Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
File:                     HqsBKTydvRqdatyGGCtSDNF2wAc.cer (raw, json)
Hash identifier:          lNPD8zPVSo/9pXxFsWB3m3UkgaGiTrVNffytuCNg+MU=
Subject key identifier:   1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427478F06FACE5A718F811EDEE34739D3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 196945
                          IP: 91.217.155.0/24
                          IP: 185.106.16.0/22
                          IP: 2a06:3ac0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:8f:06:fa:ce:5a:71:8f:81:1e:de:e3:47:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:64:68:4d:8b:02:92:4c:05:7f:d1:64:b2:67:
                    09:82:fd:e8:94:a5:55:a4:dd:bb:28:f7:f1:7a:b7:
                    99:93:69:07:38:1e:bd:56:ce:32:1a:11:8b:af:1f:
                    fa:43:25:69:dd:38:44:d4:98:ed:fa:6c:12:41:85:
                    66:2f:10:d2:3d:ba:db:69:50:8b:dc:17:a5:7f:bf:
                    3c:e9:d3:87:a2:10:25:4f:9b:b9:b9:0a:4a:d8:0f:
                    5a:0c:37:c0:72:c1:85:71:a1:83:0a:4f:de:64:c7:
                    80:4c:83:fa:de:9c:b5:7f:b1:7f:2f:aa:ca:69:04:
                    3b:ba:d5:ff:ee:d2:73:12:de:ed:21:d9:a3:90:db:
                    20:e1:66:fd:8c:b8:d8:e6:bb:36:b2:21:1b:c2:b7:
                    6d:77:e2:d6:83:c5:1f:f4:a8:57:bc:42:80:77:93:
                    fc:d3:03:e7:8c:8e:41:c4:51:af:26:e8:ef:84:95:
                    36:26:87:94:4e:ab:4e:f0:99:62:d6:c7:c5:2f:27:
                    a0:37:8a:f2:65:98:77:49:97:96:80:a0:e2:7a:e3:
                    21:fa:67:69:e1:92:4f:2d:7e:83:0e:e5:93:6d:69:
                    88:0f:c5:ba:cf:8c:cb:de:26:d7:37:3b:fb:17:8f:
                    ab:98:b6:07:d1:be:02:b9:9e:7b:4b:ca:d8:06:fa:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.155.0/24
                  185.106.16.0/22
                IPv6:
                  2a06:3ac0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196945

    Signature Algorithm: sha256WithRSAEncryption
         03:ff:16:28:6d:01:66:f2:fa:e8:20:4f:39:fc:82:13:5b:83:
         6b:4f:c4:1f:36:93:6c:6b:2b:44:64:00:8e:0b:a6:3f:9b:27:
         d0:cc:35:f1:53:d8:4b:28:55:ae:af:4a:f0:72:b7:a5:3b:de:
         1b:f9:09:42:c2:0b:68:9a:53:ca:ee:7d:02:36:14:d3:4a:56:
         02:bf:e2:d7:3d:d7:47:64:12:61:9d:96:13:64:d8:eb:87:5f:
         52:1d:b8:5f:3e:fd:c0:1a:f1:00:a0:45:46:67:b7:b2:95:c2:
         02:ff:d8:1a:8e:e6:07:bd:7a:83:22:a2:e7:bc:9f:5c:2d:00:
         ac:bf:81:a7:d2:68:23:ef:46:09:90:55:c2:f4:54:5f:b1:1e:
         e6:fb:a4:96:ee:4f:84:cd:33:57:ae:4e:8c:59:7b:0f:39:03:
         03:3e:b6:30:42:9f:5f:e1:75:f6:84:8a:a1:1d:a5:63:b6:7b:
         a5:f3:09:48:ae:91:b0:5e:2b:dc:a1:14:f9:ee:b7:c6:65:f6:
         ff:33:97:d7:a4:60:42:02:4b:5f:83:a0:d6:82:b4:9f:82:92:
         b8:ff:48:18:0b:cf:c6:78:4e:4f:18:5e:9a:32:06:08:c0:a4:
         7c:64:97:c9:70:ca:ba:82:b4:a0:2e:5f:cd:8f:a9:67:9a:92:
         dd:a5:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----