Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
File:                     CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer (raw, json)
Hash identifier:          qEPusu3/ys2BnuPRKJpaqwQsqXzPjz/yp6+TVoQkBPw=
Subject key identifier:   08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FA3B9AECEA444C61D5D8FCE912E7E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213274
                          IP: 193.162.43.0/24
                          IP: 2a0f:cb00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:a3:b9:ae:ce:a4:44:c6:1d:5d:8f:ce:91:2e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:ef:4f:45:b4:da:02:75:23:8f:46:87:ca:
                    fa:ac:ed:2b:b2:d5:64:0b:39:ac:5b:98:d8:7c:1d:
                    bf:a0:06:8b:51:31:3a:c4:91:4b:bd:3e:2e:e8:b1:
                    1a:c4:08:4e:92:1a:a7:17:79:f8:20:65:b1:0a:09:
                    7a:eb:a4:36:76:49:a7:9c:d9:4f:b9:1a:83:35:a6:
                    24:0a:45:1b:86:de:ae:56:93:a0:3b:00:57:39:69:
                    38:57:ed:a0:da:73:af:0f:25:5f:f2:4d:62:da:8d:
                    44:db:c6:aa:d0:61:cc:a8:e9:15:09:d4:5b:1b:37:
                    16:e6:42:77:a4:6c:4d:a9:98:c5:26:fe:a6:28:b1:
                    3c:38:d6:3a:8c:8b:82:fb:4b:61:39:2b:67:32:84:
                    d3:77:f8:0b:b3:4e:24:ab:f4:0d:0e:94:b0:b7:99:
                    af:d4:27:ec:3e:9d:05:b1:71:4b:50:50:1b:bf:b7:
                    1e:ce:58:bd:83:8f:88:dc:89:2a:9e:c1:b7:36:ae:
                    56:de:57:3c:e1:44:e5:cb:58:bf:70:20:da:49:28:
                    06:90:9b:89:1b:33:16:63:36:cc:c8:b4:7e:da:58:
                    32:de:23:d8:9c:da:6f:94:14:bc:26:5e:14:97:5e:
                    0d:24:2c:39:e5:ad:cc:5d:b7:7e:59:de:3f:04:94:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.43.0/24
                IPv6:
                  2a0f:cb00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213274

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:db:15:ad:95:f3:9e:03:49:db:8f:c7:d9:0c:92:60:52:
         3f:2b:fd:cf:4f:6b:d6:c7:09:87:ee:c8:0e:4c:5d:3d:84:ae:
         79:be:02:61:79:ae:5c:52:75:c2:7c:66:f5:46:c3:6e:9c:95:
         d3:0c:3f:44:b7:e8:0c:27:0d:d5:3c:b0:a8:96:13:c0:16:a1:
         99:37:e5:d8:5e:22:3f:a6:96:df:df:ac:46:17:4d:6a:48:02:
         d0:59:87:61:de:5a:8b:85:c4:fa:ee:c5:5f:b6:ec:e6:1e:d7:
         38:db:b8:b2:43:68:b3:1f:18:27:e3:02:02:e0:44:60:28:be:
         01:e4:0a:18:9d:31:40:57:69:90:c5:4c:12:60:c1:c0:49:89:
         7c:3c:b8:28:28:2c:37:c8:c5:ce:d8:18:28:98:9d:7f:f1:12:
         bd:f4:11:6a:19:91:0f:4e:f1:72:0e:95:8b:3a:7c:b1:73:65:
         af:7d:bb:42:c9:27:22:80:f7:f6:c3:92:ab:93:d9:42:6c:35:
         41:3e:20:33:46:51:bd:57:c3:db:c5:70:88:87:5e:80:2e:83:
         60:c1:2d:15:55:36:a1:a4:c7:36:75:4c:79:9d:5e:1d:11:d0:
         1c:9b:11:81:e9:39:a0:92:ba:5e:8e:aa:70:56:c3:c1:02:6b:
         9e:26:fd:79
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiH6O5rs6kRMYdXY/OkS5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQxZjFmOGI0MWQ3NGY3ZDg2NmIxZTVhZGZkMThhZmUyMDI3MTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcLvT0W02gJ1I49Gh8r6rO0rstVk
CzmsW5jYfB2/oAaLUTE6xJFLvT4u6LEaxAhOkhqnF3n4IGWxCgl666Q2dkmnnNlP
uRqDNaYkCkUbht6uVpOgOwBXOWk4V+2g2nOvDyVf8k1i2o1E28aq0GHMqOkVCdRb
GzcW5kJ3pGxNqZjFJv6mKLE8ONY6jIuC+0thOStnMoTTd/gLs04kq/QNDpSwt5mv
1CfsPp0FsXFLUFAbv7cezli9g4+I3IkqnsG3Nq5W3lc84UTly1i/cCDaSSgGkJuJ
GzMWYzbMyLR+2lgy3iPYnNpvlBS8Jl4Ul14NJCw55a3MXbd+Wd4/BJT0vQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAjR8fi0HXT32Gax5a39GK/iAnEIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzI5YzAx
NS1kNzQ3LTRmYzctOTMyYi1kZjVjYjlmMGUzYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjljMDE1
LWQ3NDctNGZjNy05MzJiLWRmNWNiOWYwZTNhNC8xL0NOSHgtTFFkZFBmWVpySGxy
ZjBZci1JQ2NRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwaIrMA0EAgACMAcDBQMqD8sAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBGjANBgkqhkiG9w0BAQsFAAOCAQEAo+fbFa2V854D
SduPx9kMkmBSPyv9z09r1scJh+7IDkxdPYSueb4CYXmuXFJ1wnxm9UbDbpyV0ww/
RLfoDCcN1TywqJYTwBahmTfl2F4iP6aW39+sRhdNakgC0FmHYd5ai4XE+u7FX7bs
5h7XONu4skNosx8YJ+MCAuBEYCi+AeQKGJ0xQFdpkMVMEmDBwEmJfDy4KCgsN8jF
ztgYKJidf/ESvfQRahmRD07xcg6Vizp8sXNlr327QsknIoD39sOSq5PZQmw1QT4g
M0ZRvVfD28VwiIdegC6DYMEtFVU2oaTHNnVMeZ1eHRHQHJsRgek5oJK6Xo6qcFbD
wQJrnib9eQ==
-----END CERTIFICATE-----