Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
File:                     H9CHXNAFHQwJJaygQQNOeECmdws.cer (raw, json)
Hash identifier:          Hlsla6HgiTPAn1ngAu0jZH+SXc/GYbUbgKy1WmSrMFU=
Subject key identifier:   1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195896A45AB978CE478384C52D8C312371E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 08:13:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216054
                          IP: 193.84.255.0/24
                          IP: 2a14:4f80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:89:6a:45:ab:97:8c:e4:78:38:4c:52:d8:c3:12:37:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 08:13:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:ff:c2:cd:2d:99:5e:4f:c1:83:a5:3d:cf:
                    3a:82:ce:2c:80:81:9a:fc:21:a3:f3:02:32:62:07:
                    72:0b:b0:0e:df:e2:c2:dc:4f:a2:d8:89:d4:ce:53:
                    7a:93:65:5e:6f:9a:bf:cd:a8:26:2d:e0:5f:05:23:
                    f1:87:86:56:2a:cb:bc:5f:5b:6a:0a:c4:6e:4b:d6:
                    dc:7f:d2:60:4d:cc:d2:04:18:35:82:3f:e9:4f:98:
                    92:b9:1e:77:fa:6b:bb:89:08:43:89:a6:92:4b:02:
                    0f:09:cf:9d:71:a2:79:53:b0:a0:f6:12:7a:68:dc:
                    92:7a:67:0c:a3:9d:23:ee:98:1c:99:17:fe:a1:80:
                    3c:8f:63:62:d1:54:cd:05:b0:14:e2:bb:b6:5d:83:
                    f5:dc:80:41:5e:3c:b7:67:0e:92:f6:fb:91:68:53:
                    33:7f:0b:8b:6d:24:4b:7b:9b:a8:4d:fe:47:66:12:
                    e7:6c:d9:b4:95:2e:a6:fe:7d:75:1d:23:be:1b:e5:
                    9f:53:2b:74:0d:db:31:01:eb:03:7f:8e:12:ec:c5:
                    11:17:24:38:63:68:29:1a:6f:46:e4:93:e9:9b:80:
                    93:4a:44:67:d5:a1:6d:3f:02:d6:ad:bc:74:b6:5f:
                    a4:38:7e:70:66:70:7e:1f:8a:c5:e9:f1:12:81:7c:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.255.0/24
                IPv6:
                  2a14:4f80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216054

    Signature Algorithm: sha256WithRSAEncryption
         88:46:6c:db:3a:a8:72:7e:71:5d:67:a2:0e:5e:65:d7:04:f7:
         e4:c4:55:66:1e:d4:0a:b2:12:92:f2:a5:4f:4d:bc:de:c0:1a:
         d4:d3:76:1a:09:33:16:32:fd:b3:76:be:1c:eb:66:b3:4e:bd:
         67:cb:83:3c:33:6f:84:f9:28:a4:ec:ac:80:a1:c7:79:4d:85:
         bb:81:db:4a:e6:c0:61:b8:1c:da:a3:7c:13:1e:4a:6f:7d:62:
         14:d8:0a:79:02:97:ef:4d:83:2d:72:47:11:8c:20:1e:14:15:
         6c:31:23:f3:54:5e:cc:4a:9b:5d:49:89:4a:37:49:60:be:a7:
         c8:d4:93:eb:d4:ae:b3:ef:e2:ec:f7:10:c3:66:74:64:bf:03:
         5a:db:99:4a:8f:48:e7:1d:c1:97:9b:09:ed:a2:9a:ac:65:22:
         bf:62:ee:5f:7f:65:47:5c:40:76:a4:34:53:73:64:1a:0f:d9:
         46:62:a6:bf:7c:4b:b6:5b:1e:e8:36:e4:7d:f1:5f:81:06:f2:
         a0:69:cd:5e:42:15:4d:01:da:bf:04:75:b0:3f:bb:9a:ca:ca:
         54:cf:f4:b7:e0:39:d8:26:06:c2:1c:51:54:01:32:30:2a:e2:
         ce:62:88:17:f4:89:c7:01:f0:70:69:ac:7c:82:82:a0:bc:0d:
         8f:d1:3a:3a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZWJakWrl4zkeDhMUtjDEjceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEyMDgxMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmQwODc1Y2QwMDUxZDBjMDkyNWFjYTA0MTAzNGU3ODQwYTY3NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQz/ws0tmV5PwYOlPc86gs4sgIGa
/CGj8wIyYgdyC7AO3+LC3E+i2InUzlN6k2Veb5q/zagmLeBfBSPxh4ZWKsu8X1tq
CsRuS9bcf9JgTczSBBg1gj/pT5iSuR53+mu7iQhDiaaSSwIPCc+dcaJ5U7Cg9hJ6
aNySemcMo50j7pgcmRf+oYA8j2Ni0VTNBbAU4ru2XYP13IBBXjy3Zw6S9vuRaFMz
fwuLbSRLe5uoTf5HZhLnbNm0lS6m/n11HSO+G+WfUyt0DdsxAesDf44S7MURFyQ4
Y2gpGm9G5JPpm4CTSkRn1aFtPwLWrbx0tl+kOH5wZnB+H4rF6fESgXxS6wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB/Qh1zQBR0MCSWsoEEDTnhApncLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzIyMTA0
OC0zYmFkLTQ2OWMtYjkzMy1lMDgwMmY0NzQ0NDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvMjIxMDQ4
LTNiYWQtNDY5Yy1iOTMzLWUwODAyZjQ3NDQ0NC8xL0g5Q0hYTkFGSFF3SkpheWdR
UU5PZUVDbWR3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwVT/MA0EAgACMAcDBQMqFE+AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNL9jANBgkqhkiG9w0BAQsFAAOCAQEAiEZs2zqocn5x
XWeiDl5l1wT35MRVZh7UCrISkvKlT0283sAa1NN2GgkzFjL9s3a+HOtms069Z8uD
PDNvhPkopOysgKHHeU2Fu4HbSubAYbgc2qN8Ex5Kb31iFNgKeQKX702DLXJHEYwg
HhQVbDEj81RezEqbXUmJSjdJYL6nyNST69Sus+/i7PcQw2Z0ZL8DWtuZSo9I5x3B
l5sJ7aKarGUiv2LuX39lR1xAdqQ0U3NkGg/ZRmKmv3xLtlse6DbkffFfgQbyoGnN
XkIVTQHavwR1sD+7msrKVM/0t+A52CYGwhxRVAEyMCrizmKIF/SJxwHwcGmsfIKC
oLwNj9E6Og==
-----END CERTIFICATE-----