Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
File:                     HCcW7wn65JDMfNvTYJTbXz0KHHI.cer (raw, json)
Hash identifier:          qADv50Lp3FUBIzO+wGYZK57y3a08+kobJ8nKmN0G6yQ=
Subject key identifier:   1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D999E32A2CBE7017D88DA0844C690D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59855
                          IP: 62.122.224.0/22
                          IP: 2a07:9d00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:99:e3:2a:2c:be:70:17:d8:8d:a0:84:4c:69:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:20:c3:b1:71:ac:b8:24:57:4a:6e:ed:c7:
                    fc:ee:69:e6:a8:93:21:3a:47:82:92:c8:13:7e:61:
                    65:d6:6c:94:1d:cb:4d:b1:9f:17:71:66:01:ef:a3:
                    a9:e9:12:ee:3e:6f:24:bf:29:06:f1:2b:f1:64:a0:
                    02:d6:4c:da:5f:8b:29:19:96:6e:05:0c:fc:bf:b2:
                    7a:35:b2:fe:20:24:6b:2a:6c:98:fb:51:56:a6:40:
                    ed:ae:1c:a2:98:11:2a:e4:c0:73:b2:2a:8d:83:a2:
                    0e:81:ed:e9:e1:8d:d3:5b:0e:4b:a2:53:40:cf:57:
                    ce:fd:22:fa:6b:c3:31:f2:6a:a2:f9:ed:d7:43:af:
                    53:8b:64:e5:0c:fb:03:a2:2e:a6:e3:55:05:f3:2d:
                    27:0a:ad:25:ec:d3:e8:30:eb:fd:f1:0f:a8:3d:c6:
                    6b:b0:50:f7:1d:44:23:61:90:c4:9c:a3:32:32:8b:
                    90:6c:bf:fc:d4:65:83:7a:8b:75:87:ba:bd:77:00:
                    66:fd:29:ca:68:2f:9b:30:0d:20:39:e9:81:9f:c5:
                    e3:38:de:77:a7:4c:7a:b3:3f:f8:45:b2:36:44:4c:
                    c1:7d:81:21:f0:44:55:60:80:f5:01:b7:e3:6e:08:
                    c9:36:d1:7f:c2:ad:a1:61:51:22:cf:e9:d9:85:b0:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.224.0/22
                IPv6:
                  2a07:9d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59855

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:cc:23:93:fd:81:d4:c7:05:5b:f9:cf:e5:6e:11:19:31:
         fe:77:c6:87:7e:43:4e:88:c0:21:88:0a:1f:6d:80:ee:9f:b0:
         e3:f3:2f:6f:57:af:19:d5:b5:f7:24:e9:0a:fd:5a:e8:40:7c:
         eb:f2:b9:a1:7f:d9:39:a0:7f:6d:00:7b:96:2e:9d:23:62:0a:
         b1:10:b8:23:08:e5:9c:19:36:ee:15:c6:b2:ed:2d:69:8a:02:
         c5:f6:ba:aa:c0:05:fc:bb:61:66:37:b3:35:cc:9d:50:70:7e:
         28:e3:f8:73:b2:96:28:c5:61:92:f5:0d:b2:96:94:69:ac:fb:
         e3:50:41:44:5c:8e:f6:f5:e9:fc:23:21:63:15:67:05:ba:01:
         86:e7:6c:81:66:10:7a:62:e7:ce:f5:b3:51:ab:19:06:7d:13:
         51:ad:bc:19:da:c3:51:58:c7:5e:2c:ac:20:f9:21:a3:06:ec:
         d2:1f:81:da:1c:b5:b6:5a:3f:6f:58:58:ff:05:90:f0:8c:ef:
         ed:5a:4e:b9:ae:57:0e:7f:3d:7e:bc:bc:5f:c1:03:82:3d:ca:
         83:4a:54:aa:be:24:67:89:c1:28:a8:af:a8:36:3b:8a:e7:c1:
         dd:da:58:a7:2c:8e:0b:10:85:d4:4a:81:cc:9b:df:31:7d:66:
         d0:1f:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----