Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/ECE04D26A2F2712EE3D6DA0067C8679C66A03944.cer
File:                     ECE04D26A2F2712EE3D6DA0067C8679C66A03944.cer (raw, json)
Hash identifier:          ecLQb2w6xuwi9HAoCBFlEj7zeKhJITKK8Vzrczo3eKE=
Subject key identifier:   EC:E0:4D:26:A2:F2:71:2E:E3:D6:DA:00:67:C8:67:9C:66:A0:39:44
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Certificate issuer:       /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial:       1C589F76E2B49D62E5067B859005A4B5A6B0259A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/ECE04D26A2F2712EE3D6DA0067C8679C66A03944.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 19:15:34 +0000
Certificate not after:    Fri 17 Jan 2025 19:20:34 +0000
Subordinate resources:    IP: 2a07:54c0:ffee::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:9f:76:e2:b4:9d:62:e5:06:7b:85:90:05:a4:b5:a6:b0:25:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14082299D486857A824F7308B67507C731520D07
        Validity
            Not Before: Jan 19 19:15:34 2024 GMT
            Not After : Jan 17 19:20:34 2025 GMT
        Subject: CN=ECE04D26A2F2712EE3D6DA0067C8679C66A03944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:2c:77:29:7f:5c:30:b0:58:d8:81:5c:16:
                    45:35:ff:d5:08:ed:d1:df:72:78:2c:34:3e:d8:95:
                    ab:ab:55:09:90:97:8e:ac:9e:70:89:a8:87:cd:74:
                    f2:3a:d1:e4:fb:09:52:ad:f5:d5:67:bf:c2:20:3b:
                    c0:4e:5d:9b:0e:97:e2:ce:11:08:d8:f3:38:a7:b3:
                    fe:6a:de:af:de:eb:1b:91:af:02:dc:6a:07:7c:fc:
                    b8:c9:c3:67:8c:ff:26:f3:f2:52:e7:b8:24:ae:02:
                    6e:b6:f2:47:4f:db:73:ac:d1:df:e5:1e:1d:b2:36:
                    f2:8c:86:4d:8f:03:18:c7:23:82:7e:d1:67:18:fb:
                    da:14:19:d8:67:5a:61:14:6a:81:c8:cd:c2:9e:b8:
                    3b:4d:b3:81:30:be:c8:16:8f:5c:cd:9e:aa:43:82:
                    60:87:96:81:5a:e0:cd:b5:4a:af:54:1f:94:b8:8b:
                    08:78:92:ad:6f:67:13:85:32:aa:22:fd:37:f3:99:
                    5e:d5:ab:a5:ac:83:4e:47:ce:43:4b:b1:6a:c3:33:
                    ae:6a:8a:08:13:42:44:86:ae:48:33:78:59:b4:19:
                    57:ea:19:3b:df:bf:d6:b6:f7:8f:2a:b7:14:17:ad:
                    01:69:10:5f:3d:37:fa:6d:67:9b:82:42:a2:cd:1b:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:E0:4D:26:A2:F2:71:2E:E3:D6:DA:00:67:C8:67:9C:66:A0:39:44
            X509v3 Authority Key Identifier:
                keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/4/ECE04D26A2F2712EE3D6DA0067C8679C66A03944.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:ffee::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:de:52:2f:0b:dc:0b:60:ed:73:38:2f:89:2c:7f:5a:44:
         4d:52:86:ef:db:ef:3a:fa:b2:0e:2f:c2:49:ba:a3:ca:3a:2e:
         11:54:d6:1f:8e:31:dd:96:d4:c8:56:f3:75:a3:5a:3f:ad:bc:
         e5:3e:c8:80:3d:30:10:a8:3a:3d:93:6d:77:d4:23:01:ce:c9:
         da:1f:fd:ba:a1:75:62:e3:4e:15:28:e3:e5:c7:0b:95:e0:a1:
         ec:a2:02:d3:ab:b0:b8:a1:46:d3:9d:3a:45:7f:85:84:8b:35:
         30:fd:9d:13:36:16:30:84:68:05:fb:ef:31:a5:36:53:f2:b3:
         16:2f:79:4c:ae:8f:1a:67:a0:04:82:7a:58:44:ee:b9:b3:2f:
         ce:63:56:c0:ae:7c:c3:27:75:9d:97:65:66:df:80:1a:02:30:
         30:98:df:38:6d:79:c2:d6:e9:10:16:52:2c:2a:44:a7:e5:d8:
         3d:ef:40:bc:45:42:15:ab:76:1d:30:f7:58:0b:0a:ca:bd:c6:
         86:33:12:2a:c6:ef:80:92:a5:0e:d6:ac:7a:f4:27:21:7d:15:
         74:bf:11:50:6e:b9:23:30:36:2d:58:63:5a:9b:ce:70:c0:60:
         fb:27:90:33:cd:58:2e:6f:30:2b:39:fe:4c:86:b3:34:2b:f9:
         f4:d6:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----