Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
File:                     dzrmY60KGjBy29hnmSt9jfJaRJo.cer (raw, json)
Hash identifier:          UTGC1FnPcLMFZPXI20gXbwUG9LIreAHsstW+wE1NIkA=
Subject key identifier:   77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019584947A781FB049529AF8574C96A80B49
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 09:41:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49711
                          AS: 50438
                          IP: 91.215.176.0/22
                          IP: 91.220.250.0/24
                          IP: 176.118.152.0/21
                          IP: 193.58.255.0/24
                          IP: 2001:67c:57c::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:84:94:7a:78:1f:b0:49:52:9a:f8:57:4c:96:a8:0b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 11 09:41:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:30:88:eb:d3:01:f5:c0:d0:f5:6c:21:6f:
                    5e:a2:7b:d5:1b:98:36:c6:da:97:30:4e:c2:e8:90:
                    c0:6e:89:3e:fa:62:8d:91:b6:57:bd:14:64:a6:81:
                    56:cf:4d:2a:42:2d:e8:41:2c:12:0b:11:78:ef:35:
                    93:18:1c:37:9a:a3:a0:25:3a:27:a2:6f:69:c3:6c:
                    85:37:94:43:b2:93:c9:75:67:00:f0:ea:a9:be:83:
                    33:24:bb:12:70:dd:46:ab:a9:06:29:5e:53:34:5a:
                    7b:da:01:bc:ee:81:8f:18:59:ed:8c:a6:72:b5:db:
                    53:b8:14:c1:c9:b7:b0:dc:3b:78:90:98:55:ed:11:
                    37:7c:8e:fe:23:ad:bd:c1:91:45:c9:18:fd:03:8b:
                    fc:11:c9:2e:96:29:2b:48:93:c1:c6:f2:44:0a:02:
                    dd:02:a2:a4:92:75:20:de:7f:f6:00:92:b4:94:ee:
                    be:80:f7:93:64:7f:68:9b:06:6e:29:9f:66:36:d2:
                    d5:89:d3:07:39:97:1d:da:2b:69:b4:3d:ca:e1:34:
                    34:84:63:97:c5:f2:07:30:7e:57:a8:28:a1:11:da:
                    97:93:7d:b4:de:43:5d:ba:2f:fd:e4:15:33:3a:fa:
                    ea:79:42:75:bc:06:23:0a:4a:5f:43:1c:3c:02:92:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.215.176.0/22
                  91.220.250.0/24
                  176.118.152.0/21
                  193.58.255.0/24
                IPv6:
                  2001:67c:57c::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49711
                  50438

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:39:a6:46:85:dc:c9:12:d9:d0:24:41:81:b1:f3:c3:66:
         ed:00:ae:ca:68:01:8b:a6:1f:26:6a:94:ab:92:a2:b2:2a:49:
         51:b9:c6:60:54:31:73:5c:4a:c8:cf:1e:51:18:7e:f2:de:5a:
         64:89:bf:18:12:53:db:4c:9b:02:6c:91:64:90:17:5d:a1:49:
         fe:59:ea:58:03:ed:9d:e3:89:a4:79:ad:72:87:41:6b:e0:35:
         00:a8:bf:af:24:9b:02:81:01:e0:e3:ec:b3:7a:4e:a2:a3:e2:
         f0:b1:53:db:ae:f7:36:e3:ed:90:bd:3a:f3:ad:fa:66:dd:7e:
         fd:9b:d1:d2:49:d9:cd:02:5f:f1:d3:b0:78:1a:f3:39:22:01:
         de:3a:b2:2d:fd:4b:2a:63:1d:2e:e0:e5:a6:6d:d8:d4:de:3d:
         f4:c3:b6:e2:ca:35:76:e6:f1:31:62:10:1d:e2:68:26:68:9c:
         b2:2e:33:cd:21:40:5e:fd:fd:2a:91:83:de:83:e5:4d:e2:58:
         d3:c6:1f:4c:18:da:d9:a2:9a:38:28:77:44:7d:c4:61:5f:52:
         da:95:c5:f6:fd:a9:d8:32:b9:70:75:14:75:db:1f:dc:96:99:
         46:d5:87:af:c5:d7:df:c8:3c:38:0a:44:78:ba:c7:48:6a:90:
         8c:7c:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----