Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H_Umh1LLtSS8_ktaSXb_D4XTia8.cer
File:                     H_Umh1LLtSS8_ktaSXb_D4XTia8.cer (raw, json)
Hash identifier:          l8etZJ8MuIIND4nLZsG7JW1CgcVhuId33EOxJehh28g=
Subject key identifier:   1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E96A022C8D74F5A264E2FA1D149ED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.12.216.0/22
                          IP: 2a03:8940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:96:a0:22:c8:d7:4f:5a:26:4e:2f:a1:d1:49:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1ff5268752cbb524bcfe4b5a4976ff0f85d389af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:5c:db:0b:05:f6:be:4f:7b:de:b2:2c:79:
                    3c:20:7c:16:af:7a:ef:72:e2:39:87:af:ef:08:01:
                    a9:bb:86:34:3d:7d:b5:c3:d5:57:e1:96:9d:c5:85:
                    0c:3b:ac:0d:c1:17:f5:93:52:08:fb:c8:9e:a0:fa:
                    28:da:7a:91:0e:c9:6b:03:03:87:a6:5d:69:67:03:
                    97:5f:f1:19:8d:63:58:4e:17:36:b3:e1:12:0f:c1:
                    3d:c5:69:ab:ad:a3:28:77:a9:6a:ef:ac:de:95:1c:
                    11:05:7a:71:67:c2:6c:52:79:30:37:04:31:b2:6c:
                    c4:71:98:bb:ae:97:07:f7:4b:0d:4e:bc:f3:c7:dd:
                    9f:3b:1d:14:0a:2c:11:2c:60:60:e2:26:42:7f:93:
                    59:b5:54:10:9d:05:0e:80:73:a7:37:7c:4b:04:0f:
                    e6:e1:55:a4:7a:96:de:fb:fc:dc:78:f4:c2:8a:b6:
                    2f:77:18:4e:d8:76:88:bf:e6:cb:93:34:2f:fa:46:
                    18:05:af:89:7e:54:06:72:69:3b:88:67:2c:9f:72:
                    3b:7d:23:a4:fa:cc:17:5a:26:d3:4c:6c:d9:fc:4b:
                    d3:94:8a:e3:fe:36:56:c5:a1:6f:02:1d:d1:32:e3:
                    44:3e:61:b7:68:c3:2e:e8:cf:c9:e2:cb:7a:23:3e:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:26:87:52:CB:B5:24:BC:FE:4B:5A:49:76:FF:0F:85:D3:89:AF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4c2734-1139-4a3f-8f84-974488bcb723/1/H_Umh1LLtSS8_ktaSXb_D4XTia8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.216.0/22
                IPv6:
                  2a03:8940::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:52:4c:cd:79:c1:a0:a7:e6:8c:76:2e:ed:90:ce:c3:9c:af:
         b0:a4:5c:3c:56:d4:a6:99:4b:ce:47:d8:95:b1:6d:0a:57:e0:
         48:2b:f3:e9:85:ef:78:cc:44:e5:73:1a:ff:b2:f3:6b:f4:51:
         78:4d:55:2f:9f:b8:a4:10:bc:58:5f:18:17:b0:4b:d1:3f:76:
         fe:b8:57:e4:98:78:42:71:f4:de:43:a6:bc:77:e6:8c:25:0e:
         86:85:fa:b0:09:af:37:f3:42:2c:4f:37:f4:cb:74:c5:53:0a:
         5e:35:6c:59:4e:40:0d:25:49:75:a7:d4:5f:49:40:d9:43:54:
         52:b2:ba:64:82:26:e7:69:bd:41:a8:a0:5d:67:41:8e:65:4e:
         33:05:22:46:fc:99:b0:90:34:28:c5:f9:68:4e:16:8c:c3:49:
         b0:00:ff:6c:31:87:cf:9f:4d:7e:f4:b5:64:7f:4f:e0:50:a4:
         5c:82:95:06:66:7a:6b:e0:69:59:56:1b:b2:01:37:9e:bd:84:
         3c:27:2b:f7:a3:8e:8e:b2:c1:4b:b3:76:4e:27:75:d1:94:b6:
         6b:e1:7c:4f:01:ba:d9:0c:68:c7:b1:17:d5:fc:a3:64:90:99:
         1d:a6:d6:a0:74:ba:c7:d8:04:ba:71:bb:7c:c4:0e:10:43:42:
         4b:f3:85:1d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQljpagIsjXT1omTi+h0UntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmY1MjY4NzUyY2JiNTI0YmNmZTRiNWE0OTc2ZmYwZjg1ZDM4OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOFc2wsF9r5Pe96yLHk8IHwWr3rv
cuI5h6/vCAGpu4Y0PX21w9VX4ZadxYUMO6wNwRf1k1II+8ieoPoo2nqRDslrAwOH
pl1pZwOXX/EZjWNYThc2s+ESD8E9xWmrraMod6lq76zelRwRBXpxZ8JsUnkwNwQx
smzEcZi7rpcH90sNTrzzx92fOx0UCiwRLGBg4iZCf5NZtVQQnQUOgHOnN3xLBA/m
4VWkepbe+/zcePTCirYvdxhO2HaIv+bLkzQv+kYYBa+JflQGcmk7iGcsn3I7fSOk
+swXWibTTGzZ/EvTlIrj/jZWxaFvAh3RMuNEPmG3aMMu6M/J4st6Iz6uIQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB/1JodSy7UkvP5LWkl2/w+F04mvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzRjMjcz
NC0xMTM5LTRhM2YtOGY4NC05NzQ0ODhiY2I3MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNGMyNzM0
LTExMzktNGEzZi04Zjg0LTk3NDQ4OGJjYjcyMy8xL0hfVW1oMUxMdFNTOF9rdGFT
WGJfRDRYVGlhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQzYMA0EAgACMAcDBQAqA4lAMA0GCSqGSIb3
DQEBCwUAA4IBAQCFUkzNecGgp+aMdi7tkM7DnK+wpFw8VtSmmUvOR9iVsW0KV+BI
K/Pphe94zETlcxr/svNr9FF4TVUvn7ikELxYXxgXsEvRP3b+uFfkmHhCcfTeQ6a8
d+aMJQ6GhfqwCa8380IsTzf0y3TFUwpeNWxZTkANJUl1p9RfSUDZQ1RSsrpkgibn
ab1BqKBdZ0GOZU4zBSJG/JmwkDQoxfloThaMw0mwAP9sMYfPn01+9LVkf0/gUKRc
gpUGZnpr4GlZVhuyATeevYQ8Jyv3o46OssFLs3ZOJ3XRlLZr4XxPAbrZDGjHsRfV
/KNkkJkdptagdLrH2AS6cbt8xA4QQ0JL84Ud
-----END CERTIFICATE-----