Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.cer (raw, json)
Hash identifier:          UVTny87J0aVdljah6fVJObubT63KpDEibu9FXISif08=
Subject key identifier:   03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194739D44126C7BE3C864C852428D8458EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 17 Jan 2025 09:34:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.84.156.0/24
                          IP: 2a14:16c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:73:9d:44:12:6c:7b:e3:c8:64:c8:52:42:8d:84:58:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 17 09:34:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:c8:c5:b4:7a:6b:35:4d:31:bd:25:f8:b3:
                    15:0f:d8:dc:de:2f:f0:f3:b5:d9:22:ea:20:29:5c:
                    65:9c:87:95:2e:8a:ef:74:ec:bf:ee:22:68:cc:c6:
                    15:59:71:51:72:14:9a:c9:a3:20:f6:80:4a:b9:5d:
                    eb:c5:f3:d5:32:06:21:4f:a6:54:d9:7b:d3:79:75:
                    c7:82:e9:ed:fc:7f:92:9f:ba:0b:f4:a0:ad:2b:95:
                    fb:f9:8a:e8:5d:19:14:aa:b8:14:34:46:76:1c:db:
                    7b:fd:12:25:d6:6b:c5:58:de:88:4b:65:f3:10:4a:
                    37:a3:61:86:82:35:fc:74:a7:7a:84:6a:02:8e:8f:
                    ea:4c:71:bd:d2:63:da:c8:24:14:7f:4e:05:16:f8:
                    02:a8:c3:fa:63:2f:cb:07:12:63:53:e2:38:56:54:
                    c9:5b:57:d0:bf:56:5c:7f:96:f9:a5:d9:30:51:17:
                    26:f6:76:95:cc:aa:56:34:0a:f7:dc:ad:82:19:34:
                    31:84:e3:fd:86:f4:c8:5e:46:4b:7b:4b:db:6b:60:
                    ab:ba:d0:40:46:d4:36:5e:b6:9e:68:84:c7:01:53:
                    72:b8:7a:d6:e5:f1:a7:32:7c:f1:6f:10:d8:aa:13:
                    a8:e4:ef:fe:32:3c:08:31:c3:1e:31:61:c6:7c:af:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.156.0/24
                IPv6:
                  2a14:16c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:b9:5b:5b:bd:6a:c8:67:dd:ce:5f:eb:99:0b:f0:81:5c:
         3c:04:72:f1:d7:5e:2e:f7:6b:8e:74:26:b4:71:a3:09:0d:a3:
         d4:5a:ec:e4:02:e0:2d:a9:db:92:5f:b6:70:a1:c3:04:ab:4d:
         46:b4:f0:bd:46:fa:c1:5c:82:26:ac:85:b9:f1:1b:3f:e0:bb:
         2f:4d:a7:fc:39:43:e2:4c:c4:8b:c7:2d:87:44:66:57:e4:91:
         56:23:40:1a:31:d9:92:d7:c1:e2:42:ff:3b:17:4f:47:af:c0:
         fe:d0:ba:1d:30:eb:ec:05:68:aa:c2:f3:8c:a8:18:af:4d:b3:
         2a:f7:c9:89:95:52:1a:3b:c8:95:27:8d:96:c7:46:ad:de:f5:
         c6:7c:e9:63:92:24:bd:7d:14:85:ae:9c:f7:c8:19:cd:50:77:
         44:e1:51:25:3b:0e:9e:2a:fd:9a:56:02:27:96:58:d0:58:9c:
         00:44:b1:dd:fd:5e:2b:b1:6a:55:de:cf:52:93:54:89:4b:af:
         68:06:4a:99:f4:7d:b4:4a:3a:3e:23:ec:a2:15:05:e3:c6:39:
         26:83:d8:41:4b:1c:ac:99:c5:fc:57:7d:9c:07:b7:05:bd:b3:
         ed:7a:12:6c:0f:54:9a:ad:fe:7e:bf:36:26:40:93:46:18:dc:
         08:77:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----