Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
File:                     MHFOgRmzE03MBg_lkAp82Gj8WXM.cer (raw, json)
Hash identifier:          YgIiLlG9SiIXF9VAv/f40d1DRaEkh75ouAHa5zKihFY=
Subject key identifier:   30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01951ED0235764A24D937BF93145343793B5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 19 Feb 2025 15:25:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214588
                          IP: 2a14:7340::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:d0:23:57:64:a2:4d:93:7b:f9:31:45:34:37:93:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 19 15:25:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:d1:5b:fa:ec:70:ff:fb:06:69:7e:48:46:
                    a2:43:af:19:f0:57:17:f3:bb:8a:35:8c:a9:28:26:
                    b9:71:2e:5a:61:ea:70:96:7d:bf:f1:c9:46:b9:3b:
                    2f:31:e8:8b:e9:f8:88:54:9f:20:c7:5f:cf:5a:b2:
                    9e:e1:20:6c:9a:73:15:a8:5f:94:74:ae:ae:3d:64:
                    15:51:9d:07:e4:bf:9d:cb:76:4e:5d:36:59:d8:99:
                    30:ca:7e:d9:8e:51:96:f6:4f:d0:1c:4b:5e:fc:8f:
                    ad:bd:c0:f4:72:04:e4:f5:30:7c:6f:cd:33:19:f8:
                    86:94:b8:c2:cd:4e:46:07:dd:92:01:d0:93:07:14:
                    26:42:88:ef:4f:ec:fa:7a:d3:0b:70:b7:02:8b:dc:
                    34:c4:3c:22:b8:61:13:11:a5:81:e8:d4:33:42:ff:
                    b5:84:62:7e:28:95:63:32:68:f9:e7:90:14:8d:4e:
                    86:1c:f5:44:dd:04:0a:cd:ec:8f:2e:ea:7b:5b:a3:
                    97:34:81:d7:4e:16:8e:62:43:7d:ad:9c:23:ba:e8:
                    b1:f7:c4:b9:e5:99:aa:71:f4:94:d2:d7:07:0c:2f:
                    37:fc:a1:f1:db:a4:af:a6:44:18:a0:81:09:a3:8e:
                    d7:50:4b:d0:7c:ad:5b:9b:5d:9a:d4:58:49:da:41:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7340::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214588

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:dc:33:dd:81:84:19:79:f3:c5:a1:d1:06:8e:0f:77:83:
         84:7b:30:11:db:7d:2d:1f:b5:f8:29:19:1b:d6:d9:30:ca:2f:
         9e:54:69:45:31:af:4d:d0:ed:40:cb:0d:45:21:a4:d6:90:e7:
         33:43:96:57:8a:54:e4:c5:11:97:5b:42:84:04:dc:cc:b4:f2:
         68:67:b8:62:e4:7a:6a:9d:38:fb:0a:5d:8f:4f:86:66:55:a8:
         b3:75:a1:54:82:b2:c6:15:6c:80:a6:6b:6f:b0:39:c6:c5:0c:
         67:c7:7f:fb:24:ec:01:a0:d6:b8:c3:c7:26:cd:4e:c6:2c:6a:
         7f:2b:7d:11:fe:4b:92:e7:12:b6:d7:5a:86:c9:f1:e3:1c:a5:
         22:86:e8:9b:b6:4a:c1:62:d6:c9:92:4a:d4:95:3c:9d:ee:a6:
         f4:17:fc:eb:0d:cd:40:56:2f:0b:c7:d3:17:b2:ac:77:70:e6:
         f8:59:25:62:c9:fb:42:ff:70:cd:07:b7:47:19:98:f4:a4:f1:
         8e:7d:ed:ac:bd:42:25:30:bd:9c:7b:c9:84:32:51:70:b6:9e:
         02:20:a4:8f:92:2d:d6:91:dd:34:92:24:6d:f4:1c:b2:fc:82:
         c9:54:35:ac:a0:0d:52:ae:5b:84:18:f5:d9:fe:89:27:52:02:
         cb:63:86:a9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZUe0CNXZKJNk3v5MUU0N5O1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE5MTUyNTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDcxNGU4MTE5YjMxMzRkY2MwNjBmZTU5MDBhN2NkODY4ZmM1OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bHRW/rscP/7Bml+SEaiQ68Z8FcX
87uKNYypKCa5cS5aYepwln2/8clGuTsvMeiL6fiIVJ8gx1/PWrKe4SBsmnMVqF+U
dK6uPWQVUZ0H5L+dy3ZOXTZZ2Jkwyn7ZjlGW9k/QHEte/I+tvcD0cgTk9TB8b80z
GfiGlLjCzU5GB92SAdCTBxQmQojvT+z6etMLcLcCi9w0xDwiuGETEaWB6NQzQv+1
hGJ+KJVjMmj555AUjU6GHPVE3QQKzeyPLup7W6OXNIHXThaOYkN9rZwjuuix98S5
5ZmqcfSU0tcHDC83/KHx26SvpkQYoIEJo47XUEvQfK1bm12a1FhJ2kGqoQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFDBxToEZsxNNzAYP5ZAKfNho/FlzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzc0ZmEx
My0yY2IzLTQyN2EtYTQ1YS04ZjM0NzBkODIwNTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNzRmYTEz
LTJjYjMtNDI3YS1hNDVhLThmMzQ3MGQ4MjA1Ny8xL01IRk9nUm16RTAzTUJnX2xr
QXA4MkdqOFdYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhRzQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDRjwwDQYJKoZIhvcNAQELBQADggEBAE7j3DPdgYQZefPFodEGjg93g4R7MBHb
fS0ftfgpGRvW2TDKL55UaUUxr03Q7UDLDUUhpNaQ5zNDlleKVOTFEZdbQoQE3My0
8mhnuGLkemqdOPsKXY9PhmZVqLN1oVSCssYVbICma2+wOcbFDGfHf/sk7AGg1rjD
xybNTsYsan8rfRH+S5LnErbXWobJ8eMcpSKG6Ju2SsFi1smSStSVPJ3upvQX/OsN
zUBWLwvH0xeyrHdw5vhZJWLJ+0L/cM0Ht0cZmPSk8Y597ay9QiUwvZx7yYQyUXC2
ngIgpI+SLdaR3TSSJG30HLL8gslUNaygDVKuW4QY9dn+iSdSAstjhqk=
-----END CERTIFICATE-----