Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
File:                     HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer (raw, json)
Hash identifier:          ua9GRB6PJl4te1WoxOMPy3rWUiPR0aXrNbq1ZVdks5I=
Subject key identifier:   1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D5CF634B7313E89B31125E08D8A8DA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:47:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 60687
                          IP: 5.153.104.0/21
                          IP: 2a00:8f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:cf:63:4b:73:13:e8:9b:31:12:5e:08:d8:a8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:47:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f1523928d8e8e54be467976331a0121d42a0067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:01:06:cb:23:35:3d:a4:e3:a2:ef:87:1c:
                    05:0f:cc:a7:74:20:07:39:f8:e9:a5:c4:3e:22:ec:
                    59:22:28:1c:60:5d:c1:07:c1:f1:90:3d:75:4e:24:
                    8a:9b:39:f5:18:36:16:05:f8:1a:f0:a0:32:43:7d:
                    e7:58:16:9e:46:b4:b2:48:9c:39:a2:79:21:71:28:
                    01:cf:8f:46:84:af:7c:1e:6c:0e:24:78:64:29:d5:
                    75:49:c2:16:d8:d5:48:7a:f1:4e:40:6e:13:5f:6d:
                    7b:63:50:c1:7b:49:5b:fd:b1:df:c9:fa:60:49:93:
                    5c:d8:5c:84:e0:b1:b2:be:ed:66:3a:44:66:f9:fb:
                    94:db:38:8e:6a:65:2a:f1:ba:46:46:f9:53:74:f9:
                    cb:54:07:9d:57:47:6d:8f:ea:d8:ff:9a:8f:17:52:
                    aa:20:1e:ea:bf:d3:da:d9:1e:14:fa:90:a2:27:89:
                    9c:d4:34:cf:58:9f:70:7a:5b:e7:e2:91:5c:53:9b:
                    55:5b:1f:4c:52:63:8f:03:c7:a0:c6:a6:c6:a9:79:
                    a0:50:f0:ff:64:c3:74:92:9f:7e:aa:d7:0c:f9:60:
                    f1:b2:c3:4e:1c:14:0b:a5:7e:9f:9b:a3:57:e4:bc:
                    a4:5d:15:06:57:c1:53:34:90:dc:76:f1:70:e2:ea:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.153.104.0/21
                IPv6:
                  2a00:8f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60687

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:52:6b:79:f5:c7:7f:e8:e2:bf:39:a8:3a:3c:6f:c7:97:
         d1:73:4b:2a:19:2b:e1:68:fd:4d:95:71:f6:a8:6a:8f:1a:da:
         e8:b8:45:3e:46:3c:b3:ae:63:b9:88:62:fb:ae:3f:9c:c3:33:
         f4:f2:7c:e7:d3:d0:0b:d0:5a:64:0b:41:bc:87:19:db:75:68:
         b6:25:d6:71:ca:ef:04:0c:5b:77:62:05:96:33:20:69:0d:c0:
         51:4f:88:01:e8:93:e1:3b:29:c4:94:ae:cf:f4:91:f8:1d:ba:
         51:8c:58:be:af:f9:b3:fd:ae:45:de:65:17:a5:d4:f2:c6:22:
         08:0d:77:9e:32:7c:6b:7e:32:07:15:8c:34:bd:4c:2b:23:7c:
         f0:0b:a2:7d:0a:53:4c:c9:d3:9c:4c:28:a1:77:71:80:35:1e:
         09:9b:33:ee:f8:15:ba:89:25:a1:b6:c3:ff:15:ed:b5:ff:20:
         0d:ea:51:fe:1c:b0:80:f3:31:3d:b5:1e:12:49:d5:e3:d5:27:
         0e:c0:04:c6:4f:ef:99:e0:89:cf:fe:3f:59:f4:14:6d:b4:6f:
         ac:0c:d8:05:d5:9d:12:68:ce:f4:bf:fa:dc:55:92:b9:fb:11:
         42:d6:0f:12:b7:91:2d:31:d2:84:72:bf:33:ea:b5:f3:0a:06:
         8d:46:22:e9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1c9jS3MT6JsxEl4I2KjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE1MjM5MjhkOGU4ZTU0YmU0Njc5NzYzMzFhMDEyMWQ0MmEwMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5YBBssjNT2k46LvhxwFD8yndCAH
OfjppcQ+IuxZIigcYF3BB8HxkD11TiSKmzn1GDYWBfga8KAyQ33nWBaeRrSySJw5
onkhcSgBz49GhK98HmwOJHhkKdV1ScIW2NVIevFOQG4TX217Y1DBe0lb/bHfyfpg
SZNc2FyE4LGyvu1mOkRm+fuU2ziOamUq8bpGRvlTdPnLVAedV0dtj+rY/5qPF1Kq
IB7qv9Pa2R4U+pCiJ4mc1DTPWJ9welvn4pFcU5tVWx9MUmOPA8egxqbGqXmgUPD/
ZMN0kp9+qtcM+WDxssNOHBQLpX6fm6NX5LykXRUGV8FTNJDcdvFw4ur/uwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB8VI5KNjo5UvkZ5djMaASHUKgBnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzE4OTUx
Yi1hNjU0LTQ0YjUtYmE2Yi04OTlmOWZiZWJiMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMTg5NTFi
LWE2NTQtNDRiNS1iYTZiLTg5OWY5ZmJlYmIxOS8xL0h4VWprbzJPamxTLVJubDJN
eG9CSWRRcUFHYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBZloMA0EAgACMAcDBQAqAI8gMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDtDzANBgkqhkiG9w0BAQsFAAOCAQEAm3dSa3n1x3/o
4r85qDo8b8eX0XNLKhkr4Wj9TZVx9qhqjxra6LhFPkY8s65juYhi+64/nMMz9PJ8
59PQC9BaZAtBvIcZ23VotiXWccrvBAxbd2IFljMgaQ3AUU+IAeiT4TspxJSuz/SR
+B26UYxYvq/5s/2uRd5lF6XU8sYiCA13njJ8a34yBxWMNL1MKyN88AuifQpTTMnT
nEwooXdxgDUeCZsz7vgVuoklobbD/xXttf8gDepR/hywgPMxPbUeEknV49UnDsAE
xk/vmeCJz/4/WfQUbbRvrAzYBdWdEmjO9L/63FWSufsRQtYPEreRLTHShHK/M+q1
8woGjUYi6Q==
-----END CERTIFICATE-----