Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
File:                     Z84XnL4T3bFAEphaBnEA75ilVgE.cer (raw, json)
Hash identifier:          PVcVwjpK44SbPSud96HO5arHWzv4Re34CrXpII/44rI=
Subject key identifier:   67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA39AE4A5C61CB9F1A8A1F5B261F0E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:48:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51345
                          IP: 92.42.101.0/24
                          IP: 2a13:1c40::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:39:ae:4a:5c:61:cb:9f:1a:8a:1f:5b:26:1f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:30:0f:c3:e8:5e:b3:4a:1b:54:c6:36:0a:
                    a2:92:01:dd:de:2a:ac:39:3c:ab:0a:d1:35:d2:21:
                    8d:b2:16:cf:27:1d:88:46:2e:cc:c8:69:bc:7a:e2:
                    9e:76:7f:e8:97:d3:7d:a2:a3:ce:13:dc:c2:8d:dc:
                    7c:10:9a:4d:0b:e0:8c:4d:e5:2a:a9:6b:fa:88:69:
                    78:13:d1:fb:e6:0d:11:bc:29:3a:fe:8c:c7:18:ad:
                    0b:de:47:27:33:bb:c3:72:11:3c:1b:58:e2:6c:20:
                    63:9a:00:cb:93:a1:5c:9a:dd:07:a2:f9:c4:30:36:
                    1b:48:6a:03:58:da:aa:a0:4d:56:9c:de:fb:fe:70:
                    78:1e:b8:1b:01:ec:28:e8:09:89:4a:f5:2a:5e:86:
                    fd:6f:b8:ec:eb:57:e1:23:e8:24:58:8d:3a:63:af:
                    9e:0b:21:74:8c:67:d5:9b:8a:3e:57:49:10:94:7f:
                    ed:67:19:3c:1e:bb:b6:e0:02:d8:2b:a1:9b:59:05:
                    c5:83:09:e6:d7:6a:d1:c3:c5:72:f3:f2:d8:8e:43:
                    92:17:c8:08:dc:8e:35:a8:db:59:8f:06:37:e9:92:
                    5c:8a:fd:84:7c:d5:01:a9:78:d4:ff:b2:9a:46:c9:
                    3e:43:ab:37:95:f4:32:fb:95:0c:3b:4c:45:3f:15:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.101.0/24
                IPv6:
                  2a13:1c40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51345

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:99:f2:0d:bf:db:d3:f9:b7:9a:68:d4:58:0e:2a:47:a0:
         72:4d:cb:4e:a1:04:4a:a7:e4:ae:9e:1d:34:d3:87:1d:2a:d8:
         60:ff:89:3b:d2:32:cc:6a:f9:7c:4f:3a:0b:e5:f6:13:c0:ee:
         c6:83:32:dc:74:5c:4b:9b:73:01:51:d4:53:e8:f5:2d:1d:1e:
         02:36:8d:4b:e3:12:70:1c:ca:be:7d:26:49:82:7e:c0:40:ed:
         93:e3:dd:fb:38:84:c5:2d:67:46:17:23:73:fb:d4:d4:5a:9e:
         26:75:57:ef:5f:d7:e1:d4:30:5c:52:7f:4f:0e:8d:2e:13:4b:
         e6:ce:41:cd:67:0b:4d:72:8e:06:9d:c3:94:2c:ba:d6:f6:eb:
         fd:d5:51:c8:96:be:c2:7e:62:bf:45:ab:6a:9a:13:02:c9:42:
         1d:5e:f0:85:4b:15:a3:60:37:43:c0:db:b4:33:f4:d5:f5:d2:
         a5:54:13:79:8c:29:f9:6f:74:54:a8:88:d3:02:cd:4c:06:dd:
         6c:15:4f:ea:11:ee:b5:f3:0e:73:c8:5f:90:c8:c6:8b:dd:94:
         3b:0a:a4:c9:5d:7c:5a:bc:55:ba:19:3b:c4:bd:05:8d:62:65:
         d2:8e:db:0c:91:50:a0:94:14:d6:9a:e3:5c:e8:6b:31:bb:77:
         b2:cc:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----