Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
File:                     hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer (raw, json)
Hash identifier:          pN6nKqOdT8Thw5Ma/Z4yFyDGLQZXRie/N0fXA3ykgEE=
Subject key identifier:   85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01961B0EDC62B4B62494659AE4751829A4CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 09 Apr 2025 14:58:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39864
                          IP: 91.232.94.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1b:0e:dc:62:b4:b6:24:94:65:9a:e4:75:18:29:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  9 14:58:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:eb:fe:a2:f4:16:0c:3b:03:72:01:b2:a4:
                    4a:91:66:fa:4b:6a:35:be:d7:72:61:e5:5c:5e:a2:
                    a8:2e:d6:48:45:63:6f:bd:b3:9f:95:b5:76:97:8b:
                    eb:bd:86:8f:3f:62:3d:ef:8f:4d:3d:68:0b:93:a2:
                    36:2c:e9:10:80:71:44:21:b6:e6:84:6c:62:ad:28:
                    48:ef:a4:a5:53:03:de:35:bb:71:51:d6:f8:44:a3:
                    1b:09:ab:1b:ae:64:c9:b9:91:5e:36:88:c0:6b:e3:
                    7b:93:d7:01:e1:46:94:9b:78:47:09:f5:a9:27:d7:
                    81:10:be:33:7f:58:ee:7b:05:80:2d:62:73:25:cc:
                    7a:b0:30:54:49:f5:0f:23:60:92:63:85:92:9e:9f:
                    df:3a:4c:4a:3c:f0:3d:ed:87:88:8f:87:f6:4e:77:
                    7d:1e:69:27:dd:e3:a8:28:bf:73:93:e1:a5:d9:3b:
                    91:f8:e4:28:f1:46:1a:24:66:52:9b:68:24:16:61:
                    c2:ac:85:b2:27:95:dd:a5:1c:f8:a4:1f:10:0e:14:
                    2d:d4:d7:a0:ba:1f:c7:12:e2:2a:78:4c:a2:c9:19:
                    e4:48:b0:e9:88:0a:03:a7:b7:d9:74:fc:68:34:02:
                    0d:77:0f:61:de:32:c7:5a:87:83:78:7c:a4:32:18:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.94.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39864

    Signature Algorithm: sha256WithRSAEncryption
         01:be:c2:0a:77:3b:4f:6f:db:2e:89:92:17:54:ef:ac:46:56:
         0a:04:da:ac:03:2b:26:23:89:a4:98:d8:43:df:fa:a8:ab:c1:
         b7:93:7d:b0:b9:af:75:88:71:86:e1:cd:df:7d:f9:e8:3c:df:
         7b:b8:e3:19:d9:ad:a1:0c:3e:1d:83:05:63:71:90:e3:d6:5a:
         a1:bd:84:a3:1d:25:66:e3:45:6e:6b:65:75:a8:03:ab:a5:60:
         fc:22:e5:37:23:19:f1:3e:f2:65:06:d4:e1:c8:56:f9:ca:a4:
         25:9d:df:7f:85:b5:34:0f:fd:79:06:91:79:7d:1f:5c:e2:4b:
         ad:79:9d:b7:ed:39:f0:7c:68:66:7a:75:64:40:5f:0f:4a:4a:
         3a:ae:46:2e:4f:51:a0:b6:4d:5f:10:08:b5:df:f6:bc:8f:c9:
         ef:ce:04:76:75:a3:ae:2f:3b:fd:65:47:8e:63:47:53:f2:3a:
         51:69:04:87:e1:2b:bc:3a:09:95:cb:15:8d:3e:3b:6f:1e:66:
         e3:8c:12:06:17:15:4a:e0:a3:d8:0a:9d:b3:ff:50:65:ba:c0:
         9b:e9:39:db:82:46:d1:09:9b:36:f6:2b:17:3d:9e:69:54:92:
         c7:59:b0:32:80:52:64:37:48:cb:37:d0:46:00:c0:b9:14:22:
         74:70:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----