Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer (raw, json)
Hash identifier:          xTcy4RTxqG8CGezcSPOPj7KrUIPZU/oX93kxqIx9JtI=
Subject key identifier:   DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC106A2F381A460F145C5360D5BC7A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 24972
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:10:6a:2f:38:1a:46:0f:14:5c:53:60:d5:bc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:2b:9f:96:1e:e6:4a:77:36:78:d5:5a:e0:
                    65:31:2d:40:90:e6:d6:c6:68:20:79:80:b8:8f:51:
                    9a:0d:3d:0f:dd:65:41:74:3d:c6:aa:4b:ed:e6:ec:
                    70:82:2b:48:9a:85:4f:44:42:e1:a8:0e:d0:ab:53:
                    5d:15:3a:7e:db:27:79:77:80:70:c0:64:24:5d:77:
                    5d:29:3d:d1:43:5a:98:69:30:ca:1f:ee:87:82:b9:
                    53:77:ae:14:b4:6d:d9:09:b2:1c:28:3d:44:c7:23:
                    2f:bd:31:de:26:04:40:89:33:b4:5a:5e:98:ec:ed:
                    34:66:7b:03:fc:8f:ac:f3:05:35:fc:aa:75:bd:da:
                    9e:20:88:28:66:e4:a6:a6:cc:8a:05:46:8c:af:73:
                    f5:fa:ba:a5:34:31:08:8e:8b:3f:17:b5:30:87:d8:
                    61:c2:4d:75:9f:08:86:e6:e5:44:d0:95:78:e2:f2:
                    5f:c2:06:12:c4:c4:c3:af:28:04:47:6a:bb:31:60:
                    8f:89:a8:0c:13:6d:03:4b:47:11:bf:95:98:6a:da:
                    93:fa:d2:8d:e8:77:5c:01:b4:3d:1f:30:5f:e9:e6:
                    36:d8:b7:5a:4e:c4:67:55:b1:10:ac:d1:5d:3b:fc:
                    41:e6:bf:89:52:eb:82:46:c3:98:0d:c9:30:49:2f:
                    0c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24972

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:6c:0c:e9:0e:a8:6c:49:9b:df:1a:4b:9b:92:d8:50:26:
         8f:5c:98:c3:5e:9b:26:8e:ae:01:ba:42:3b:28:41:dd:4e:ca:
         53:45:43:9e:34:16:21:bc:4a:bb:29:d0:09:25:64:28:f5:f9:
         d3:fa:3d:10:5f:98:4f:c1:3e:ed:bc:89:16:c1:0d:e9:99:31:
         13:59:96:ec:90:30:f2:f3:37:fe:45:1a:6c:e0:be:a2:b8:2f:
         8c:51:a4:38:ce:69:24:3e:88:cf:89:9b:0b:21:e7:c9:d2:27:
         af:50:1d:be:55:73:4a:9c:c7:af:65:61:b6:ca:e4:5a:8d:a1:
         06:09:0e:e9:f4:cc:87:f4:a8:0e:1e:05:33:2d:44:c0:16:b4:
         dd:4c:55:96:6e:1d:97:2b:02:20:54:b0:24:bb:fe:52:2d:73:
         18:ed:35:fe:f6:8a:ca:b6:91:7b:17:84:ce:81:8d:68:71:56:
         4c:68:f9:e4:d7:b2:16:9e:0e:13:ac:22:a8:28:55:c8:74:26:
         74:89:e5:9d:8b:84:72:a3:90:27:45:40:8d:03:8b:f0:ca:f7:
         c4:69:99:9b:f9:f0:98:fd:15:40:62:f8:6e:fd:69:af:a6:03:
         d7:3f:6b:43:48:f5:c1:3e:77:ec:5e:1f:3f:41:cd:30:f8:05:
         48:7c:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:00 2025 by rpki-client