Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
File:                     HTHgIH7TynaEoD6I-aHeKSLdRd4.cer (raw, json)
Hash identifier:          t9LwhiuLu44v4frkDzdsyFfVvZQkVXisAyAXzjJkjRo=
Subject key identifier:   1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01951852DAACF0927F6FE9881EB5A589D1CD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 09:10:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 141.68.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:18:52:da:ac:f0:92:7f:6f:e9:88:1e:b5:a5:89:d1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 18 09:10:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:21:71:30:bb:08:14:20:55:2d:29:88:fc:
                    69:f3:3c:c7:c2:1c:5b:40:bd:4b:9a:c2:02:b0:8d:
                    b7:8c:b9:c1:e6:b2:9c:17:a2:e4:8b:28:09:2b:c3:
                    a6:e7:a1:d6:a2:c4:40:32:5b:16:76:2e:8f:d0:94:
                    98:c1:41:bc:bd:99:de:23:8b:49:8b:9d:33:9f:dc:
                    d1:d5:8a:24:4a:c1:56:47:e2:6a:62:a0:a3:e2:cc:
                    75:5e:3d:2e:10:5f:47:bb:2a:1a:ab:70:ec:d7:e5:
                    b8:68:87:fe:61:15:fa:a3:a2:44:a7:c2:e3:4e:6e:
                    35:77:e6:e0:44:cb:f1:5e:74:f8:d8:17:9a:4f:9a:
                    34:de:ec:97:75:5b:12:31:a4:6e:51:91:ac:6d:1e:
                    c3:fa:6f:e3:f2:06:1d:e6:a9:cb:48:ce:6b:46:68:
                    d0:3e:e3:00:1b:be:05:08:f6:0e:64:78:2a:0f:fa:
                    5a:ac:30:51:52:53:13:77:5f:2a:36:0b:e9:98:81:
                    77:87:07:17:ed:6a:99:60:ee:c2:cb:2b:1b:1f:cf:
                    fe:8c:3b:33:d3:35:89:7c:56:61:04:a4:b7:06:27:
                    6c:a8:01:44:29:5f:16:cf:ee:a1:4a:e3:b7:1e:83:
                    a8:be:a7:95:48:07:88:6f:33:1b:e2:3c:37:b7:4d:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:38:db:69:05:aa:1d:6b:31:1b:c4:46:f2:76:8e:ba:ed:
         7c:57:12:e4:19:9a:ff:aa:2d:26:b7:80:dd:55:20:71:c8:17:
         cd:22:3b:4e:06:e4:17:9a:37:9d:b6:43:5d:13:e4:66:19:ec:
         ef:0b:9a:f3:3c:99:a0:7c:00:cf:4c:02:67:6f:65:6b:7d:b1:
         55:31:49:17:dc:8c:97:e8:14:ed:05:2c:e7:3a:f3:7e:7f:9a:
         1e:10:d7:0b:d6:7f:97:58:19:27:7a:a3:35:7b:95:11:83:32:
         44:1d:d7:85:e7:18:2d:90:14:39:8f:4b:6f:05:70:37:f2:f8:
         2b:48:2e:6e:49:1d:ab:d7:9b:69:b8:7c:74:02:0e:d0:a2:92:
         69:e0:36:03:d2:a4:ce:2c:89:07:37:e9:9f:39:e1:27:62:f2:
         cc:54:e9:12:02:84:4b:bd:77:52:ac:9b:d2:0a:4c:70:97:76:
         4e:2c:22:99:d3:4c:25:4e:69:db:1c:55:3a:b0:e1:b9:b1:3a:
         95:f1:6d:86:4c:fd:fb:36:b5:93:cb:3e:53:83:63:bb:60:d3:
         4e:a1:c7:63:a2:e2:37:ff:d3:a1:da:7f:e7:82:c4:b4:6e:35:
         2d:8a:23:1f:22:17:4b:88:39:39:7b:39:15:9e:72:27:55:74:
         0b:f8:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----