Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.cer (raw, json)
Hash identifier:          Nk265zote6lD0V7uZOO5/M/c6p8+UPJrK2ZlnMj76R8=
Subject key identifier:   E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FD84A059CBD3AC557A0C827C55F557
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211035
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:84:a0:59:cb:d3:ac:55:7a:0c:82:7c:55:f5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:8a:97:bf:db:5b:a3:e8:4a:25:0d:3e:2c:
                    98:11:01:65:09:ab:fa:20:e6:a2:f6:63:91:ca:e2:
                    49:d6:c3:e7:f4:8f:14:53:95:96:12:05:d5:44:90:
                    f4:1e:e9:b4:8e:ca:a1:15:fc:14:b8:bb:e4:1c:d6:
                    66:55:8a:30:eb:6c:11:3d:b0:f4:c7:d2:e7:9a:9f:
                    1a:4c:95:d2:e0:41:44:75:ec:9a:5f:df:d3:83:39:
                    ce:60:d3:67:e5:fb:6b:63:d6:fc:aa:0e:0d:60:35:
                    14:f4:1f:7d:c3:3e:d3:14:2a:b9:65:9f:64:f4:8d:
                    d7:73:7c:87:be:91:53:fb:fd:5e:12:7c:c4:3a:7f:
                    d1:1b:2f:35:28:aa:ed:25:36:3f:d0:b9:c4:bf:87:
                    07:59:3d:f7:2c:1a:44:b2:f6:2a:bd:34:15:52:fd:
                    61:2b:4c:7e:17:c7:2d:d9:f4:bb:77:8b:f1:e3:d7:
                    cb:e7:b8:fa:54:dd:80:7f:3d:fa:ec:eb:5d:63:db:
                    e8:75:b6:89:8a:58:1a:e7:8e:d4:e5:23:5a:02:23:
                    f4:45:74:fc:c3:0b:81:7d:17:a9:20:2d:84:d9:b0:
                    d8:ac:2b:93:9b:61:be:40:8b:3c:31:17:ef:d2:01:
                    b2:09:84:5f:c1:bc:6a:fc:5d:f1:59:b9:6c:b3:f3:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211035

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:1b:64:53:c7:d2:c3:33:fb:4e:14:7a:b0:c7:f3:09:fa:
         35:1e:a1:2e:91:a2:fa:a2:c0:f8:12:56:b3:ee:8a:88:a3:4a:
         16:a3:10:c5:5d:aa:62:33:40:ac:9c:b1:1d:a0:88:f5:bb:70:
         1b:8b:26:7a:aa:ad:a3:2c:92:2b:6d:55:21:bc:46:fb:fb:ff:
         dd:41:ad:83:c0:68:44:be:96:6d:4e:8e:5f:36:b7:29:b8:3b:
         e8:05:6e:74:f6:c5:e3:fe:ef:e7:a4:dd:95:b0:76:ca:2e:71:
         7b:e4:2c:28:09:ea:6d:73:5a:02:32:81:f0:20:30:47:81:fb:
         9f:40:29:40:26:38:4c:1b:63:84:a5:85:ab:4a:f6:80:21:b8:
         06:69:1b:4e:58:f1:ce:69:69:de:86:a4:64:0b:dd:43:a1:c1:
         74:5d:fa:1a:82:3f:8a:38:8a:1b:77:0a:71:52:5e:a1:27:e9:
         ef:df:5a:74:56:6d:bb:fc:75:73:f1:b4:1b:06:0e:e4:e1:95:
         8e:99:3a:c4:17:ca:92:d2:48:06:35:2f:3b:19:18:ca:8b:f3:
         16:42:44:2e:51:f3:d2:f3:cf:ff:b4:56:72:79:c6:66:63:a1:
         d2:f8:e5:35:5f:2e:64:5b:43:ef:9d:15:8a:90:98:96:7e:56:
         78:70:0f:dd
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQl/YSgWcvTrFV6DIJ8VfVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWVmZDE4NjllZWFmZTZmOWYwM2NiMzQxODY4OWJjYjBjNjkxMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKGKl7/bW6PoSiUNPiyYEQFlCav6
IOai9mORyuJJ1sPn9I8UU5WWEgXVRJD0Hum0jsqhFfwUuLvkHNZmVYow62wRPbD0
x9Lnmp8aTJXS4EFEdeyaX9/TgznOYNNn5ftrY9b8qg4NYDUU9B99wz7TFCq5ZZ9k
9I3Xc3yHvpFT+/1eEnzEOn/RGy81KKrtJTY/0LnEv4cHWT33LBpEsvYqvTQVUv1h
K0x+F8ct2fS7d4vx49fL57j6VN2Afz367OtdY9vodbaJilga547U5SNaAiP0RXT8
wwuBfRepIC2E2bDYrCuTm2G+QIs8MRfv0gGyCYRfwbxq/F3xWblss/OOSQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOXv0Yae6v5vnwPLNBhom8sMaRNwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2I0N2Jk
YS02NWI2LTRhNDItOTkwZi0wMjQ5MzVkZGI4YzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvYjQ3YmRh
LTY1YjYtNGE0Mi05OTBmLTAyNDkzNWRkYjhjNi8xLzVlX1JocDdxX20tZkE4czBH
R2lieXd4cEUzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM4WzANBgkqhkiG9w0BAQsFAAOCAQEAXK0bZFPH0sMz
+04UerDH8wn6NR6hLpGi+qLA+BJWs+6KiKNKFqMQxV2qYjNArJyxHaCI9btwG4sm
eqqtoyySK21VIbxG+/v/3UGtg8BoRL6WbU6OXza3Kbg76AVudPbF4/7v56TdlbB2
yi5xe+QsKAnqbXNaAjKB8CAwR4H7n0ApQCY4TBtjhKWFq0r2gCG4BmkbTljxzmlp
3oakZAvdQ6HBdF36GoI/ijiKG3cKcVJeoSfp799adFZtu/x1c/G0GwYO5OGVjpk6
xBfKktJIBjUvOxkYyovzFkJELlHz0vPP/7RWcnnGZmOh0vjlNV8uZFtD750VipCY
ln5WeHAP3Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:11 2025 by rpki-client