Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
File:                     H5TRopzOJhU7k0-0fC7iFnS7hcs.cer (raw, json)
Hash identifier:          FRijt03iP4c8AVx5N3mTOhx7ovJQOYvakCG76rGutJY=
Subject key identifier:   1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D726BBE5C01BA0A21A51E8B582BACC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212636
                          IP: 193.23.52.0/24
                          IP: 2a10:5ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:26:bb:e5:c0:1b:a0:a2:1a:51:e8:b5:82:ba:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:95:7d:9c:95:7c:d6:bf:bc:49:f3:49:74:
                    d3:9d:36:c5:39:7f:4c:8e:fb:91:5b:bd:dc:8f:7f:
                    dd:52:30:17:27:6e:38:98:f7:d9:47:6f:6a:90:e3:
                    b9:06:b1:c1:be:b4:e2:5f:75:fe:27:08:60:99:83:
                    dd:5d:02:af:f6:99:bf:66:eb:84:d4:25:e6:0c:ba:
                    f3:7a:e6:bb:e3:47:75:d4:25:fd:a0:45:43:68:61:
                    03:2b:e7:c1:9a:63:6c:c6:15:0c:c4:8e:2b:df:62:
                    ef:33:78:96:8f:c1:6d:66:80:2b:ec:26:24:ab:27:
                    fd:bc:3e:9e:8b:55:a6:4d:5c:db:0d:da:26:93:60:
                    be:61:c6:34:c0:3d:db:9c:d7:29:91:ca:6a:a0:f9:
                    3c:38:63:dc:ad:04:11:ad:84:70:4a:3f:80:dc:98:
                    3f:ff:31:92:40:e0:09:b0:5b:cf:1d:43:32:4c:1b:
                    a5:7a:c2:fa:15:07:87:5f:aa:e5:d0:7a:ea:88:5d:
                    20:0c:18:93:55:5a:ec:9d:77:7b:3a:fa:e7:2b:ca:
                    4c:b3:8f:c9:28:e3:8e:64:c5:8a:f9:d9:0a:ad:e5:
                    0e:f1:ac:02:3f:06:3c:b4:06:5f:f6:3a:bf:1c:f0:
                    10:2b:bf:d6:2a:df:9d:5f:22:4a:d8:01:26:63:c1:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.52.0/24
                IPv6:
                  2a10:5ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212636

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:c1:35:67:1b:ed:c2:48:6a:a5:a5:33:71:ab:ad:08:16:
         10:29:96:37:f2:21:3e:04:69:c2:65:86:2a:43:8c:66:36:2b:
         35:94:3d:17:64:eb:c5:bf:3c:3c:ea:c6:99:f6:ad:6a:f8:4d:
         51:c5:a3:81:1d:46:51:de:09:f2:00:0b:08:f3:d9:1e:75:22:
         68:01:cf:ff:ca:3e:48:68:e7:2e:46:de:e2:e8:52:f5:a9:1e:
         b5:5c:6b:93:ef:2c:7c:1b:67:9c:8e:03:8d:26:50:fc:2a:b5:
         fe:ce:f2:bd:7f:4a:10:7c:80:9d:03:c4:d5:4e:dd:28:72:0e:
         07:5b:90:8f:90:02:6c:9b:98:e9:65:8f:c0:98:1f:29:27:4e:
         4d:b6:48:2c:e5:f8:9c:65:c3:4a:f4:42:ed:95:29:eb:1c:46:
         ed:d2:03:b6:05:8b:71:d5:ec:01:77:f4:fd:67:c7:f6:ae:d4:
         ab:44:c4:07:57:fe:c2:e9:32:8c:07:2d:80:3f:3c:89:ce:76:
         54:ad:c8:1f:3c:b6:90:09:2c:b6:63:aa:1d:fb:78:34:8e:83:
         2d:47:ce:50:59:0c:69:7f:7d:70:02:1d:64:16:20:1f:8b:45:
         db:80:b2:a5:4a:2f:1e:5a:b8:ca:53:65:7e:35:b7:51:8c:31:
         14:15:c8:e9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1ya75cAboKIaUei1grrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk0ZDFhMjljY2UyNjE1M2I5MzRmYjQ3YzJlZTIxNjc0YmI4NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumGVfZyVfNa/vEnzSXTTnTbFOX9M
jvuRW73cj3/dUjAXJ244mPfZR29qkOO5BrHBvrTiX3X+JwhgmYPdXQKv9pm/ZuuE
1CXmDLrzeua740d11CX9oEVDaGEDK+fBmmNsxhUMxI4r32LvM3iWj8FtZoAr7CYk
qyf9vD6ei1WmTVzbDdomk2C+YcY0wD3bnNcpkcpqoPk8OGPcrQQRrYRwSj+A3Jg/
/zGSQOAJsFvPHUMyTBulesL6FQeHX6rl0HrqiF0gDBiTVVrsnXd7OvrnK8pMs4/J
KOOOZMWK+dkKreUO8awCPwY8tAZf9jq/HPAQK7/WKt+dXyJK2AEmY8Es0QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB+U0aKcziYVO5NPtHwu4hZ0u4XLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzJjYjYz
Zi0xNjEzLTQ1OWItODExNS01NTRjYWJiOWFkMDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMmNiNjNm
LTE2MTMtNDU5Yi04MTE1LTU1NGNhYmI5YWQwNS8xL0g1VFJvcHpPSmhVN2swLTBm
QzdpRm5TN2hjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwRc0MA0EAgACMAcDBQMqEFrAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+nDANBgkqhkiG9w0BAQsFAAOCAQEARc7BNWcb7cJI
aqWlM3GrrQgWECmWN/IhPgRpwmWGKkOMZjYrNZQ9F2Trxb88POrGmfatavhNUcWj
gR1GUd4J8gALCPPZHnUiaAHP/8o+SGjnLkbe4uhS9aketVxrk+8sfBtnnI4DjSZQ
/Cq1/s7yvX9KEHyAnQPE1U7dKHIOB1uQj5ACbJuY6WWPwJgfKSdOTbZILOX4nGXD
SvRC7ZUp6xxG7dIDtgWLcdXsAXf0/WfH9q7Uq0TEB1f+wukyjActgD88ic52VK3I
Hzy2kAkstmOqHft4NI6DLUfOUFkMaX99cAIdZBYgH4tF24CypUovHlq4ylNlfjW3
UYwxFBXI6Q==
-----END CERTIFICATE-----