Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
File:                     mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer (raw, json)
Hash identifier:          OptrV/qoHOlaWwO4/QfgJW5fD+q4nUYGZGc4TXHfirk=
Subject key identifier:   98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019505D6B186DB3FA5678AF664DEA7BA6817
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 14 Feb 2025 19:01:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213416

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:05:d6:b1:86:db:3f:a5:67:8a:f6:64:de:a7:ba:68:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 14 19:01:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:6f:60:de:e3:10:dd:8c:b6:35:1c:6f:b9:
                    e3:25:f0:db:72:e4:f3:e7:e4:7d:7d:8b:06:15:e2:
                    cf:f1:b1:74:f2:48:cd:21:31:30:e6:64:87:e0:3c:
                    97:57:80:5d:7f:84:45:79:44:b1:e7:96:95:22:0f:
                    72:ad:62:69:9a:2e:91:7a:7c:19:3a:e0:d6:71:59:
                    44:47:49:76:42:53:22:ee:9c:6d:2d:5a:29:51:d2:
                    2c:e9:83:52:87:9a:4a:58:e1:d2:53:c3:79:c1:ce:
                    ed:7d:0a:fe:54:e8:9b:04:c6:7f:fa:86:1c:c8:11:
                    17:d0:50:f1:f1:b6:0c:1d:77:59:ff:11:5f:f5:8c:
                    ab:26:a7:96:b7:f3:d0:e5:a1:c9:b3:85:0e:40:e9:
                    fd:cc:f9:e3:85:6e:32:c9:e6:e1:89:04:f3:84:46:
                    36:1c:b1:2e:b9:42:1d:b6:51:79:54:d1:c6:b1:93:
                    7b:47:9d:87:08:74:6f:da:d8:d7:a3:8a:48:26:e8:
                    e1:4c:7a:55:a7:ae:5e:f4:9d:8f:3a:87:73:05:47:
                    06:81:69:8b:b5:f4:59:de:53:fe:b5:29:31:44:3b:
                    80:7a:86:ca:f1:ca:51:41:4e:7f:c8:85:6f:c1:91:
                    35:42:79:9c:9f:b1:12:7d:de:99:41:03:8f:74:19:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213416

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:b7:c4:b2:9b:e7:1e:d4:06:09:1a:84:87:5a:2a:a4:c0:
         4a:5e:fc:9e:99:a8:f8:23:9f:b1:60:26:89:5b:ea:a7:e2:a2:
         3a:49:3a:76:7c:40:ba:db:cc:2d:3e:a7:f1:d3:26:b7:0e:66:
         fd:63:ea:64:bd:cd:04:31:1a:a0:0a:64:6b:d6:83:77:60:3f:
         44:5a:4e:24:d4:a2:51:de:4a:0c:74:aa:c2:3f:db:c4:5e:96:
         74:7d:b6:7d:20:3b:b8:24:52:f4:88:e6:5c:63:c7:1b:e7:59:
         e9:73:51:ab:6d:9f:70:1e:ea:56:79:1a:90:fe:1d:18:d6:a3:
         6f:5e:d6:86:33:6e:08:d1:f3:c7:51:09:31:e0:2b:21:92:1f:
         aa:3a:56:61:e0:93:e9:da:2d:98:51:f8:d0:fe:e0:d3:fb:07:
         c4:00:63:1c:e8:3e:ed:1b:c8:a1:00:66:1a:11:64:1b:3f:a3:
         17:fe:02:ee:b6:7b:b5:2d:3a:c3:02:d6:e0:f7:e9:8f:a7:08:
         13:38:55:37:4e:9f:80:5a:25:17:4e:95:88:fa:b0:05:20:66:
         fd:40:db:bd:c6:15:08:24:a8:46:0f:86:7f:3a:ed:8b:b1:5a:
         14:34:be:ec:95:0b:84:7a:f8:42:c6:52:54:d0:92:ac:96:38:
         4c:a2:66:6c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZUF1rGG2z+lZ4r2ZN6numgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE0MTkwMTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODdhYmE2Zjc0NDU1YzRmYTNhYmUyM2FhODIzMDY3ZWNmYzMzYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FFvYN7jEN2MtjUcb7njJfDbcuTz
5+R9fYsGFeLP8bF08kjNITEw5mSH4DyXV4Bdf4RFeUSx55aVIg9yrWJpmi6RenwZ
OuDWcVlER0l2QlMi7pxtLVopUdIs6YNSh5pKWOHSU8N5wc7tfQr+VOibBMZ/+oYc
yBEX0FDx8bYMHXdZ/xFf9YyrJqeWt/PQ5aHJs4UOQOn9zPnjhW4yyebhiQTzhEY2
HLEuuUIdtlF5VNHGsZN7R52HCHRv2tjXo4pIJujhTHpVp65e9J2POodzBUcGgWmL
tfRZ3lP+tSkxRDuAeobK8cpRQU5/yIVvwZE1Qnmcn7ESfd6ZQQOPdBlVnwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJh6um90RVxPo6viOqgjBn7PwzxIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2VhNTll
Yy0zZTU4LTQ0MzctYWRmMi02ZjAyMmEwZTVhZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvZWE1OWVj
LTNlNTgtNDQzNy1hZGYyLTZmMDIyYTBlNWFkOS8xL21IcTZiM1JGWEUtanEtSTZx
Q01HZnNfRFBFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBqDANBgkqhkiG9w0BAQsFAAOCAQEAJ3y3xLKb5x7U
BgkahIdaKqTASl78npmo+COfsWAmiVvqp+KiOkk6dnxAutvMLT6n8dMmtw5m/WPq
ZL3NBDEaoApka9aDd2A/RFpOJNSiUd5KDHSqwj/bxF6WdH22fSA7uCRS9IjmXGPH
G+dZ6XNRq22fcB7qVnkakP4dGNajb17WhjNuCNHzx1EJMeArIZIfqjpWYeCT6dot
mFH40P7g0/sHxABjHOg+7RvIoQBmGhFkGz+jF/4C7rZ7tS06wwLW4Pfpj6cIEzhV
N06fgFolF06ViPqwBSBm/UDbvcYVCCSoRg+Gfzrti7FaFDS+7JULhHr4QsZSVNCS
rJY4TKJmbA==
-----END CERTIFICATE-----