:2b:ae:71:
                    c0:9b:43:cc:3f:d2:ef:45:10:9e:e5:b9:b7:00:6e:
                    57:21:23:87:05:af:05:55:51:0d:b2:b5:c9:b2:d5:
                    12:f7:b5:d7:57:38:70:2e:0c:fc:7a:19:e5:8d:0b:
                    47:2a:27:2f:b3:56:03:2b:58:ef:f7:fe:54:d3:cc:
                    73:5e:0f:fc:8b:80:9f:f3:6b:45:e0:ce:09:e4:13:
                    85:e2:da:5e:93:30:20:a0:c1:df:46:16:ec:1d:1b:
                    c5:7a:3f:e4:c1:d5:cc:12:a5:eb:08:f5:d2:67:26:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51280

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:60:e3:23:5c:e8:89:77:8e:31:23:1f:e8:6a:4f:5c:a2:
         61:1a:2c:2f:52:94:0c:a0:2c:a3:96:90:b4:2b:1d:6b:c8:cd:
         66:14:37:f6:9e:33:39:74:e0:f1:1c:c1:f9:77:c5:f0:1b:1f:
         ef:06:87:0e:47:9e:a2:36:48:34:94:5a:33:7b:f7:1a:85:d4:
         4b:7f:8f:77:e7:40:03:99:30:d1:f0:13:59:34:78:09:cd:23:
         c9:61:09:38:55:89:b7:4b:b2:03:df:3b:92:4e:70:ae:2a:41:
         c0:8e:80:16:75:fd:5a:e0:8c:0c:95:15:5f:81:b0:af:5e:69:
         6c:d1:c1:71:e5:d2:eb:42:0d:84:a3:2d:7d:ce:35:11:d7:97:
         f7:89:51:bf:49:f5:7e:2a:ee:2b:90:fc:9a:94:2f:6b:da:7b:
         90:30:9e:9c:b7:86:f6:d1:2b:e3:57:3a:23:33:27:22:c2:bc:
         58:49:70:fd:ca:62:d5:c3:e8:8a:29:92:05:74:94:f3:f3:b4:
         9b:12:fa:cb:ff:93:04:b2:0c:8c:96:d3:c5:e3:a7:72:de:59:
         2d:57:0e:f6:d8:ba:52:88:67:4e:9c:77:e1:11:7f:98:4e:c3:
         e0:d6:f1:92:58:9f:51:b5:6b:0d:a3:5d:d3:02:23:4e:96:65:
         ec:a5:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----