Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
File:                     ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer (raw, json)
Hash identifier:          n0u8eVMFhpx3GeL8jore0QPcnPxOLg6/9v8K7AagGyI=
Subject key identifier:   66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EFF39DBEF921589C69C99CFCFEAA7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 52016
                          IP: 2001:67c:29c8::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:ff:39:db:ef:92:15:89:c6:9c:99:cf:cf:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:31:a2:39:44:c0:28:21:1a:29:47:9e:f1:
                    04:e0:61:b0:76:f4:08:76:c4:37:1c:c2:91:b6:d4:
                    83:10:02:3c:27:f0:de:2e:ce:44:e0:5b:89:de:f3:
                    85:d8:39:8d:a2:26:53:2f:f4:fc:63:67:24:80:6e:
                    39:a1:6e:de:6c:1d:ee:14:3b:68:70:80:72:cc:0f:
                    e9:96:90:48:22:24:a6:c8:b9:f1:89:30:a2:71:2b:
                    1c:3a:4a:37:aa:21:1a:b9:e8:39:7c:a8:0e:2c:60:
                    7c:66:e2:c8:06:33:c3:17:af:a7:48:bf:0c:46:1e:
                    45:00:8d:89:96:67:1a:b1:eb:93:54:9e:14:66:34:
                    6c:02:da:12:f0:76:34:01:f5:21:dd:87:14:4f:19:
                    f7:60:f8:91:80:c7:fd:d9:c7:93:fe:ad:3f:1a:bb:
                    cf:da:fe:3a:c2:d1:8d:e2:53:19:c6:51:0b:4e:0e:
                    b2:22:46:fa:73:5e:26:23:e8:0c:5f:0d:48:a2:2f:
                    51:ca:33:2e:cd:16:47:4d:61:54:24:9f:92:28:44:
                    c2:0b:48:9a:09:42:bc:8c:20:c9:9e:1a:fc:b6:52:
                    58:2e:37:6f:86:4a:80:c3:de:09:9c:ff:0d:30:a3:
                    0e:df:cb:07:6c:81:b2:15:b7:16:b6:22:a1:ab:13:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:29c8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52016

    Signature Algorithm: sha256WithRSAEncryption
         97:73:d7:4d:d0:5b:ca:29:3e:a7:2d:f6:b9:45:d5:f0:91:26:
         b6:93:c2:1d:61:99:e1:e8:8c:75:dc:a5:4f:62:0c:e6:4a:b8:
         7c:5d:12:cf:ef:3f:c2:88:e4:16:09:37:f4:ef:4f:87:a3:7f:
         1c:46:d9:fb:62:6a:78:fa:a2:4d:71:1f:de:93:2f:b6:23:05:
         49:b2:71:b3:dc:3e:7e:0c:91:43:8b:76:2a:30:84:00:58:38:
         15:78:ef:2a:94:4b:ee:33:95:61:03:e9:1c:65:c4:4e:d1:55:
         4c:f9:53:e4:79:44:1a:ae:54:57:b8:81:00:44:fc:ca:b4:94:
         9f:83:d1:47:ec:62:77:6b:44:31:cf:ae:2f:0d:3a:4f:69:fc:
         06:ea:33:5a:69:cf:2a:11:7c:4c:0f:db:6a:27:55:16:04:cf:
         ca:b2:2a:e0:41:c7:37:96:99:4d:95:16:6a:ce:fe:f7:99:38:
         91:7f:ba:d1:07:62:fd:65:fb:68:78:15:d6:3a:f9:50:c9:86:
         b1:d5:02:f0:a5:a6:6b:9c:6f:d5:e3:dd:89:a9:c4:70:85:cd:
         99:31:53:9c:c9:e3:03:30:6a:85:87:14:3f:5a:3e:e6:04:5c:
         3d:df:4b:2d:19:09:d7:10:bc:ce:cf:7c:47:0c:fa:40:2f:aa:
         af:c8:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----