Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
File:                     hzcmsXsBvwtUQm0YEPI9xPWPans.cer (raw, json)
Hash identifier:          WVkcDP4wb2dt76YfoWLFdAgXv1rr6BDftT5Iy9O8ozI=
Subject key identifier:   87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FCB329AFDB3A4D6290713137CD3832
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49824
                          IP: 91.225.200.0/22
                          IP: 91.245.72.0/21
                          IP: 193.93.216.0/22
                          IP: 2001:678:604::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:b3:29:af:db:3a:4d:62:90:71:31:37:cd:38:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:0a:c7:94:8b:b3:36:f8:ec:6b:da:f8:ed:
                    57:c5:ed:bc:ed:3d:f2:e6:09:a0:a8:9b:93:84:51:
                    a6:09:5e:da:a3:36:fc:6f:df:88:09:09:0c:8a:99:
                    24:d4:a8:c4:a8:7f:d1:aa:fa:49:d4:2a:69:e2:f5:
                    64:a2:7f:7f:46:9e:77:ce:3d:f6:b1:b4:96:2b:e5:
                    e7:d6:ce:b9:8f:70:d1:74:0d:4b:ae:a5:bc:be:66:
                    ae:76:64:d0:54:51:b0:73:b4:54:e1:9c:f8:3f:ce:
                    8d:2e:ad:3a:80:9a:94:68:59:24:f5:36:6e:dd:51:
                    e7:af:7d:53:58:ed:db:c0:dc:e6:4d:9a:65:86:c0:
                    65:f6:8b:ae:a0:68:4a:5d:d7:11:0a:cf:ef:1f:98:
                    4d:05:8e:a6:2e:a9:b4:15:a4:ff:0b:69:58:4f:7b:
                    a5:45:06:ae:ad:8d:fe:68:6b:c4:bd:9b:d9:02:61:
                    b1:81:07:05:00:1c:b9:e1:95:a3:80:29:0c:01:aa:
                    96:ee:de:8a:08:9a:e9:e8:dc:3b:4e:84:41:59:8e:
                    f0:b0:71:53:54:cf:02:39:c2:ba:e0:1f:87:aa:c7:
                    f7:50:81:37:94:bc:fc:fd:da:17:a3:3b:9f:bb:68:
                    61:7e:1d:16:d5:d0:ea:56:dd:55:f1:67:ae:b1:3f:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.225.200.0/22
                  91.245.72.0/21
                  193.93.216.0/22
                IPv6:
                  2001:678:604::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49824

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:ac:51:f1:fe:86:84:3a:3a:82:ed:eb:74:41:29:1d:0c:
         24:42:8e:7b:9d:e6:31:42:33:23:73:fb:f0:c6:20:49:77:75:
         20:19:8d:14:ee:ac:01:c6:78:9a:98:58:89:af:27:08:62:98:
         fb:69:bb:cc:96:0d:9d:99:73:31:ed:a8:aa:31:7d:04:46:65:
         70:c7:73:e3:25:15:e5:8a:44:72:04:7d:36:a4:60:a3:15:c8:
         fe:d9:ba:60:8f:a4:f3:81:3f:e6:8c:ae:d6:2b:a4:ba:c7:f7:
         5b:44:07:c3:3f:73:92:1a:e4:39:0e:11:6a:64:e1:95:7a:15:
         3b:79:ae:ad:f8:3f:d8:1e:a6:c5:25:46:5b:dd:33:2e:90:72:
         02:91:17:3c:bb:e6:c2:f3:76:2f:00:f1:ba:ac:d4:fd:45:64:
         55:fd:f4:b4:3f:4d:a9:0d:84:8c:84:3e:fd:a7:ac:20:68:ad:
         92:f2:21:c9:e7:80:0a:40:e3:b3:f1:15:86:19:6f:83:8a:98:
         74:4b:7b:4f:7b:7e:2c:fa:38:ca:3d:c0:dd:76:8e:a0:bb:0a:
         f9:54:24:10:d9:c5:79:fc:b6:da:b6:47:32:9f:cd:1b:d3:17:
         b5:8c:6e:d3:a7:1a:12:67:37:80:c4:cf:e5:b3:ca:db:24:55:
         a6:67:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----