Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
File:                     HgxHunmaBgczODuKTbNuhLYtMV0.cer (raw, json)
Hash identifier:          nmP+nktbrukImnlkheiy90fZnGxmjhdqa7T39YhJtDA=
Subject key identifier:   1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D980CD3CB3114341ECC78A2B8F97F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212842
                          AS: 213142
                          IP: 185.38.100.0/23
                          IP: 193.247.67.0/24
                          IP: 2a07:eac0::/31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:98:0c:d3:cb:31:14:34:1e:cc:78:a2:b8:f9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:75:c1:64:2c:a0:14:10:4d:e5:5f:86:19:
                    6c:c3:53:62:c4:23:ab:08:c7:94:f5:39:3d:27:9f:
                    bd:35:c7:c7:0e:c6:a8:9d:d6:42:ed:c9:61:93:b4:
                    26:e4:30:e9:61:b9:9f:f3:d0:e2:d3:8e:f4:70:ee:
                    de:89:6a:47:15:8d:0d:12:95:dd:84:6c:f7:f3:00:
                    75:91:7e:0c:a7:d5:22:07:33:4b:74:45:2d:d1:f9:
                    57:c4:78:56:40:0d:d3:76:10:e7:e7:b1:f4:52:e1:
                    6d:2a:dd:22:fe:b5:7e:ba:3f:79:7f:fe:c5:29:e8:
                    b1:19:6d:21:8a:25:34:33:7d:f9:e8:a6:73:b0:02:
                    eb:18:81:7a:f9:41:ca:f3:5d:7e:92:4d:94:82:dd:
                    fd:5b:96:c0:39:2c:68:85:75:96:77:bc:b4:f9:65:
                    1c:48:5c:90:48:58:22:ef:75:d9:bd:d4:bb:c7:2b:
                    e1:4b:b9:43:a7:cd:e4:cb:4f:46:3d:d1:62:85:d1:
                    ee:8a:7f:8e:bb:1c:05:3f:50:83:01:9f:90:6a:1e:
                    dc:8f:1a:e3:2a:6e:ed:1b:20:4f:79:8c:92:e9:03:
                    fc:c7:c8:10:ca:3f:78:60:27:b7:bf:e8:5b:b4:15:
                    97:a1:7d:7f:8f:ff:a7:d5:46:d9:d6:93:e2:6a:cc:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.100.0/23
                  193.247.67.0/24
                IPv6:
                  2a07:eac0::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212842
                  213142

    Signature Algorithm: sha256WithRSAEncryption
         25:09:6a:17:bb:d7:e5:ea:0c:da:ce:42:bb:25:67:56:61:6c:
         9a:fd:38:d6:a8:dc:21:9f:ca:f1:2e:9d:06:23:8d:54:d8:b2:
         13:07:ed:d6:07:ad:c1:30:75:1a:d8:f6:92:5a:c1:6b:8b:50:
         02:a9:17:5f:ee:6b:31:9f:1e:ea:44:f3:e5:11:65:a5:79:c4:
         97:b6:2b:ba:41:60:a1:90:26:51:a0:91:38:e6:5d:32:a5:73:
         f7:be:52:3f:16:8e:95:78:b2:26:e5:36:fc:93:2c:ce:3b:b0:
         87:46:9e:e9:4d:e8:c5:af:ba:05:11:27:3f:92:22:b6:53:d8:
         ca:d5:7e:ee:2c:77:6d:dc:90:20:79:33:d7:f8:af:b2:06:21:
         49:db:bb:10:49:42:6d:92:3c:7a:55:4b:ee:4c:8b:cf:65:7e:
         1e:a6:39:0b:a4:ab:bc:ef:5b:65:81:5a:d1:d3:0b:62:6d:16:
         f6:04:37:3c:6a:83:86:e6:51:fc:6c:eb:df:d0:94:02:95:4f:
         6e:7d:3f:24:78:68:d1:97:cb:ad:af:b1:30:b2:04:6a:34:f9:
         d7:49:0a:04:b0:c9:1a:85:d8:2c:9d:4d:df:43:26:74:f2:ae:
         2a:d9:80:77:51:16:56:d7:f3:b7:f5:0e:89:90:b1:1d:e5:3b:
         bc:00:56:cf
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQijZgM08sxFDQezHiiuPl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTBjNDdiYTc5OWEwNjA3MzMzODNiOGE0ZGIzNmU4NGI2MmQzMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZJ1wWQsoBQQTeVfhhlsw1NixCOr
CMeU9Tk9J5+9NcfHDsaondZC7clhk7Qm5DDpYbmf89Di0470cO7eiWpHFY0NEpXd
hGz38wB1kX4Mp9UiBzNLdEUt0flXxHhWQA3TdhDn57H0UuFtKt0i/rV+uj95f/7F
KeixGW0hiiU0M3356KZzsALrGIF6+UHK811+kk2Ugt39W5bAOSxohXWWd7y0+WUc
SFyQSFgi73XZvdS7xyvhS7lDp83ky09GPdFihdHuin+OuxwFP1CDAZ+Qah7cjxrj
Km7tGyBPeYyS6QP8x8gQyj94YCe3v+hbtBWXoX1/j/+n1UbZ1pPiaszsjwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFB4MR7p5mgYHMzg7ik2zboS2LTFdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2U3ZmU1
YS1iNjI2LTRhMzItYTFjYy1hMzI3YjhiNTZlZDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZTdmZTVh
LWI2MjYtNGEzMi1hMWNjLWEzMjdiOGI1NmVkNi8xL0hneEh1bm1hQmdjek9EdUtU
Yk51aExZdE1WMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBuSZkAwQAwfdDMA0EAgACMAcDBQEqB+rAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM/agIDA0CWMA0GCSqGSIb3DQEBCwUAA4IB
AQAlCWoXu9fl6gzazkK7JWdWYWya/TjWqNwhn8rxLp0GI41U2LITB+3WB63BMHUa
2PaSWsFri1ACqRdf7msxnx7qRPPlEWWlecSXtiu6QWChkCZRoJE45l0ypXP3vlI/
Fo6VeLIm5Tb8kyzOO7CHRp7pTejFr7oFESc/kiK2U9jK1X7uLHdt3JAgeTPX+K+y
BiFJ27sQSUJtkjx6VUvuTIvPZX4epjkLpKu871tlgVrR0wtibRb2BDc8aoOG5lH8
bOvf0JQClU9ufT8keGjRl8utr7EwsgRqNPnXSQoEsMkahdgsnU3fQyZ08q4q2YB3
URZW1/O39Q6JkLEd5Tu8AFbP
-----END CERTIFICATE-----