Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
File:                     5qi5LUxZf2wET3clKFSPnJEpoNM.cer (raw, json)
Hash identifier:          +9RrdCF31WtY1kTe05/Xa+TxM0iDnrf0laVPv9SAZZ0=
Subject key identifier:   E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6E12851942FE0553A14A58776AC96
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212360
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:e1:28:51:94:2f:e0:55:3a:14:a5:87:76:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:85:53:4d:fe:e9:b1:69:3e:7f:2c:fb:db:
                    8f:d0:f6:27:0e:69:84:85:df:5e:22:1b:9a:c8:8c:
                    6d:c6:1d:1a:cb:26:ae:1b:c7:89:0b:9c:9b:61:07:
                    40:be:7d:0b:e2:c6:3e:d5:a7:80:e9:51:f1:e2:55:
                    d4:72:51:09:be:ab:f0:ff:95:c3:d5:de:ab:05:0e:
                    65:f9:bd:ad:90:08:a2:cf:56:6d:df:a5:0b:f2:6b:
                    86:2f:97:47:d5:e7:36:a4:85:c0:ce:95:19:9f:16:
                    f8:0d:7a:0e:83:e9:ec:3f:4b:a3:98:69:45:fb:b3:
                    cb:f1:7d:45:59:90:05:66:60:8b:b3:55:c1:51:7b:
                    e0:e2:5e:1b:e4:e0:c6:21:3a:de:7d:54:8a:b3:eb:
                    b5:35:a0:f2:e1:11:f8:5c:e9:b0:e9:31:60:fd:7d:
                    03:56:f7:f4:5f:cb:dc:22:c7:85:f8:05:a0:ba:05:
                    b4:96:ef:b7:94:6a:a8:f6:e5:e8:1b:45:c3:31:40:
                    26:3b:9d:52:48:97:1b:19:3a:70:b7:ba:bc:3b:7d:
                    56:b1:b0:0d:4c:df:99:28:52:ba:25:84:83:38:78:
                    d4:3e:1d:1f:11:d4:51:47:96:a5:40:80:6e:91:ef:
                    53:fc:34:49:a4:cc:5a:ad:43:76:6d:89:e6:ba:f8:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212360

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:8f:91:9c:12:31:01:84:1e:f3:ba:26:4e:0b:f1:83:5f:
         11:58:d5:95:1d:0c:93:6f:65:90:96:28:48:c1:4f:d6:99:3e:
         e9:fd:a6:48:03:62:20:75:c5:4d:97:aa:a1:61:c4:45:34:ef:
         0d:ae:b2:fb:a5:cb:2e:7e:f6:b3:d2:43:71:c6:ab:92:51:4f:
         a6:31:65:36:37:05:de:16:db:0e:0b:e4:2d:7b:d1:e0:ae:35:
         f5:cd:68:77:47:c5:d1:23:35:5d:f9:bf:77:8b:69:f7:95:88:
         b5:ba:02:63:e3:28:6a:62:dc:b1:7a:71:e7:97:dd:0d:ab:a2:
         b9:6d:14:12:1b:c8:f0:12:ed:22:79:06:a3:b0:af:24:f6:9b:
         2e:97:76:0c:86:cc:d5:cf:62:25:c5:1f:f7:ae:39:b2:42:4c:
         76:f9:21:38:21:24:14:9e:be:40:4a:cc:61:fa:fd:8c:c6:2c:
         5d:9d:9d:58:1b:7b:3c:5b:a4:8a:01:b3:ef:22:14:0a:a3:8a:
         14:69:ee:35:56:e4:ec:b5:64:5c:48:44:b9:13:68:8b:88:9c:
         ce:52:10:60:ef:16:99:de:8d:d0:b6:86:d0:ea:de:27:9d:55:
         f6:e9:38:86:55:15:8e:02:0b:ca:77:51:71:dc:0a:56:e6:48:
         77:d8:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:10 2025 by rpki-client