Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
File:                     HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer (raw, json)
Hash identifier:          plIj9ObJk3OH3v5naomiu8+d9hOdz6M76fGqLVsQyC0=
Subject key identifier:   1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDDA5D15480DB2BE6F0717BEFADC75
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209803
                          IP: 193.32.156.0/22
                          IP: 2a09:880::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:da:5d:15:48:0d:b2:be:6f:07:17:be:fa:dc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:9a:98:10:28:79:21:2f:47:92:d4:b4:b3:
                    01:15:88:6e:24:33:e9:b6:88:a5:f9:9d:ea:1c:84:
                    ef:d5:93:c4:71:90:da:eb:0a:18:72:7e:79:2f:57:
                    8a:f6:2e:30:26:7e:96:ff:f8:64:ce:ba:db:b6:63:
                    44:54:f9:30:d0:b3:71:c6:45:e4:12:da:60:5b:b9:
                    47:7e:f5:49:c0:3c:af:4c:3a:8a:11:30:ae:2d:d6:
                    a6:f4:77:8f:1c:12:4e:ef:76:80:cf:da:b5:0c:e3:
                    cc:cb:c3:f1:40:27:26:dd:98:80:8c:cf:6e:2d:b5:
                    f3:c5:ae:5e:4d:49:34:56:47:c1:99:38:a5:d6:a8:
                    1e:11:cd:78:78:bd:62:58:52:d8:ca:71:43:18:f0:
                    de:dd:c2:4a:d6:47:86:70:be:45:a2:02:c4:93:71:
                    03:29:1c:bf:e5:84:78:cb:f5:ea:49:8d:69:11:2c:
                    ad:4a:a7:94:a8:54:fe:4b:7d:53:a4:3a:0f:7a:e5:
                    01:63:80:88:e9:72:64:08:a8:19:40:ea:a1:53:a9:
                    95:5c:2d:d8:04:79:4c:fb:2d:6d:e5:c2:51:18:14:
                    ae:e1:9b:a9:38:3b:1b:bf:49:81:09:48:fe:7d:5d:
                    5b:83:68:24:f5:48:36:38:10:70:be:c0:47:81:06:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.156.0/22
                IPv6:
                  2a09:880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209803

    Signature Algorithm: sha256WithRSAEncryption
         28:70:21:69:5b:ed:48:da:37:08:92:6e:f8:8d:6d:62:ca:dd:
         f3:ed:a5:59:dd:ad:2c:6a:c4:64:8a:8c:55:7d:a9:65:86:66:
         54:e6:0c:98:4d:57:ee:f1:00:35:17:12:46:a7:17:12:aa:35:
         74:ca:96:e7:1a:82:52:ad:86:ad:93:c0:88:62:22:9e:aa:11:
         c1:dc:93:56:80:7c:53:bd:3f:ef:35:02:09:17:7c:64:21:ca:
         6d:b5:26:82:01:f5:5a:dd:96:4f:da:46:8d:f6:d2:77:f6:fc:
         39:65:75:36:c3:df:04:51:f5:53:c3:82:9a:e5:e9:43:58:eb:
         f9:75:5e:28:1d:68:bd:58:28:e3:d7:f5:e6:a8:d2:f7:f4:e3:
         54:a6:b8:aa:7e:78:4f:5d:8b:b9:c7:6d:84:9f:52:f0:a4:fc:
         3b:0d:21:40:38:82:32:76:85:5a:36:82:28:c1:39:fb:c7:9c:
         50:24:cb:bd:57:11:c4:2c:68:7d:e6:be:f2:64:73:29:5c:16:
         da:f9:e8:cb:ae:a6:19:52:10:05:ef:47:06:e9:34:f5:c9:64:
         4d:86:62:6d:66:14:be:d1:0e:28:fa:ce:33:d8:f6:22:aa:47:
         2f:c8:c0:d4:d8:81:da:e2:92:c4:d0:c4:db:1e:81:ea:04:38:
         b9:85:64:83
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/dpdFUgNsr5vBxe++tx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGQ5YTk0Njc5ZWM5YWIzM2U2NWUwNjljOWFhNDQwZGIyNzNlMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiimamBAoeSEvR5LUtLMBFYhuJDPp
toil+Z3qHITv1ZPEcZDa6woYcn55L1eK9i4wJn6W//hkzrrbtmNEVPkw0LNxxkXk
EtpgW7lHfvVJwDyvTDqKETCuLdam9HePHBJO73aAz9q1DOPMy8PxQCcm3ZiAjM9u
LbXzxa5eTUk0VkfBmTil1qgeEc14eL1iWFLYynFDGPDe3cJK1keGcL5FogLEk3ED
KRy/5YR4y/XqSY1pESytSqeUqFT+S31TpDoPeuUBY4CI6XJkCKgZQOqhU6mVXC3Y
BHlM+y1t5cJRGBSu4ZupODsbv0mBCUj+fV1bg2gk9Ug2OBBwvsBHgQbi6wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB3ZqUZ57JqzPmXgacmqRA2yc+FOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2EzYjli
OS0yMTdjLTQxYzktOTQ3Ni0yN2RkMGFkMmFkZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTNiOWI5
LTIxN2MtNDFjOS05NDc2LTI3ZGQwYWQyYWRmMy8xL0hkbXBSbm5zbXJNLVplQnB5
YXBFRGJKejRVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwSCcMA0EAgACMAcDBQMqCQiAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMzizANBgkqhkiG9w0BAQsFAAOCAQEAKHAhaVvtSNo3
CJJu+I1tYsrd8+2lWd2tLGrEZIqMVX2pZYZmVOYMmE1X7vEANRcSRqcXEqo1dMqW
5xqCUq2GrZPAiGIinqoRwdyTVoB8U70/7zUCCRd8ZCHKbbUmggH1Wt2WT9pGjfbS
d/b8OWV1NsPfBFH1U8OCmuXpQ1jr+XVeKB1ovVgo49f15qjS9/TjVKa4qn54T12L
ucdthJ9S8KT8Ow0hQDiCMnaFWjaCKME5+8ecUCTLvVcRxCxofea+8mRzKVwW2vno
y66mGVIQBe9HBuk09clkTYZibWYUvtEOKPrOM9j2IqpHL8jA1NiB2uKSxNDE2x6B
6gQ4uYVkgw==
-----END CERTIFICATE-----