Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
File:                     fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer (raw, json)
Hash identifier:          jK2cQnB0EzBHkeD6KUNE3o2F1NQVRxJlfBnP1I4+apE=
Subject key identifier:   7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC0ABEE24D4E0B606362FBEE352CFB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 9104
                          AS: 60803
                          IP: 46.18.232.0/21
                          IP: 185.161.220.0/22
                          IP: 195.60.128.0/19
                          IP: 212.3.160.0/19
                          IP: 2001:16d0::/32
                          IP: 2a00:8260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:0a:be:e2:4d:4e:0b:60:63:62:fb:ee:35:2c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:d5:b6:d0:5c:e9:a3:94:f5:b6:87:22:fd:
                    cf:48:53:ea:6a:c3:89:04:d4:48:c7:c1:3f:6c:ee:
                    0d:77:41:5e:e0:27:17:6a:39:dc:60:04:85:e1:f8:
                    1e:1a:83:a5:60:3e:8d:84:b4:15:86:30:7e:6a:e9:
                    e4:d1:00:ef:68:df:0e:fd:61:96:93:48:fb:18:e1:
                    b3:45:91:9e:1a:8e:d6:99:c5:10:b5:37:24:a9:44:
                    23:4e:74:45:63:cd:6f:56:cc:c8:2c:d3:f5:13:53:
                    61:7c:76:03:e8:f4:c7:0d:28:f6:16:55:69:e9:3f:
                    97:e9:93:5f:a7:d8:78:c8:a4:b4:ce:d6:da:9e:9d:
                    c3:e2:51:65:2a:a1:0f:01:bd:5a:43:d3:de:52:87:
                    99:d7:73:f4:21:8e:a2:4b:4c:87:ec:9f:29:15:06:
                    70:41:cf:ef:ac:0d:b5:1c:a3:44:f9:22:e7:93:db:
                    d0:06:4d:27:f0:19:9c:5b:ee:b2:76:98:ed:75:ce:
                    5e:e4:06:9c:50:db:bd:36:1a:40:d7:f1:20:1a:f4:
                    97:c9:5a:a4:2d:39:ce:64:6d:61:ae:96:b0:1d:c6:
                    ad:66:c0:28:b4:e4:e4:93:34:1d:93:6a:95:bd:ee:
                    a6:d0:3b:01:bb:7d:f9:f3:bc:09:a8:77:27:5e:51:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.232.0/21
                  185.161.220.0/22
                  195.60.128.0/19
                  212.3.160.0/19
                IPv6:
                  2001:16d0::/32
                  2a00:8260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9104
                  60803

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:ac:f6:84:28:96:22:a2:07:1d:d9:25:a6:a1:e3:de:08:
         61:df:ba:ae:37:5e:3d:8c:20:f7:f3:3d:af:77:2f:dd:fd:ca:
         9f:f5:bb:4a:1d:c5:1e:7b:5b:7a:0d:99:c8:7e:99:e1:1d:1f:
         11:4e:90:f3:5d:ed:4e:d1:e9:1f:a9:d5:71:40:e8:ea:27:7e:
         e5:d1:6e:27:95:5b:cd:8d:c7:66:78:02:42:be:83:e3:4c:b3:
         b0:6c:ec:d0:d8:2c:77:a6:da:4e:d6:50:ce:d0:b1:3e:ad:c2:
         50:e9:82:c6:71:fc:df:dd:9e:73:53:44:be:4e:47:45:5f:9c:
         9a:b8:66:ee:93:f5:28:c1:a2:86:c1:1a:63:ba:7b:c0:0b:a2:
         57:67:fc:c6:e8:6e:11:f2:d6:5e:48:ff:ea:c7:88:05:73:58:
         34:5b:de:60:ec:58:d3:9e:c5:b2:38:20:55:78:ae:a0:d3:cd:
         a0:04:c6:81:21:39:17:22:4e:e2:98:cf:2c:fa:51:15:70:89:
         ff:a9:e6:44:9f:db:dc:03:e6:25:42:aa:08:59:67:09:6e:5b:
         aa:fc:41:26:44:2c:e7:a0:66:da:db:02:45:3b:1b:01:d8:69:
         97:19:22:16:41:69:22:ad:8c:4b:b8:52:6a:5c:c0:a8:38:f3:
         d9:3e:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----