Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
File:                     HNPDCTm5BqRRWhxlwIg2gptqMok.cer (raw, json)
Hash identifier:          pGycilP4EHA60+4SlLUbcMKYkRpivCfBT3MFqX9/QIE=
Subject key identifier:   1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FA4FF919B68E379859F31D83980F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49122
                          AS: 59992
                          AS: 60137
                          IP: 94.229.112.0/20
                          IP: 185.86.240.0/22
                          IP: 2a04:ec20::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:a4:ff:91:9b:68:e3:79:85:9f:31:d8:39:80:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:e8:1b:55:d3:14:37:bd:1b:7f:6e:c9:94:
                    c1:e7:9a:a6:c4:c1:9a:01:60:eb:ff:e4:a7:66:85:
                    b0:66:e6:36:c4:12:8f:e0:5c:fd:4c:7d:57:e5:3e:
                    6e:1c:da:10:27:1a:7c:8b:13:99:7d:c8:28:71:a5:
                    66:87:2c:83:5d:62:7e:f2:b0:3c:4c:c6:46:d3:06:
                    6d:ed:e1:67:e7:45:4a:ab:25:07:0d:d9:db:c5:83:
                    1c:d5:48:bf:28:83:64:35:8d:d9:fa:22:d9:81:0c:
                    9a:bb:cc:9b:6d:06:2e:86:2f:e6:ee:e0:b2:75:c2:
                    a7:05:b0:ad:44:a9:39:53:5d:90:12:1f:0a:a2:6f:
                    e1:44:0e:7a:9d:17:54:75:a7:e1:b3:e3:35:89:e8:
                    ec:30:38:e3:38:3e:8f:33:2c:25:48:8c:3c:7b:41:
                    be:db:88:e8:b0:15:7e:08:cf:6d:0d:0a:ba:b4:35:
                    66:c1:af:b9:22:7c:cf:b5:ab:cf:b8:71:e8:ca:17:
                    fe:32:fc:74:55:6d:14:47:5a:fe:e9:a3:84:0b:85:
                    5c:d6:9c:f6:ed:7b:95:db:36:05:6b:ac:a8:86:39:
                    13:a8:c3:44:38:f6:1a:5f:13:32:6a:3c:d9:43:55:
                    b5:c7:bb:af:fa:0d:da:1f:73:a2:ca:6c:d1:49:2d:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.229.112.0/20
                  185.86.240.0/22
                IPv6:
                  2a04:ec20::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49122
                  59992
                  60137

    Signature Algorithm: sha256WithRSAEncryption
         53:53:c3:fd:61:65:77:0c:a6:70:f7:da:bc:4c:ac:a5:12:e5:
         1b:33:67:d0:1a:f0:06:30:00:39:7b:e2:0f:f8:a1:e7:d2:b6:
         e3:3b:ba:7f:51:c8:b0:8f:d7:86:0d:92:39:46:fb:8f:4e:f6:
         84:7e:3b:15:bc:d3:04:ac:ea:b2:af:51:d0:f9:fa:09:46:61:
         91:37:0e:99:fa:d6:ec:4e:69:cc:b8:ac:43:dd:18:16:fd:25:
         40:19:7b:a2:eb:bc:86:f0:f2:1d:53:e4:01:6f:74:c0:c7:2a:
         80:9d:5b:e4:ff:05:74:36:fc:a4:a3:1c:5e:e7:b5:1e:bb:ea:
         8c:b4:b5:2f:8f:ed:f6:31:b8:df:4c:f2:5d:b7:40:9a:f4:0a:
         00:83:a0:9c:7f:a9:ed:47:c2:4e:c2:cf:a2:f5:28:0c:5e:8c:
         73:a2:9f:7a:a5:2f:22:d1:99:5e:76:0c:02:1f:52:44:8e:7a:
         e9:1a:a7:fa:5b:eb:50:76:36:ce:7a:06:34:b5:79:a2:0e:2f:
         3d:cb:b1:e4:14:a7:0b:95:69:3f:1c:3d:91:c7:42:2b:63:c0:
         32:e3:34:fa:d0:e0:63:90:62:6b:91:73:0e:d8:2f:12:77:5e:
         6d:0f:ca:b1:24:8e:6a:64:c1:55:58:1d:b9:3b:8b:bd:e0:cb:
         6a:86:0b:7d
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAZQlj6T/kZto43mFnzHYOYD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2QzYzMwOTM5YjkwNmE0NTE1YTFjNjVjMDg4MzY4MjliNmEzMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70joG1XTFDe9G39uyZTB55qmxMGa
AWDr/+SnZoWwZuY2xBKP4Fz9TH1X5T5uHNoQJxp8ixOZfcgocaVmhyyDXWJ+8rA8
TMZG0wZt7eFn50VKqyUHDdnbxYMc1Ui/KINkNY3Z+iLZgQyau8ybbQYuhi/m7uCy
dcKnBbCtRKk5U12QEh8Kom/hRA56nRdUdafhs+M1iejsMDjjOD6PMywlSIw8e0G+
24josBV+CM9tDQq6tDVmwa+5InzPtavPuHHoyhf+Mvx0VW0UR1r+6aOEC4Vc1pz2
7XuV2zYFa6yohjkTqMNEOPYaXxMyajzZQ1W1x7uv+g3aH3OiymzRSS1+oQIDAQAB
o4ICvzCCArswHQYDVR0OBBYEFBzTwwk5uQakUVocZcCINoKbajKJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzljNTc2
OC1lODBhLTQxMTAtYTQ2ZC0wZmY4NmVmOTVlMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvOWM1NzY4
LWU4MGEtNDExMC1hNDZkLTBmZjg2ZWY5NWUwZi8xL0hOUERDVG01QnFSUldoeGx3
SWcyZ3B0cU1vay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQEXuVwAwQCuVbwMA0EAgACMAcDBQIqBOwgMCQG
CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwC/4gIDAOpYAgMA6ukwDQYJKoZIhvcNAQEL
BQADggEBAFNTw/1hZXcMpnD32rxMrKUS5RszZ9Aa8AYwADl74g/4oefStuM7un9R
yLCP14YNkjlG+49O9oR+OxW80wSs6rKvUdD5+glGYZE3Dpn61uxOacy4rEPdGBb9
JUAZe6LrvIbw8h1T5AFvdMDHKoCdW+T/BXQ2/KSjHF7ntR676oy0tS+P7fYxuN9M
8l23QJr0CgCDoJx/qe1Hwk7Cz6L1KAxejHOin3qlLyLRmV52DAIfUkSOeukap/pb
61B2Ns56BjS1eaIOLz3LseQUpwuVaT8cPZHHQitjwDLjNPrQ4GOQYmuRcw7YLxJ3
Xm0PyrEkjmpkwVVYHbk7i73gy2qGC30=
-----END CERTIFICATE-----