Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
File:                     zRJC5sfr2Coj-hoI85br5as0z2s.cer (raw, json)
Hash identifier:          DFu+R7EMi10cKciLLLuguu0/oZZsgtbgbSgKsTml/iY=
Subject key identifier:   CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3E95D23F36CFEBE80B10632C71506
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208978
                          IP: 45.10.32.0/22
                          IP: 2a0e:2100::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e9:5d:23:f3:6c:fe:be:80:b1:06:32:c7:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:c8:9f:14:a5:68:79:44:29:ac:b5:06:c5:
                    d1:aa:76:0d:f0:83:52:f9:b6:06:21:be:05:c4:17:
                    e2:6d:05:5a:76:db:a2:d2:0f:19:1f:57:3a:21:69:
                    8b:8b:37:94:0e:c8:78:d6:d2:48:16:f9:36:97:59:
                    45:33:35:8b:c0:56:28:56:c1:9f:7b:20:11:79:de:
                    dd:6d:d1:86:65:67:45:19:2e:4f:d1:09:b9:ce:7f:
                    96:65:61:45:b9:f8:ca:af:01:ca:4e:fd:ca:e6:c4:
                    47:75:a7:fc:53:7f:b5:9e:40:04:d2:01:02:ac:2b:
                    7a:ba:a2:68:74:d3:5c:fc:6f:69:09:40:d0:ae:77:
                    fb:a6:c8:82:3f:ba:e0:7a:9c:96:2a:46:24:94:a3:
                    5b:15:75:d7:18:df:43:c3:2f:58:b2:0c:3c:67:d0:
                    e2:76:1c:8c:b6:b8:ea:b8:b9:d9:4b:e6:72:97:84:
                    ca:e1:f8:0a:91:64:9c:a5:95:23:1c:6b:13:74:01:
                    26:cc:70:ac:73:9c:eb:95:be:0f:36:d5:fb:9b:d2:
                    1a:fc:10:e7:d0:49:f6:96:2f:e1:cc:c1:cd:37:5c:
                    e4:72:38:a4:ef:b1:9c:5a:e1:99:f4:5d:bc:cc:de:
                    fb:fc:45:c4:70:6d:eb:c2:0d:91:cb:47:07:e4:25:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.32.0/22
                IPv6:
                  2a0e:2100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208978

    Signature Algorithm: sha256WithRSAEncryption
         96:53:a2:49:5a:1a:1a:59:9d:d8:2c:f1:7f:7e:a3:0a:91:cc:
         7d:b2:27:d2:55:10:3a:50:aa:ac:2f:c2:6a:b6:a5:1a:7a:92:
         25:a9:48:2e:43:02:ff:22:12:bf:d0:1f:22:89:8f:f3:18:30:
         93:f7:4b:be:41:fc:20:ce:20:55:18:0f:e5:7d:7d:0b:99:f0:
         f2:7b:4d:e4:1d:16:77:82:83:52:59:e2:cd:78:af:94:61:67:
         1c:27:83:c0:ff:43:8e:07:93:d5:62:9d:79:cf:50:67:19:1e:
         8b:c2:40:df:6e:e4:7e:30:8b:90:25:61:2c:99:20:59:5a:57:
         4c:93:cb:4d:0f:f9:54:ac:4a:80:5c:34:87:30:6a:51:1a:f2:
         e2:be:74:5d:5e:1f:a9:7c:12:67:12:29:54:ac:be:ae:32:8e:
         4c:f7:db:07:d2:a5:e7:82:06:f0:5b:02:9a:d9:8e:1f:e8:14:
         e4:4b:84:6e:5b:ab:9f:39:57:14:c8:86:f9:1b:63:3c:17:6f:
         dd:f7:ba:8f:98:a3:68:8b:c0:06:f8:6b:c7:ad:1a:4f:82:a0:
         b9:bf:6f:34:e5:d8:2e:a1:2e:c1:dc:32:cd:06:6c:6c:49:4a:
         3a:19:f6:94:48:16:32:f5:ea:85:0e:a1:f2:fa:92:fa:76:47:
         71:9b:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----