Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
File:                     HWHLS77lzdfs7adWCqJJxtEfI6k.cer (raw, json)
Hash identifier:          iTKTi8QUw1Prp8RnLDhhI9irkHDfyOZdrJwJ/b1JnuA=
Subject key identifier:   1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8CA73DFA8B13D85FEFAAA9ACB11A0F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198142
                          IP: 193.150.26.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a7:3d:fa:8b:13:d8:5f:ef:aa:a9:ac:b1:1a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:f6:5c:fa:ea:1a:4b:44:ba:5b:69:0d:fc:
                    e6:93:c9:57:f6:8c:2f:d8:a1:88:7b:5d:78:5c:24:
                    67:8c:a3:c7:86:da:39:2c:df:7f:02:a0:54:fc:d0:
                    62:9d:20:0c:0c:c3:de:43:dd:77:fe:0c:ea:19:f2:
                    31:3b:e8:5e:b2:07:19:6d:8c:59:a0:9a:75:03:80:
                    19:cc:7a:f8:35:e0:b5:3b:de:60:ae:f0:dc:87:fe:
                    fc:18:ff:eb:50:79:83:99:0f:f4:34:11:bf:22:2f:
                    af:0c:77:83:a7:9d:55:9c:02:52:32:1e:01:15:a0:
                    d7:cd:1e:ee:18:d1:40:cb:c0:4e:db:2c:5b:26:8a:
                    59:72:6f:0f:c3:82:39:d5:0c:ae:38:23:d4:41:b1:
                    86:43:2b:f2:75:1e:a4:48:41:75:94:90:30:9c:d2:
                    68:ca:dd:92:f3:06:de:13:d0:62:e4:03:99:b6:4f:
                    0d:bd:a2:68:c8:33:1b:5e:a2:57:42:d4:27:78:d7:
                    c0:a2:dd:08:32:56:19:66:f5:47:f9:d1:e3:83:e8:
                    1b:6a:2a:ed:72:fe:a8:08:60:01:32:41:79:a1:f6:
                    8d:4c:a8:c6:24:1d:93:76:cf:52:bd:50:72:df:e1:
                    83:e8:67:5f:2c:7e:9e:ed:0a:7a:1e:77:1b:53:02:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.26.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198142

    Signature Algorithm: sha256WithRSAEncryption
         03:27:60:f6:3b:9c:45:cd:94:e7:f3:6b:ed:9a:ba:a3:84:26:
         8f:f0:e3:e0:9a:fd:51:c9:2f:83:ac:93:81:75:f4:b4:5a:63:
         88:4e:83:53:34:64:e7:66:8a:64:c3:ae:cb:de:f0:d3:13:a5:
         3c:d3:34:2e:40:3d:77:43:53:b7:f6:86:19:73:00:79:da:78:
         4e:81:76:87:56:2a:c4:73:17:c7:89:43:6d:cd:bd:eb:15:03:
         a7:bd:32:06:83:a2:45:13:99:94:c1:69:fe:ee:12:49:b4:40:
         1b:17:61:01:6d:2e:0d:19:67:76:77:13:95:25:c6:f4:0f:a4:
         71:7d:80:d1:62:b0:6d:f0:f2:d0:69:59:09:9b:02:79:1b:34:
         a6:b6:31:e1:bc:59:38:b2:c2:cd:4f:a8:c0:49:03:de:e6:7d:
         ab:e4:8f:5f:84:25:1c:e2:ae:d3:b8:76:cc:7d:66:92:44:63:
         7a:cf:57:2f:07:a2:b1:69:9b:24:af:91:e6:a3:56:3e:7e:37:
         f3:87:e9:8f:e3:1e:77:ff:af:9e:42:59:23:5d:d4:96:2d:d3:
         c8:75:b6:ca:f0:c6:9e:78:15:05:33:7a:24:ea:ec:88:66:3f:
         cc:7b:6a:63:ad:11:60:25:d8:17:84:c1:86:0b:62:4f:22:b3:
         46:84:7d:5c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjKc9+osT2F/vqqmssRoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDYxY2I0YmJlZTVjZGQ3ZWNlZGE3NTYwYWEyNDljNmQxMWYyM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGv2XPrqGktEultpDfzmk8lX9owv
2KGIe114XCRnjKPHhto5LN9/AqBU/NBinSAMDMPeQ913/gzqGfIxO+hesgcZbYxZ
oJp1A4AZzHr4NeC1O95grvDch/78GP/rUHmDmQ/0NBG/Ii+vDHeDp51VnAJSMh4B
FaDXzR7uGNFAy8BO2yxbJopZcm8Pw4I51QyuOCPUQbGGQyvydR6kSEF1lJAwnNJo
yt2S8wbeE9Bi5AOZtk8NvaJoyDMbXqJXQtQneNfAot0IMlYZZvVH+dHjg+gbairt
cv6oCGABMkF5ofaNTKjGJB2Tds9SvVBy3+GD6GdfLH6e7Qp6HncbUwIY2wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFB1hy0u+5c3X7O2nVgqiScbRHyOpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2IyZjVm
OS1kMzRhLTQ3YTMtYmI1NC0wODcxZmRiNmE0ZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYjJmNWY5
LWQzNGEtNDdhMy1iYjU0LTA4NzFmZGI2YTRmYS8xL0hXSExTNzdsemRmczdhZFdD
cUpKeHRFZkk2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwZYaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMF/jANBgkqhkiG9w0BAQsFAAOCAQEAAydg9jucRc2U5/Nr7Zq6o4Qmj/Dj4Jr9
Uckvg6yTgXX0tFpjiE6DUzRk52aKZMOuy97w0xOlPNM0LkA9d0NTt/aGGXMAedp4
ToF2h1YqxHMXx4lDbc296xUDp70yBoOiRROZlMFp/u4SSbRAGxdhAW0uDRlndncT
lSXG9A+kcX2A0WKwbfDy0GlZCZsCeRs0prYx4bxZOLLCzU+owEkD3uZ9q+SPX4Ql
HOKu07h2zH1mkkRjes9XLweisWmbJK+R5qNWPn4384fpj+Med/+vnkJZI13Uli3T
yHW2yvDGnngVBTN6JOrsiGY/zHtqY60RYCXYF4TBhgtiTyKzRoR9XA==
-----END CERTIFICATE-----