Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
File:                     H1KEKQNNz7oB9__1x8yIVtTQbhs.cer (raw, json)
Hash identifier:          GGBGpF5erZ6AUMv0ZQ+5N3zrMuiwuyPrwa9/mh4Lj8g=
Subject key identifier:   1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3E0D135964189913CE7C57C1214F4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198143
                          IP: 193.150.24.0/23
                          IP: 2001:67c:24a0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e0:d1:35:96:41:89:91:3c:e7:c5:7c:12:14:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0c:63:03:ba:e5:59:15:d3:98:fe:ab:ff:b5:
                    24:5e:86:08:4a:d4:52:1d:98:e3:ee:28:b3:f5:4d:
                    5a:b4:a9:b9:ce:1c:fc:5a:84:5d:93:a7:b8:a7:e2:
                    ce:be:b0:f3:a2:8d:51:1a:55:e3:2b:1b:ef:4b:78:
                    03:ef:fc:84:7d:8c:28:9b:d2:1c:2d:60:cf:c3:ef:
                    5b:b4:f3:e8:a7:ca:a0:2e:40:26:bb:27:6b:31:ef:
                    02:a4:d4:18:27:41:b4:3f:7c:11:83:f4:74:d5:26:
                    ec:8b:cc:63:f7:8a:bf:a8:85:78:46:03:7b:1c:91:
                    35:2a:23:f6:e4:6f:12:2f:06:ee:5c:6f:17:1d:ca:
                    58:28:31:b6:c9:72:63:10:2d:62:6a:f2:aa:0a:23:
                    f9:c2:f1:75:38:74:5f:1f:e4:79:4a:de:e9:1d:d6:
                    c2:88:b2:cd:01:31:7d:6c:d2:99:e8:a6:ec:92:32:
                    c3:42:40:7d:e5:5e:16:db:e8:16:c6:64:49:e8:b9:
                    44:7e:ea:30:3d:c9:cf:51:db:b9:fc:bf:55:15:a1:
                    69:af:f2:4a:07:72:db:c4:da:6d:c0:ca:e7:1e:df:
                    7f:42:eb:5f:89:f3:fe:6f:65:0e:62:a3:d7:a4:cb:
                    8c:3c:b7:ca:a1:71:e2:e2:16:a8:95:96:79:ff:e6:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.24.0/23
                IPv6:
                  2001:67c:24a0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198143

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:96:85:4e:3a:38:4c:7f:9f:12:cb:97:6c:64:63:ed:ee:
         8d:f0:5d:48:e6:a8:3b:c7:b2:8d:aa:63:2f:6f:db:38:a5:73:
         97:7c:ea:38:d2:61:7d:99:08:79:c8:12:a8:a0:9f:30:5c:df:
         b9:b4:12:85:cb:69:0d:86:07:3e:d0:aa:3e:4f:e0:c5:1a:eb:
         92:33:6d:32:ad:37:56:7c:d5:2a:2c:72:b4:99:c7:d2:cc:4c:
         50:d5:5f:0c:64:c8:d1:b1:cb:99:21:96:a0:c8:ce:83:d5:27:
         ee:10:34:52:5c:20:a9:24:70:4b:d8:34:9d:93:a3:00:a9:a2:
         75:cb:79:2a:c2:a7:82:5b:20:24:25:f7:11:6e:88:cd:06:b3:
         ea:22:42:14:46:ab:03:5a:1f:da:ed:5a:49:6c:2b:24:99:3f:
         aa:d2:1c:14:93:fc:8a:24:d9:97:ee:9d:08:21:6a:40:a4:ae:
         0a:f8:a4:0d:5c:4a:f3:9f:91:26:d0:18:4e:64:92:d7:b6:d4:
         cc:4c:62:c6:40:26:d9:b0:9a:a2:52:81:a3:60:c1:08:d4:b1:
         b8:7c:84:2a:65:a2:56:81:c6:d8:09:2e:ca:38:d7:1e:f0:5a:
         df:a8:8a:a6:d3:48:03:3f:21:0b:a9:37:0c:ac:fd:7c:97:6d:
         bc:54:45:e2
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQks+DRNZZBiZE858V8EhT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjUyODQyOTAzNGRjZmJhMDFmN2ZmZjVjN2NjODg1NmQ0ZDA2ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AxjA7rlWRXTmP6r/7UkXoYIStRS
HZjj7iiz9U1atKm5zhz8WoRdk6e4p+LOvrDzoo1RGlXjKxvvS3gD7/yEfYwom9Ic
LWDPw+9btPPop8qgLkAmuydrMe8CpNQYJ0G0P3wRg/R01Sbsi8xj94q/qIV4RgN7
HJE1KiP25G8SLwbuXG8XHcpYKDG2yXJjEC1iavKqCiP5wvF1OHRfH+R5St7pHdbC
iLLNATF9bNKZ6KbskjLDQkB95V4W2+gWxmRJ6LlEfuowPcnPUdu5/L9VFaFpr/JK
B3LbxNptwMrnHt9/QutfifP+b2UOYqPXpMuMPLfKoXHi4haolZZ5/+b1kQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFB9ShCkDTc+6Aff/9cfMiFbU0G4bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzk3M2Ji
NS0wNjYxLTQ1NmMtOWUxZS0yNTNiZTlmNmVkM2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvOTczYmI1
LTA2NjEtNDU2Yy05ZTFlLTI1M2JlOWY2ZWQzZC8xL0gxS0VLUU5OejdvQjlfXzF4
OHlJVnRUUWJocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBwZYYMA8EAgACMAkDBwAgAQZ8JKAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwX/MA0GCSqGSIb3DQEBCwUAA4IBAQBKgZaFTjo4
TH+fEsuXbGRj7e6N8F1I5qg7x7KNqmMvb9s4pXOXfOo40mF9mQh5yBKooJ8wXN+5
tBKFy2kNhgc+0Ko+T+DFGuuSM20yrTdWfNUqLHK0mcfSzExQ1V8MZMjRscuZIZag
yM6D1SfuEDRSXCCpJHBL2DSdk6MAqaJ1y3kqwqeCWyAkJfcRbojNBrPqIkIURqsD
Wh/a7VpJbCskmT+q0hwUk/yKJNmX7p0IIWpApK4K+KQNXErzn5Em0BhOZJLXttTM
TGLGQCbZsJqiUoGjYMEI1LG4fIQqZaJWgcbYCS7KONce8FrfqIqm00gDPyELqTcM
rP18l228VEXi
-----END CERTIFICATE-----