Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
File:                     pj_zsazNggGkEWyYdXM5I0KJgB4.cer (raw, json)
Hash identifier:          ME49wuUYix2Urx+n784LIjGzih9gFW56EAxSLGrnVtk=
Subject key identifier:   A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC217EC71480E1D41FED6AE34D4AE5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215199
                          IP: 2a14:3140::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:21:7e:c7:14:80:e1:d4:1f:ed:6a:e3:4d:4a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a63ff3b1accd8201a4116c98757339234289801e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:37:5c:26:45:ba:34:46:df:b8:61:c2:59:
                    45:4a:fd:3e:6e:f2:8e:55:bd:6c:33:f5:0e:1e:3d:
                    cc:a8:bb:44:8e:fc:61:da:99:5a:19:6b:99:75:e6:
                    ab:82:a3:ac:49:b9:2e:87:9c:c1:db:50:f5:8a:20:
                    88:1f:1b:98:48:60:9b:15:1a:9c:fd:5a:57:84:39:
                    23:19:61:af:7f:c2:67:cd:46:0f:78:80:29:20:fc:
                    aa:79:e6:9c:5a:ca:5c:ee:6b:55:40:28:c9:f7:61:
                    d8:48:26:7f:36:c8:78:29:36:c3:fe:1a:79:1e:e9:
                    08:b7:a3:62:3a:56:c7:58:8b:91:1b:4c:84:62:53:
                    70:ee:6a:52:95:73:84:ec:b6:99:3c:36:c0:33:96:
                    43:12:62:93:d8:eb:0b:6a:e7:c0:6c:fa:4a:66:15:
                    33:f0:8a:46:47:3d:71:58:bc:0d:b9:fa:25:ec:de:
                    e0:2a:24:42:c0:c5:20:b9:57:a1:64:d1:9f:4e:0e:
                    d9:50:48:50:65:57:64:f7:b1:c3:65:ae:82:ac:b2:
                    2a:d2:a0:6f:1c:76:e4:8a:21:c2:13:09:7d:b8:01:
                    f5:a8:33:74:52:2b:51:56:1e:e2:3e:3c:08:8f:fe:
                    92:0a:87:eb:97:ba:a7:52:19:89:1a:63:9f:da:f0:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:3140::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215199

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:7a:42:b1:8e:5a:29:c2:1b:2e:67:9b:44:cc:be:38:56:
         d6:9e:41:32:ab:73:f2:fe:3e:b7:ad:ca:b0:9a:9b:a5:bd:a9:
         a5:e6:eb:e6:41:a6:8a:ae:c9:6c:68:3e:2e:e0:ae:e7:17:c1:
         1f:11:16:76:df:86:6d:ad:cb:4b:e2:9d:b1:59:54:84:d5:7d:
         0b:dc:0a:d6:a7:b8:78:fc:32:a8:e4:fb:44:11:7d:45:65:1e:
         7c:07:58:72:55:41:89:80:bc:ab:58:8f:7a:e2:5a:64:5b:f4:
         6b:06:80:90:0b:1c:9e:fa:78:6a:32:79:2d:a5:6a:a6:96:e3:
         c0:74:bd:cc:73:48:3a:3d:b1:7a:b8:13:cf:32:6e:23:ba:f7:
         f4:f9:2a:90:b0:81:f3:8c:6e:4d:44:2e:85:a4:c8:74:b4:61:
         3c:99:4b:9e:eb:5a:80:2c:6c:2f:33:18:62:92:64:a0:4b:b3:
         f3:80:b0:b0:5d:93:9d:79:4d:45:7f:c1:38:34:3a:07:e9:04:
         b4:1a:1b:e5:88:85:76:c6:85:fd:da:16:b1:a5:87:7b:52:43:
         58:b0:05:63:95:10:db:68:dd:cd:20:2a:a3:48:8f:83:67:d3:
         74:93:5d:48:66:1e:8b:f1:0c:d9:8c:e4:c8:0f:41:2c:35:8a:
         7a:cf:ad:5f
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZQl/CF+xxSA4dQf7WrjTUrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjNmZjNiMWFjY2Q4MjAxYTQxMTZjOTg3NTczMzkyMzQyODk4MDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRc3XCZFujRG37hhwllFSv0+bvKO
Vb1sM/UOHj3MqLtEjvxh2plaGWuZdeargqOsSbkuh5zB21D1iiCIHxuYSGCbFRqc
/VpXhDkjGWGvf8JnzUYPeIApIPyqeeacWspc7mtVQCjJ92HYSCZ/Nsh4KTbD/hp5
HukIt6NiOlbHWIuRG0yEYlNw7mpSlXOE7LaZPDbAM5ZDEmKT2OsLaufAbPpKZhUz
8IpGRz1xWLwNufol7N7gKiRCwMUguVehZNGfTg7ZUEhQZVdk97HDZa6CrLIq0qBv
HHbkiiHCEwl9uAH1qDN0UitRVh7iPjwIj/6SCofrl7qnUhmJGmOf2vA6lQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFKY/87GszYIBpBFsmHVzOSNCiYAeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzI2ZTIx
ZS1kYjgxLTQ2YzctOTU1YS03N2QzMTVjYzE2YWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMjZlMjFl
LWRiODEtNDZjNy05NTVhLTc3ZDMxNWNjMTZhYS8xL3BqX3pzYXpOZ2dHa0VXeVlk
WE01STBLSmdCNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhQxQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDSJ8wDQYJKoZIhvcNAQELBQADggEBAEPHekKxjlopwhsuZ5tEzL44VtaeQTKr
c/L+PretyrCam6W9qaXm6+ZBpoquyWxoPi7grucXwR8RFnbfhm2ty0vinbFZVITV
fQvcCtanuHj8Mqjk+0QRfUVlHnwHWHJVQYmAvKtYj3riWmRb9GsGgJALHJ76eGoy
eS2laqaW48B0vcxzSDo9sXq4E88ybiO69/T5KpCwgfOMbk1ELoWkyHS0YTyZS57r
WoAsbC8zGGKSZKBLs/OAsLBdk515TUV/wTg0OgfpBLQaG+WIhXbGhf3aFrGlh3tS
Q1iwBWOVENto3c0gKqNIj4Nn03STXUhmHovxDNmM5MgPQSw1inrPrV8=
-----END CERTIFICATE-----