Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
File:                     zfUae0xbJFgCkrjEqmqpwyVmVIA.cer (raw, json)
Hash identifier:          0UG9DjoZAr/p0RbhbGLExjdmyY7hm6DH5GlINYK/wsI=
Subject key identifier:   CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C205129306AB1874D009598B1171A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:07 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48271
                          IP: 212.2.224.0 -- 212.2.232.255
                          IP: 2a01:96a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:20:51:29:30:6a:b1:87:4d:00:95:98:b1:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:af:35:c0:4a:cf:c0:d5:78:5b:cc:f8:9a:
                    84:2f:2d:0b:62:30:70:d0:5c:99:68:b7:da:ab:df:
                    18:44:3f:bc:05:d9:42:65:fd:cf:38:8e:b6:2f:e6:
                    2a:88:42:1e:02:3b:a0:b6:ab:da:2b:c0:77:e7:7d:
                    cf:d7:31:b4:90:fa:8d:c8:d2:0d:5b:8d:9d:78:4b:
                    f2:96:b8:25:16:a3:b5:dc:8d:4f:cd:d6:6b:51:82:
                    2f:1f:eb:a6:b9:ae:94:dc:99:4e:4b:d8:ff:2e:52:
                    2a:72:b8:60:dc:e3:89:04:fc:76:a6:40:bf:2b:4e:
                    6b:12:eb:31:c5:1b:88:43:cb:ba:62:f0:76:7c:13:
                    ad:9e:bb:55:6e:9a:67:4d:d5:70:9b:3a:ca:b8:56:
                    4b:89:4b:28:62:28:53:f4:1f:f7:32:fb:60:50:9f:
                    59:49:1a:a8:14:7c:96:c7:55:e7:3a:42:bc:f2:ff:
                    55:fd:bb:53:a0:7d:61:d6:ff:c7:19:7c:c3:e5:ac:
                    ca:78:f6:6e:9e:41:6f:4b:c7:a1:0d:ed:74:e1:d0:
                    d4:f7:80:80:e6:15:83:69:9b:b7:1c:96:c0:4f:45:
                    06:59:ca:48:a2:98:32:3a:0c:cd:3f:e9:ff:6f:93:
                    26:cc:86:cf:89:78:df:4d:c8:f3:0d:06:dc:50:ea:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.2.224.0-212.2.232.255
                IPv6:
                  2a01:96a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48271

    Signature Algorithm: sha256WithRSAEncryption
         67:c8:9b:e6:6e:ff:f5:db:00:15:dd:f7:02:a2:a7:df:8d:17:
         11:0e:16:40:40:32:98:d3:35:cb:a2:1b:55:d2:bd:8b:e3:34:
         1b:35:1d:14:c1:7b:67:28:65:66:56:ec:da:d6:82:e9:3c:85:
         c8:e4:05:e4:fa:82:1f:79:4d:3b:2c:4f:8a:ff:5c:bd:22:84:
         a1:fd:e4:a5:ae:07:62:6d:db:d7:bc:91:28:46:94:56:c0:63:
         aa:14:8d:45:c4:4f:d8:db:ce:83:3c:d5:4c:3b:03:62:bb:77:
         89:38:d6:90:f4:b8:2c:2d:54:2b:ec:bc:87:e3:ab:ef:4b:97:
         d6:68:91:1e:2a:a1:5b:02:f3:60:b9:e0:57:70:7e:c6:b9:79:
         dc:1a:26:7d:20:4a:6a:e0:e3:37:bb:e2:e4:1a:0a:0e:85:29:
         21:d8:88:e2:0b:24:d0:49:a4:db:0a:d4:65:b0:3f:02:ca:7e:
         6f:f3:5a:92:af:dc:dc:e5:26:fd:3e:f0:cf:24:03:7f:9f:a9:
         21:e6:60:97:00:42:48:ef:d6:0b:80:dd:29:a2:1b:11:a0:fe:
         33:0f:6c:46:b5:1b:41:37:c5:31:97:12:27:72:2b:19:2e:13:
         0a:9d:fc:81:af:9a:1d:3a:46:f3:79:df:eb:7a:f8:29:a1:ce:
         6f:44:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----