Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
File:                     zPJHTehBFnUrkICnoNsyJTXFYCY.cer (raw, json)
Hash identifier:          8Qq1h00g534gubCplQXIdPTDV5xRX8GB69f6jrgNTHk=
Subject key identifier:   CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC490D8D142A47B5D399B450595FE8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57944
                          IP: 91.236.248.0/22
                          IP: 2001:67c:440::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:49:0d:8d:14:2a:47:b5:d3:99:b4:50:59:5f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ccf2474de84116752b9080a7a0db322535c56026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:53:51:29:61:64:3f:bf:02:06:cc:a2:3e:
                    22:09:35:98:a3:f6:c1:a6:d2:6c:c5:98:85:49:51:
                    58:54:ff:01:6e:86:91:dc:42:dc:97:b3:ab:17:0b:
                    eb:1b:8b:22:58:29:d4:81:77:fb:99:cf:2d:25:e3:
                    02:2d:39:fe:18:84:60:84:f4:ca:ef:f3:c1:46:53:
                    71:3f:5c:e5:87:0c:33:6f:3f:29:5a:14:6c:f7:b8:
                    b6:14:30:d2:6c:70:f0:47:5d:e2:ee:f4:f0:dd:de:
                    13:26:ad:73:58:08:30:b1:a6:f2:92:6a:43:38:97:
                    90:25:00:6a:00:8f:5f:73:2c:a5:0e:10:fa:1f:65:
                    62:0e:73:42:f3:20:b2:e9:27:7e:cf:8d:69:dd:ec:
                    43:4a:a7:78:7b:23:5d:f7:8a:31:3f:b5:dd:98:cf:
                    e3:33:65:85:32:47:74:cb:50:0f:76:df:70:22:28:
                    3f:9e:bc:f0:58:3b:99:5e:ec:7e:77:fc:a5:05:6a:
                    bd:20:08:6a:02:d8:f5:e0:64:8c:71:4d:bb:4a:f2:
                    64:64:cc:30:8b:1b:e9:d7:df:b1:bc:62:16:82:18:
                    d5:2d:a4:cf:bf:da:79:d6:e7:71:f9:b4:36:04:c8:
                    5b:1d:e7:51:a2:2f:a8:d6:da:74:02:2b:8e:34:6f:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.248.0/22
                IPv6:
                  2001:67c:440::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57944

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:33:a6:1b:6b:f1:69:64:e8:eb:7e:f5:e6:55:9f:f9:f3:
         83:4e:ca:1d:5d:31:44:8d:27:3a:4a:c7:ac:cf:67:8b:6f:93:
         60:90:7f:a0:8d:5b:76:a1:46:5e:55:04:df:d3:2a:ca:65:a2:
         dc:db:59:48:e5:21:e3:4c:8e:b5:3c:3f:6c:fd:f1:21:cc:83:
         df:ec:80:13:a5:8c:a9:88:41:e4:97:eb:48:e4:51:5e:70:b1:
         fd:33:9c:5a:01:f2:e5:e8:cf:bc:bd:bd:38:af:a0:35:47:cf:
         37:98:fe:bf:43:ed:fa:cb:d1:76:c9:83:7c:e9:09:5f:4d:9c:
         4d:cc:3c:b9:5c:3f:bd:80:4d:36:aa:3b:0f:74:02:86:d3:88:
         5d:4c:97:31:02:0a:aa:19:f5:9c:b5:e8:34:0c:0f:8d:3f:c1:
         f1:06:a8:f3:99:22:ab:6d:a0:94:92:3f:3c:9b:9d:e6:81:31:
         a5:fb:5f:ba:b2:cb:88:53:a0:bc:a1:6b:bb:d4:2e:d5:36:96:
         82:c6:bf:f1:ba:ee:25:97:25:a5:ec:ee:1d:39:c9:aa:2c:7b:
         2c:bf:18:26:88:c2:1a:c3:c2:2c:a0:a7:06:66:ae:06:0c:fe:
         f8:bd:a9:39:47:b1:e7:09:03:a6:fb:a1:9c:53:49:ab:b0:66:
         69:b9:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----