Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HISp5A-Qddjq_PaKAkhPUpJAlWo.cer
File:                     HISp5A-Qddjq_PaKAkhPUpJAlWo.cer (raw, json)
Hash identifier:          rXmilndn3eWQ5ePSmwMl8l7IS0FRcQhlDSHYCW01Itc=
Subject key identifier:   1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942747BAAD952EED2810DED8000D271894
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 39669

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:ba:ad:95:2e:ed:28:10:de:d8:00:0d:27:18:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c84a9e40f9075d8eafcf68a02484f529240956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:3e:38:20:46:33:5e:d6:1b:c2:58:19:10:
                    ad:a8:1b:d3:88:00:58:52:09:9d:93:8c:e4:1f:30:
                    13:a3:d4:26:92:1b:63:e5:57:d4:24:f6:55:67:ba:
                    0f:56:17:63:50:02:df:c3:15:4c:3f:76:b4:85:d6:
                    49:b9:c6:70:94:86:16:9e:c4:e0:05:77:df:7d:94:
                    77:cf:9b:2d:54:5e:fd:bd:5a:19:8b:53:7e:45:5b:
                    b5:e9:45:95:b6:ea:ed:a0:89:18:58:34:ea:de:57:
                    0d:29:27:d8:b5:02:b9:c9:b7:28:ad:14:f8:12:b8:
                    e9:d9:5b:2c:5b:4c:4f:87:14:7f:98:24:40:04:2f:
                    82:12:5d:7d:e7:ff:47:f6:93:0c:c2:fe:f0:6a:bd:
                    2b:da:87:e1:13:b6:34:ab:b9:37:2e:65:f4:9d:5a:
                    48:8c:c8:88:f1:17:dc:48:a7:48:cd:15:71:35:9d:
                    bd:8a:0c:67:de:86:f3:0e:70:41:f8:62:64:b6:1a:
                    b6:05:39:fb:67:df:b2:4d:c8:65:9f:39:fd:cc:a4:
                    5b:bc:10:82:3b:20:82:4c:4f:e9:e5:41:bd:2f:62:
                    fa:92:53:ba:7a:18:ec:3b:7e:66:1b:e0:3e:6b:68:
                    07:0a:d8:9a:28:24:72:45:c6:6e:24:0e:9f:1c:67:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:A9:E4:0F:90:75:D8:EA:FC:F6:8A:02:48:4F:52:92:40:95:6A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0da1ff-9cf9-4ad9-8839-5c3faf37397a/1/HISp5A-Qddjq_PaKAkhPUpJAlWo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39669

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:15:81:14:59:a9:8f:52:9c:b1:a2:93:97:0c:ea:53:fc:
         88:40:27:ec:82:6a:02:94:aa:90:6f:3b:5e:a4:ad:45:53:69:
         a3:b5:9e:f3:ce:c3:eb:ed:7f:ce:de:b7:f9:ae:cb:91:c8:12:
         13:27:54:a1:ec:8e:cf:1c:dd:5d:ca:57:88:c3:20:3b:4f:06:
         49:3a:bd:32:0b:28:32:8c:f9:73:13:53:6b:8f:78:74:f8:38:
         9a:76:7d:16:d2:76:3e:08:c8:53:d0:7d:6c:28:c3:be:69:93:
         12:88:00:5d:7b:5f:5e:f6:3e:1e:7d:06:da:c0:88:db:4b:39:
         f1:10:79:20:b2:ea:ef:99:d0:4b:3e:63:eb:64:e0:dc:21:e6:
         e9:07:b5:c5:e4:70:51:82:8f:74:cf:7d:ba:8e:95:2c:16:32:
         b3:6f:3b:19:80:f6:01:b6:63:71:a0:2b:aa:78:d0:ae:9f:d4:
         ce:34:3b:0f:17:a0:9e:88:a4:7c:d8:59:dc:ac:86:19:6e:8b:
         1a:12:db:57:45:16:4c:8c:8c:66:72:40:d5:17:aa:79:2f:f3:
         cd:e0:20:3e:a4:dd:dd:39:31:50:2c:45:81:0c:54:1a:75:8e:
         97:99:62:10:ca:08:26:cf:fd:ae:de:1f:58:09:bf:75:7d:ef:
         8a:e9:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----