Certificate

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
File:                     0E357DDA04B8107626124F52CFC2439B76D85AF9.cer (raw, json)
Hash identifier:          GJkGhr/9zFCN4apBFyYLg7cwz7AvmXDy9ofBxk3eBy8=
Subject key identifier:   0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       470AAF693A94752561F292D1D13E19D7E096B82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Manifest:                 rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
caRepository:             rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0
Notify URL:               https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before:   Wed 21 Dec 2022 16:51:56 +0000
Certificate not after:    Wed 20 Dec 2023 16:56:56 +0000
Subordinate resources:    IP: 2a0a:6040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0a:af:69:3a:94:75:25:61:f2:92:d1:d1:3e:19:d7:e0:96:b8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:d7:da:1e:01:22:cc:94:62:74:eb:6b:30:
                    38:a6:b8:d4:f1:bf:c5:3d:6b:d9:72:06:75:ce:3a:
                    ab:6f:23:a8:b9:af:cd:80:ad:79:ad:13:b1:f4:52:
                    1c:9a:5a:49:d2:fc:56:a5:d0:ad:87:54:35:03:f0:
                    55:bb:c4:43:f5:82:31:25:69:36:ed:2c:36:0e:c7:
                    49:38:01:ff:54:a8:f5:1e:51:ac:b8:f1:e7:5d:53:
                    4a:6f:7b:9f:22:34:c0:ad:6f:e7:16:41:57:04:27:
                    06:14:fb:5d:1b:c0:53:a0:ce:4a:59:d5:ee:73:7b:
                    2c:7c:4b:fb:7c:23:18:61:56:ff:e4:d6:b0:25:d6:
                    9e:44:85:07:14:56:07:b6:c6:5a:2b:52:76:4c:47:
                    3d:9e:60:62:c1:30:68:20:38:16:eb:6b:95:04:e4:
                    cf:62:87:de:26:34:53:46:fd:1c:2b:ed:0b:ae:5d:
                    75:9b:c6:0a:0a:47:cb:95:8b:67:57:b1:d2:17:93:
                    18:bf:79:85:3e:71:94:57:da:b5:08:1a:7f:c6:d5:
                    81:d8:3a:a4:90:24:5c:30:35:f9:e7:31:6d:c6:c6:
                    23:a6:ca:7b:ef:cf:2f:70:cb:4c:71:1f:9c:71:31:
                    c8:ac:a7:e0:07:43:8f:37:9e:71:06:98:c1:10:34:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0
                RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:d8:15:9e:71:62:4d:d2:fd:e7:61:0e:65:00:ec:42:32:ca:
         57:a6:ed:5a:2f:cd:e3:3f:74:a0:b0:a9:e3:f5:30:7a:89:06:
         75:ff:22:aa:a2:61:f4:75:92:d1:9e:08:66:40:a5:6d:81:f4:
         e4:71:af:bb:95:e1:07:5d:a8:c3:fc:ac:a9:fd:43:bd:20:7b:
         d9:6b:19:c3:de:a1:aa:9d:58:44:40:d1:89:2c:0d:67:ae:39:
         b0:e5:d9:ff:5b:7b:ad:94:47:78:1f:d3:6d:e8:f7:1e:e9:f6:
         73:fe:5b:d0:54:30:2c:63:cd:f8:67:ac:e0:97:40:32:21:b8:
         34:1d:3e:8b:6a:2a:1c:8f:48:63:74:c8:1f:f4:56:e0:b3:2b:
         88:26:7d:c5:a8:84:75:0e:0a:9b:d9:47:55:72:02:e1:21:df:
         c9:71:6f:f5:b5:74:b6:a6:03:2d:a7:2e:ec:c5:a2:8e:02:8a:
         70:74:02:cd:9b:90:2b:34:2b:ab:16:4f:e8:75:ad:7f:ff:7a:
         2f:d1:2a:d9:b8:0a:62:3b:10:57:c0:d8:03:b8:94:6d:5b:a6:
         24:1b:fe:63:56:83:3d:6d:c7:66:87:70:a5:7c:46:d9:2e:6c:
         8a:4e:d4:b1:68:14:54:bd:b5:24:32:2d:ab:b9:6e:45:50:53:
         4d:e8:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----