Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
File:                     hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer (raw, json)
Hash identifier:          QzEkf7UXOVuapMj3aSxUWD88LWWCY4oUC2SR72PaA5o=
Subject key identifier:   86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195470E22795AFF7CDFDDC2DBC32533A84D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 27 Feb 2025 10:57:43 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199848
                          IP: 185.43.140.0/22
                          IP: 2a01:68e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:0e:22:79:5a:ff:7c:df:dd:c2:db:c3:25:33:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 27 10:57:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=86c62c6962ea33029b480260989e1851c3252171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:6c:4a:7b:94:ef:2d:33:2c:f6:6e:2a:83:
                    b6:0f:02:c0:01:43:2b:92:22:24:a2:7f:9e:b7:bd:
                    69:11:05:42:85:e3:c3:ef:2a:2f:b8:fa:5e:1e:13:
                    cc:92:36:8a:49:c9:9b:2f:ac:a8:0f:bc:a3:60:3f:
                    73:7b:81:df:16:66:54:1b:57:be:44:9c:b1:6a:14:
                    be:77:4e:bb:0d:59:41:3c:ce:7a:50:d7:18:d3:98:
                    8b:63:a6:54:59:3c:02:43:7b:78:79:99:c2:af:0d:
                    91:2b:fd:14:01:4d:c3:b8:04:a6:fe:27:4b:0c:3d:
                    56:57:d3:fc:5c:2c:4b:8d:fe:10:95:51:03:ed:e8:
                    cf:c3:30:e3:5e:3e:ac:0b:45:27:1a:5b:83:4a:20:
                    42:81:ff:46:dc:e0:93:3f:41:33:a1:b4:8f:73:8c:
                    5f:52:59:5b:d9:e4:34:e0:1f:30:3f:0d:8c:cc:e8:
                    78:75:f6:84:1f:ff:c9:e3:1a:02:86:0e:13:92:fb:
                    ca:eb:2c:5a:7d:93:6e:d5:93:e2:44:dc:50:fe:ea:
                    c6:b7:63:77:37:cf:e6:91:a1:47:02:ec:8e:c1:d6:
                    55:60:69:2b:2d:5a:5f:22:88:f2:82:b5:89:67:59:
                    3d:66:ea:62:48:13:a4:71:0b:d6:96:26:75:a6:bc:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.43.140.0/22
                IPv6:
                  2a01:68e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199848

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:a0:fe:91:60:cc:6f:99:b5:f8:88:9b:2c:a2:95:d9:e1:
         77:d9:a3:2b:b4:3a:e4:1e:0c:8e:41:72:7e:4a:e8:1f:28:f3:
         db:d5:a9:bd:cd:ad:73:1f:38:9b:d5:e8:0d:90:36:f7:51:ee:
         81:a2:69:1d:92:f7:2a:83:96:99:42:68:6a:b7:de:47:92:d3:
         d2:a2:69:98:47:1e:95:27:3c:1c:7e:d2:65:fd:20:b4:cd:03:
         54:f0:ca:e4:ef:1e:f0:d1:4b:9b:66:1c:90:ff:d9:aa:2b:b2:
         9a:71:8b:4f:5d:42:28:3b:53:53:70:ac:cb:a7:7a:65:78:6e:
         a7:96:b3:dc:2f:fd:42:9a:b8:89:3a:8f:23:0a:56:a6:c8:59:
         00:84:a2:21:32:bf:6c:7a:70:b3:60:4d:71:7f:d6:ea:c2:e5:
         55:98:69:0c:ca:d9:da:13:1f:9d:ac:0b:4c:9a:a3:f0:10:2c:
         86:ad:e2:78:06:c4:9e:3d:ca:94:29:fe:e7:e8:fb:67:04:45:
         05:44:e2:04:9d:d1:7e:d2:d5:4a:78:59:58:c3:38:bc:cf:2d:
         b7:56:07:de:09:37:ed:af:2c:17:a6:ed:ec:44:a6:bf:68:35:
         b4:3d:e0:c8:f2:05:f6:ad:76:a4:40:b1:dc:d7:5c:3c:52:30:
         d8:83:92:db
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZVHDiJ5Wv98393C28MlM6hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI3MTA1NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmM2MmM2OTYyZWEzMzAyOWI0ODAyNjA5ODllMTg1MWMzMjUyMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFNsSnuU7y0zLPZuKoO2DwLAAUMr
kiIkon+et71pEQVChePD7yovuPpeHhPMkjaKScmbL6yoD7yjYD9ze4HfFmZUG1e+
RJyxahS+d067DVlBPM56UNcY05iLY6ZUWTwCQ3t4eZnCrw2RK/0UAU3DuASm/idL
DD1WV9P8XCxLjf4QlVED7ejPwzDjXj6sC0UnGluDSiBCgf9G3OCTP0EzobSPc4xf
Ullb2eQ04B8wPw2MzOh4dfaEH//J4xoChg4TkvvK6yxafZNu1ZPiRNxQ/urGt2N3
N8/mkaFHAuyOwdZVYGkrLVpfIojygrWJZ1k9ZupiSBOkcQvWliZ1przr8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIbGLGli6jMCm0gCYJieGFHDJSFxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzM3NWYw
NC0zZWIyLTRkOWItOTBmZC0yNDliYjQ2MWJhNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMzc1ZjA0
LTNlYjItNGQ5Yi05MGZkLTI0OWJiNDYxYmE1Yi8xL2hzWXNhV0xxTXdLYlNBSmdt
SjRZVWNNbElYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSuMMA0EAgACMAcDBQAqAWjgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMMqDANBgkqhkiG9w0BAQsFAAOCAQEAC/ug/pFgzG+Z
tfiImyyildnhd9mjK7Q65B4MjkFyfkroHyjz29Wpvc2tcx84m9XoDZA291HugaJp
HZL3KoOWmUJoarfeR5LT0qJpmEcelSc8HH7SZf0gtM0DVPDK5O8e8NFLm2YckP/Z
qiuymnGLT11CKDtTU3Csy6d6ZXhup5az3C/9Qpq4iTqPIwpWpshZAISiITK/bHpw
s2BNcX/W6sLlVZhpDMrZ2hMfnawLTJqj8BAshq3ieAbEnj3KlCn+5+j7ZwRFBUTi
BJ3RftLVSnhZWMM4vM8tt1YH3gk37a8sF6bt7ESmv2g1tD3gyPIF9q12pECx3Ndc
PFIw2IOS2w==
-----END CERTIFICATE-----