Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.cer (raw, json)
Hash identifier:          ZG+781kSTf+yI+i3jxoiAANt15KIRZPCvQ3C1FZ3yf4=
Subject key identifier:   E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206853B65501874B3D757D3343736E03
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 61418
                          IP: 195.206.236.0/24
                          IP: 2a10:2cc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:53:b6:55:01:87:4b:3d:75:7d:33:43:73:6e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:f4:ae:79:f5:d5:ed:8b:d0:39:ef:44:99:
                    39:88:0b:53:28:12:3e:de:7b:2f:80:18:b2:9e:4c:
                    15:fc:45:da:c3:45:6a:3f:01:d8:c2:e8:d2:1a:e5:
                    ae:c5:10:b3:66:0e:df:9b:43:01:a1:fa:24:01:78:
                    9d:c1:4e:28:96:7c:ab:1c:29:5d:af:0a:d2:1a:47:
                    9b:ea:79:3d:fe:7f:85:8c:41:96:7b:7e:a9:ec:a1:
                    2b:69:06:90:b5:bb:a9:e0:41:b1:a7:38:05:97:62:
                    e0:84:a3:ce:79:03:a4:78:97:96:30:53:cb:39:2c:
                    c2:fe:22:e9:e1:12:04:9e:72:05:01:71:31:12:f1:
                    db:59:6a:a5:01:c6:ba:ec:3a:ad:31:28:40:42:07:
                    7d:c1:99:15:9a:3b:60:d7:9a:f7:a2:29:4c:03:ff:
                    a5:67:2f:ed:ba:4f:66:30:53:9a:2d:f1:e2:70:02:
                    09:36:05:02:fd:bc:ff:1b:94:3e:cf:bc:6e:39:c0:
                    0c:e7:96:16:08:a2:dd:cd:88:22:02:d8:91:c8:33:
                    54:be:ea:b8:98:0d:ed:2d:40:4f:dd:41:e6:8d:20:
                    1b:b8:68:71:6f:10:3b:8f:a2:02:33:6c:26:6b:30:
                    7a:92:36:90:b8:14:c5:76:6f:cb:e1:e9:66:93:e4:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.206.236.0/24
                IPv6:
                  2a10:2cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61418

    Signature Algorithm: sha256WithRSAEncryption
         07:23:cd:7e:e0:94:2a:a8:99:b0:31:f4:36:fe:c1:e2:cd:6a:
         1d:55:49:43:96:97:4b:d6:f0:c9:6f:d6:04:69:c3:79:ab:71:
         12:20:c6:40:ff:65:2e:05:d4:d0:c3:91:27:9b:89:63:b1:0d:
         e6:ee:fa:f0:72:64:7e:6e:65:ab:31:ee:ce:2f:17:7c:d6:95:
         2f:97:5a:19:d6:6b:54:68:03:df:d2:38:54:82:33:9f:a4:c0:
         7d:6f:fe:d6:e5:4a:1c:06:f6:f8:4b:5f:20:11:42:a6:19:28:
         02:01:f5:39:e9:d9:cf:75:40:38:e1:15:b2:2a:8f:72:01:cf:
         5a:0f:f7:a1:89:90:c8:97:82:e1:c9:d8:57:4c:1b:b6:3b:e8:
         fe:ca:c1:9c:1d:20:5f:34:85:60:cd:8b:dc:14:5c:c4:af:80:
         a4:18:33:88:2c:95:37:ad:fc:82:5d:df:61:29:77:bb:fe:16:
         bb:d1:0b:b1:62:8e:41:8d:42:bb:85:09:f6:86:bc:73:10:b3:
         17:92:37:f3:75:2c:c8:a4:f4:75:a6:80:a8:af:17:82:ea:43:
         36:b5:a3:2d:ad:2b:1c:a6:52:fd:b5:5e:51:42:8a:ac:09:49:
         f8:64:69:12:57:2b:80:b7:91:35:5f:96:f6:36:11:97:30:b4:
         01:02:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:45 2025 by rpki-client