Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
File:                     1-vZEdu85RbNE_-442lbKzMXQObA.cer (raw, json)
Hash identifier:          pIYhWIo613jTzC+d5S2STxd4hg4RSXsFBAYSuAyTSlg=
Subject key identifier:   FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA1FC6A7FA39E39BF51DC9437A0037
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49103
                          AS: 209534
                          IP: 185.57.164.0/22
                          IP: 2a00:4000::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:1f:c6:a7:fa:39:e3:9b:f5:1d:c9:43:7a:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=faf64476ef3945b344ffee38da56caccc5d039b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:e8:c4:77:5a:fc:1f:43:2a:1c:81:ab:db:
                    ea:f9:ca:f5:b1:5d:ae:ba:ab:ae:7c:d1:85:89:f1:
                    81:87:ee:fb:5d:b9:25:44:f9:96:0e:74:16:3d:be:
                    7a:ef:9b:52:9a:4a:36:38:79:0e:fe:fb:14:0e:b7:
                    82:1a:43:22:0d:70:8f:14:82:b8:50:a0:68:6a:4b:
                    5a:4c:be:65:65:12:aa:e8:f4:af:a1:66:ae:97:b8:
                    ef:d8:e2:82:51:13:6f:22:bc:b8:0f:9b:fc:93:15:
                    95:3b:5a:21:60:cb:45:26:1d:7e:89:08:1d:ad:16:
                    78:66:7e:71:5a:86:90:1f:32:45:f3:44:10:bb:a0:
                    7b:07:83:49:bb:38:c1:c3:2f:1d:cc:7d:71:57:1c:
                    72:2a:a1:e6:55:ce:c5:2d:b7:5e:b4:ec:11:0c:85:
                    13:ba:70:f6:18:3a:7a:17:66:09:b8:42:e8:03:4e:
                    b6:cf:fa:92:89:09:62:2f:04:57:fd:3c:a7:67:64:
                    8f:85:d4:42:6f:7e:e0:5c:6d:42:d7:cc:de:fc:06:
                    b8:9f:59:4b:b1:47:81:43:01:98:cc:ff:d9:7e:4f:
                    c4:06:3f:e8:3c:9f:78:82:8d:3d:80:19:29:df:1c:
                    cd:cf:62:88:87:73:af:fa:39:2c:80:5e:7e:c0:c5:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.164.0/22
                IPv6:
                  2a00:4000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49103
                  209534

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:76:4a:35:da:2d:b0:ca:b7:e6:ec:79:9e:da:c9:9e:e8:
         da:d4:37:e3:af:3b:98:8d:4f:7d:8a:2f:ad:47:1d:b0:b9:6a:
         14:88:8c:eb:2b:49:bd:9c:bf:6c:08:19:42:7e:70:37:f4:99:
         60:8b:28:4b:4a:eb:2a:ca:e4:79:07:8c:c5:80:ae:7c:24:8a:
         1e:51:cc:a8:6d:69:25:bd:f7:02:a4:16:3e:ac:a8:69:53:4a:
         58:28:b8:19:08:c3:9b:67:86:e0:3b:6b:1f:ac:6c:3b:26:8e:
         e7:de:2c:03:c6:6c:e2:40:8d:23:f3:56:e1:3c:41:c9:dd:6d:
         07:7d:4a:a5:4e:01:e6:b6:76:b9:ab:19:2e:dd:de:fc:97:8a:
         36:64:6f:f3:10:b9:2d:ce:6d:6e:79:2c:eb:3a:21:9e:06:be:
         c4:08:b1:89:a2:af:70:2d:c0:a0:bf:17:7d:8b:06:f8:b3:7b:
         5b:b4:50:c5:9f:da:3c:9b:18:ca:62:23:ce:22:b9:f9:75:90:
         9f:78:d0:fb:f7:f7:b5:e8:54:f0:9a:d8:b7:8c:82:88:04:b6:
         63:5e:03:df:d3:cb:8e:64:01:fc:ea:d3:49:8b:3f:ac:ba:ec:
         c0:af:b1:30:e5:91:1f:e8:51:9a:14:60:94:91:86:74:3b:80:
         e1:eb:ea:4e
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQf+h/Gp/o545v1HclDegA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWY2NDQ3NmVmMzk0NWIzNDRmZmVlMzhkYTU2Y2FjY2M1ZDAzOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0LoxHda/B9DKhyBq9vq+cr1sV2u
uquufNGFifGBh+77XbklRPmWDnQWPb5675tSmko2OHkO/vsUDreCGkMiDXCPFIK4
UKBoaktaTL5lZRKq6PSvoWaul7jv2OKCURNvIry4D5v8kxWVO1ohYMtFJh1+iQgd
rRZ4Zn5xWoaQHzJF80QQu6B7B4NJuzjBwy8dzH1xVxxyKqHmVc7FLbdetOwRDIUT
unD2GDp6F2YJuELoA062z/qSiQliLwRX/TynZ2SPhdRCb37gXG1C18ze/Aa4n1lL
sUeBQwGYzP/Zfk/EBj/oPJ94go09gBkp3xzNz2KIh3Ov+jksgF5+wMVj5QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFPr2RHbvOUWzRP/uONpWyszF0DmwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzY3ZTM2
Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJkMTcvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZj
LWNkNTUtNGI1OS1hYTEyLTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0
MmxiS3pNWFFPYkEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArk5pDANBAIAAjAHAwUDKgBAADAfBggrBgEF
BQcBCAEB/wQQMA6gDDAKAgMAv88CAwMyfjANBgkqhkiG9w0BAQsFAAOCAQEAhNh2
SjXaLbDKt+bseZ7ayZ7o2tQ34687mI1PfYovrUcdsLlqFIiM6ytJvZy/bAgZQn5w
N/SZYIsoS0rrKsrkeQeMxYCufCSKHlHMqG1pJb33AqQWPqyoaVNKWCi4GQjDm2eG
4DtrH6xsOyaO594sA8Zs4kCNI/NW4TxByd1tB31KpU4B5rZ2uasZLt3e/JeKNmRv
8xC5Lc5tbnks6zohnga+xAixiaKvcC3AoL8XfYsG+LN7W7RQxZ/aPJsYymIjziK5
+XWQn3jQ+/f3tehU8JrYt4yCiAS2Y14D39PLjmQB/OrTSYs/rLrswK+xMOWRH+hR
mhRglJGGdDuA4evqTg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:59 2025 by rpki-client