Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
File:                     HGnHYzivyQhbj71mm4t0vXqS1DE.cer (raw, json)
Hash identifier:          nU8sL1Ak0ptODMSJgesZjQonBFrxG9RdbZFeikk5DvE=
Subject key identifier:   1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDDEC325903765BB9F79CCA4B233B9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212351
                          IP: 2001:678:eb0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:de:c3:25:90:37:65:bb:9f:79:cc:a4:b2:33:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:77:bd:e3:7c:81:52:6b:05:9b:a1:81:3e:
                    47:05:f0:d1:fb:a4:64:da:cd:2b:1d:6f:1c:fa:01:
                    1e:73:60:82:68:b9:7c:1f:24:13:42:92:fc:8a:76:
                    55:01:8d:6a:53:42:8a:d0:57:fa:61:c3:32:f6:3a:
                    fe:51:a1:ff:f2:69:a7:72:37:dc:01:10:ea:d8:9f:
                    a9:39:63:d4:eb:63:0a:aa:2a:62:21:06:43:df:a2:
                    5b:8a:70:d1:df:49:00:2d:2d:45:0b:1d:28:15:32:
                    92:17:4c:b2:8b:46:c8:19:48:ac:58:2a:73:54:77:
                    5c:a4:78:7f:a4:32:d9:77:10:2b:9f:69:89:1e:92:
                    45:4f:6f:5a:22:64:9f:d2:1c:63:a2:b5:c7:13:5f:
                    31:19:bf:0a:ba:24:11:52:23:7f:e6:89:43:5c:52:
                    a4:5c:2f:24:2a:14:0c:6d:58:77:0d:e8:75:bd:57:
                    71:26:fb:dd:f9:42:a3:87:85:8e:ba:3c:24:d1:e8:
                    e1:45:83:32:52:48:b5:60:2b:bd:01:08:98:bc:9a:
                    37:89:89:ed:ea:71:29:b3:28:62:77:b0:bf:ac:13:
                    cb:f7:6e:09:f0:1e:5d:10:7e:39:6d:d8:16:1b:71:
                    06:12:19:f8:84:38:04:0e:ae:86:59:e9:d1:75:b8:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:eb0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212351

    Signature Algorithm: sha256WithRSAEncryption
         37:84:16:b3:78:a8:14:f2:d9:ac:bd:a9:f4:4a:1e:53:68:1a:
         11:ff:cd:54:0b:ee:23:f5:ec:fa:c1:92:c3:45:80:fc:0c:97:
         c9:b5:be:99:2f:06:bd:40:e8:e0:24:7c:49:74:72:2a:67:2e:
         0b:7e:ee:27:d5:6e:e3:dd:53:2c:bc:80:51:20:e5:4d:8b:71:
         f6:72:52:7f:1d:5b:10:6b:74:5a:c6:97:2c:f8:4d:8f:50:88:
         0b:25:33:d2:c5:ee:73:f8:05:ef:b7:64:e3:82:a7:c1:b2:36:
         e5:ac:f5:70:6b:64:df:4f:07:7c:a1:62:53:a3:47:b5:56:1b:
         25:46:8b:d9:5d:42:08:db:3e:32:bd:99:43:c8:57:71:c7:34:
         d7:97:89:5c:35:9c:e1:dc:64:72:99:21:85:5e:2f:e0:12:24:
         98:a8:a5:75:c3:85:23:9b:ce:0d:2c:1d:51:93:8e:c9:5a:7c:
         12:69:63:6f:8e:4c:1f:f4:fc:72:a3:d7:6c:b3:da:72:7a:5a:
         62:d5:51:db:55:af:68:cc:2b:8d:b3:b0:f6:3e:ef:2a:2c:1a:
         c2:a9:d2:fa:58:cc:4d:78:8f:14:18:15:28:22:7c:4e:b2:8d:
         79:92:9d:8d:97:32:f5:b1:e6:22:c4:53:fe:07:36:26:ea:fa:
         fc:b8:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----