Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51MPsdgjZlLNpjo9EFdK_HUpw9c.cer
File:                     51MPsdgjZlLNpjo9EFdK_HUpw9c.cer (raw, json)
Hash identifier:          CKKGSWCp8LnSFUmhKncgxNfr5Ctgp9m0+JBJeFeppOI=
Subject key identifier:   E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D50BF441EC43B48E89EBB126FD2F1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205455
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:50:bf:44:1e:c4:3b:48:e8:9e:bb:12:6f:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7530fb1d8236652cda63a3d10574afc7529c3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:86:ae:b7:08:f0:52:e8:f2:22:a2:ab:9a:
                    53:4f:dc:80:ea:6e:de:8b:e1:cc:67:42:54:44:1f:
                    9f:b5:b9:0b:f9:a1:58:e4:d3:01:8f:82:31:ee:11:
                    05:6d:96:bc:3a:cb:a0:17:69:25:bb:90:53:d7:d5:
                    76:5d:df:de:6d:e6:47:e0:58:35:7f:b5:37:b9:7a:
                    07:3a:c4:93:2d:a3:77:10:ea:b1:07:b6:6d:99:1e:
                    1c:e3:9f:fb:90:dd:90:36:fd:75:bd:7b:15:bf:56:
                    6b:6d:3d:ea:1c:27:ca:80:cb:4f:63:1a:91:f4:c9:
                    21:f6:15:10:bc:3a:31:b5:37:da:32:da:62:45:78:
                    89:b9:cb:6e:9b:f3:1d:64:2e:ac:e9:7b:5e:7a:4e:
                    57:75:77:ac:2e:da:97:23:e8:f9:aa:e5:87:10:e5:
                    db:6a:1a:1b:20:15:41:e8:ed:26:1f:5a:49:73:55:
                    a1:72:52:cc:84:f8:3f:95:ec:ad:b5:93:ed:9c:fd:
                    21:f7:fe:15:53:2a:be:6e:b3:8f:90:bc:a0:03:2d:
                    9e:d3:6f:30:13:34:ab:fa:a3:52:ff:5b:78:a7:56:
                    62:cd:bb:0e:cb:a7:e1:a0:28:af:85:5d:0e:6f:74:
                    db:38:77:58:b9:8b:e5:03:7d:91:b1:1f:92:e5:da:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:0F:B1:D8:23:66:52:CD:A6:3A:3D:10:57:4A:FC:75:29:C3:D7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c4e5e9-1eee-442e-a57c-a8e2315e6cce/1/51MPsdgjZlLNpjo9EFdK_HUpw9c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205455

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:68:5e:02:81:b5:b3:14:c7:2e:a2:5e:10:96:e0:74:98:
         d1:7a:c2:a3:ab:37:be:df:4a:4b:3b:dc:f2:d7:e5:da:2e:42:
         e6:f2:35:51:eb:e8:46:63:9b:d7:02:da:5d:9a:de:83:1b:d6:
         cb:83:dd:ce:9f:69:a7:50:61:b3:34:c3:82:99:ce:e8:24:e9:
         af:56:6c:d6:1b:97:27:52:dd:3b:d3:dc:db:4b:7e:f4:61:26:
         01:d3:08:7e:e1:7a:9b:d1:4e:d3:4d:a4:75:af:9f:ba:b1:2b:
         c1:e5:ae:7a:cc:77:b3:64:47:12:5c:06:c5:72:dc:b0:c8:58:
         d4:b1:b7:98:7e:42:49:a5:fd:30:c9:5b:0a:ea:a5:c2:fa:81:
         67:a3:ce:60:96:ae:e0:39:87:aa:6d:4e:8b:6c:79:27:f6:9f:
         e8:12:4e:52:d5:b4:69:2b:f2:e2:bc:41:bf:37:de:15:94:44:
         f2:2d:86:2d:69:d2:85:8d:c2:88:b4:aa:31:2c:43:aa:36:8b:
         25:88:70:2a:83:b2:ec:9c:a0:28:8a:19:de:17:aa:84:8e:4f:
         4a:66:dc:d4:02:17:19:87:60:64:68:2e:f6:3a:3e:3b:4f:67:
         b7:ea:04:17:19:33:96:28:ef:1a:45:51:6f:fb:65:c6:58:62:
         27:bb:c2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:02 2025 by rpki-client