Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
File:                     HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer (raw, json)
Hash identifier:          d+BmIv5+mjOdmkMHS55Cq5kbIfFCQQmvT8Bp/3jthZU=
Subject key identifier:   1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C131A0E40E7CD7A2530D155DBBAEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.28.196.0/22
                          IP: 2a04:35c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:13:1a:0e:40:e7:cd:7a:25:30:d1:55:db:ba:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:7d:3d:15:39:cc:1c:e0:56:7a:0c:98:c0:
                    0f:23:25:20:43:e3:79:3f:09:54:c4:f1:4a:df:df:
                    24:56:6d:3a:3a:08:ba:2e:37:9b:fe:82:a0:31:d0:
                    4c:1e:6c:6a:1f:af:96:e9:e8:3e:07:bf:ad:b1:ef:
                    4b:97:8c:ff:ea:b3:77:6e:e8:23:60:15:0e:ad:63:
                    2a:6b:f8:63:d0:1f:9d:9a:8e:b5:02:a1:0e:17:b1:
                    0d:6c:43:6f:5f:e9:9c:54:14:b8:66:b8:65:7e:15:
                    59:89:10:d6:7d:83:c1:a0:1b:7e:53:fa:d0:42:e6:
                    c1:c5:f4:f8:50:c0:c8:c9:63:06:b7:e3:30:61:ef:
                    ed:80:1b:76:7a:8a:0d:14:b0:f7:aa:0d:48:da:fc:
                    13:9a:be:9a:5e:04:10:fc:5d:2f:c7:22:fb:69:5e:
                    ca:71:55:8c:2d:10:09:50:07:20:bc:74:47:12:b1:
                    6a:df:1d:cc:df:0d:4c:a6:84:96:f5:8b:ef:dc:4e:
                    a8:fb:da:80:39:da:42:d1:ad:f0:cb:07:38:94:3e:
                    4a:1d:1f:1a:a8:d9:20:27:00:70:78:14:50:73:e0:
                    7d:b9:e3:6b:b4:73:22:d2:b1:de:0b:8c:9e:fa:89:
                    d8:a5:64:50:f1:b7:16:60:63:32:a3:0b:f2:fc:cb:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.28.196.0/22
                IPv6:
                  2a04:35c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:84:90:15:0d:56:44:d9:66:83:13:d8:c9:5d:19:0d:21:
         69:d4:0a:96:cb:ff:57:49:dd:29:4c:8c:e3:c6:2a:36:07:9b:
         15:c4:a0:f4:f9:96:bb:67:40:83:23:9b:47:95:bf:66:80:6a:
         86:ad:89:f0:6e:86:18:e7:17:2a:37:5e:e6:f3:d2:8f:d0:1d:
         09:da:1e:22:25:0f:8b:78:0a:23:48:3a:7b:bf:9d:78:85:fd:
         89:d9:25:41:78:93:89:93:17:06:de:0a:ad:db:62:0f:3d:6b:
         aa:8b:cb:61:bb:dd:44:9b:42:6b:d2:6f:52:9a:a5:f3:aa:71:
         9e:d6:85:17:7d:45:b6:d8:a1:bb:fb:81:f6:94:10:3e:aa:76:
         09:24:9b:52:ed:54:ef:05:f9:68:20:40:26:c5:b0:b8:36:95:
         7f:21:c1:f6:3e:10:e7:16:c9:83:16:69:0d:a8:dd:27:2d:a4:
         ad:dd:ab:bf:37:b7:6b:e3:b6:c7:6c:eb:53:4c:79:4d:cf:ab:
         c4:d2:29:32:f8:bb:53:35:fb:93:fb:c3:d5:d8:f9:c9:a4:3d:
         ed:1a:a5:98:c2:d6:12:e2:6a:2d:49:fb:62:e2:f3:1f:97:91:
         51:41:84:0b:4c:90:51:7f:40:01:3f:7d:da:47:8b:07:a9:57:
         61:3c:11:03
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQfjBMaDkDnzXolMNFV27rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGM1ZDNiY2M5MWU0YTMxYTIwODM2MWFmMGE5M2E2MmY2MmQ4MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmh9PRU5zBzgVnoMmMAPIyUgQ+N5
PwlUxPFK398kVm06Ogi6Ljeb/oKgMdBMHmxqH6+W6eg+B7+tse9Ll4z/6rN3bugj
YBUOrWMqa/hj0B+dmo61AqEOF7ENbENvX+mcVBS4ZrhlfhVZiRDWfYPBoBt+U/rQ
QubBxfT4UMDIyWMGt+MwYe/tgBt2eooNFLD3qg1I2vwTmr6aXgQQ/F0vxyL7aV7K
cVWMLRAJUAcgvHRHErFq3x3M3w1MpoSW9Yvv3E6o+9qAOdpC0a3wywc4lD5KHR8a
qNkgJwBweBRQc+B9ueNrtHMi0rHeC4ye+onYpWRQ8bcWYGMyowvy/MuLjQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB3F07zJHkoxogg2GvCpOmL2LYJwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzQ5NGJj
NS0xYWViLTQ1NjUtYWFkNy1mNjliN2UyNjYyMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDk0YmM1
LTFhZWItNDU2NS1hYWQ3LWY2OWI3ZTI2NjIzMy8xL0hjWFR2TWtlU2pHaUNEWWE4
S2s2WXZZdGduQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRzEMA0EAgACMAcDBQMqBDXAMA0GCSqGSIb3
DQEBCwUAA4IBAQAZyISQFQ1WRNlmgxPYyV0ZDSFp1AqWy/9XSd0pTIzjxio2B5sV
xKD0+Za7Z0CDI5tHlb9mgGqGrYnwboYY5xcqN17m89KP0B0J2h4iJQ+LeAojSDp7
v514hf2J2SVBeJOJkxcG3gqt22IPPWuqi8thu91Em0Jr0m9SmqXzqnGe1oUXfUW2
2KG7+4H2lBA+qnYJJJtS7VTvBfloIEAmxbC4NpV/IcH2PhDnFsmDFmkNqN0nLaSt
3au/N7dr47bHbOtTTHlNz6vE0iky+LtTNfuT+8PV2PnJpD3tGqWYwtYS4motSfti
4vMfl5FRQYQLTJBRf0ABP33aR4sHqVdhPBED
-----END CERTIFICATE-----