Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
File:                     zJxBoSN2TPfcDy25hB9zKjuWE0M.cer (raw, json)
Hash identifier:          FgL2n96fUb48+0jx2yFuZcCjKW0ilOeLZIyZBOYc7/Y=
Subject key identifier:   CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C6C2BBA1794CCFF46CEB64FAB7F2B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201246
                          IP: 103.58.8.0/22
                          IP: 185.80.16.0/22
                          IP: 188.114.120.0/21
                          IP: 2a05:7980::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:6c:2b:ba:17:94:cc:ff:46:ce:b6:4f:ab:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:65:24:0e:0e:fb:01:36:91:e3:f3:77:60:
                    8e:11:9e:e5:a1:d7:02:f3:a7:58:1b:09:29:4e:b1:
                    8e:d1:47:b1:af:d5:78:ad:56:18:7f:9e:d7:28:22:
                    b5:31:ed:78:19:d9:16:49:fc:10:f2:5f:e7:aa:e4:
                    9b:05:b9:c8:9c:74:95:74:a8:9a:96:ef:fd:1f:66:
                    46:ac:67:6e:4e:11:cb:e2:28:5b:d9:46:0d:f4:5a:
                    91:01:86:56:96:32:85:b7:8c:c3:ea:a7:7c:1c:7c:
                    f6:29:cc:8a:0e:7b:52:b9:27:9f:67:43:97:2b:5f:
                    57:db:eb:1a:52:14:6f:86:44:45:b4:61:23:5e:07:
                    4b:95:f4:11:9a:f3:84:4c:4e:a7:ab:de:2b:04:dd:
                    d7:49:71:cf:eb:2f:e9:d3:64:db:b0:4a:e1:0d:a6:
                    35:2e:8c:55:0e:40:3c:aa:b4:d3:4b:e2:6f:d0:e4:
                    5e:5d:4e:07:96:c5:53:25:78:49:6e:59:2a:7d:73:
                    47:2b:74:a0:87:b8:d2:0b:ef:58:f0:b8:c6:cd:02:
                    a3:5f:5a:bd:38:51:f1:2b:5e:64:d4:c4:f9:b3:8f:
                    0c:a8:4b:82:c4:3c:69:87:fc:97:19:51:d1:ad:9e:
                    08:5e:e3:77:6a:c4:6d:61:0b:4f:0f:36:04:44:b2:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.8.0/22
                  185.80.16.0/22
                  188.114.120.0/21
                IPv6:
                  2a05:7980::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201246

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:4d:1d:31:0a:e3:a8:9f:da:6a:c1:e9:e4:aa:64:ce:91:
         01:a4:52:66:e6:41:56:c3:33:04:5e:5e:43:9a:bf:46:04:5c:
         3a:c7:89:3b:56:e9:7b:a4:5a:67:81:82:04:d8:03:ed:0d:2e:
         5b:59:2e:40:a0:26:77:f9:63:ad:a5:c8:ba:48:18:85:ff:e1:
         91:47:19:60:2b:b5:7e:a5:6e:0f:3a:da:84:db:f9:12:9a:69:
         30:24:1e:34:f2:23:8d:45:ef:41:b0:96:b4:e2:f3:c0:33:e3:
         5c:24:73:ff:33:b2:44:04:93:77:30:78:33:6b:27:9c:82:65:
         6c:50:a8:99:77:21:ab:3c:db:70:12:4f:23:c4:80:17:09:6a:
         cf:08:1c:cc:b3:8e:a3:92:ea:4d:e9:e2:d2:1d:33:8b:8f:db:
         0e:bc:fc:7b:70:48:1d:95:4a:5f:70:10:40:5c:57:f2:1b:71:
         99:73:dc:bc:70:5e:86:94:86:07:62:da:d2:d6:08:c2:a7:70:
         3f:d2:0c:d0:65:82:a8:03:45:6f:cd:98:24:e9:52:4f:ca:8f:
         25:74:fb:79:88:f2:e1:fb:b3:c6:f2:83:ee:53:9d:80:08:58:
         7a:66:cd:9b:3c:47:08:f4:f0:47:c8:0e:f6:16:ef:72:cb:fc:
         5c:22:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----