Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
File:                     5snUihjDwNLk5jp7g4haeWd1WCY.cer (raw, json)
Hash identifier:          zvYiIgRT6CDx3Y2cwsM4ViUGzFVLk9xqikBHNkzCCak=
Subject key identifier:   E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D8AB141867AC1DB73719EE4DC7B06D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:48:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25180
                          IP: 5.148.0.0 -- 5.148.159.255
                          IP: 31.221.0.0/17
                          IP: 62.244.160.0/19
                          IP: 83.244.128.0/17
                          IP: 109.231.192.0/18
                          IP: 149.63.0.0/16
                          IP: 167.98.0.0/16
                          IP: 176.46.160.0/19
                          IP: 2a00:1d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:ab:14:18:67:ac:1d:b7:37:19:ee:4d:c7:b0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:36:24:cb:b5:a8:3f:61:f8:8b:40:01:eb:
                    6b:50:2d:eb:77:4f:aa:40:9c:7d:dc:ed:b0:76:7e:
                    84:0b:63:d6:2a:c0:bc:65:6a:92:45:8d:d8:e2:c6:
                    84:11:a2:e8:dd:65:f7:82:56:36:9a:90:a9:b7:1a:
                    a2:6f:13:1c:90:a8:41:c2:a2:11:a0:b4:f0:a7:2a:
                    8f:17:dc:b2:ac:1f:7b:1b:f5:76:99:72:df:10:19:
                    be:d7:17:76:83:ae:51:0b:64:86:8c:b7:97:85:54:
                    e2:2e:e6:43:ee:d6:95:6d:db:e0:b0:bf:ce:b5:70:
                    a7:74:35:54:23:92:0c:6e:04:49:d0:8c:e4:8b:64:
                    ad:f2:b6:c9:9d:c3:0b:34:89:e8:db:e5:c3:55:9a:
                    b9:c3:7c:08:07:3c:86:ae:bd:94:ed:b8:a8:bf:ed:
                    dd:69:38:9d:0c:bb:34:e6:22:93:98:0d:1f:db:d2:
                    45:34:00:b5:d2:f9:8c:e3:f1:e6:4d:42:b4:1c:27:
                    d2:2d:08:66:10:75:5c:3f:ab:dc:52:e3:40:45:70:
                    8a:17:25:60:01:13:0e:54:c9:4f:38:c8:69:2e:53:
                    72:00:0b:e7:e1:df:b2:be:99:3c:3d:5a:ff:d9:17:
                    8c:a4:c4:bb:1a:6f:0c:28:a9:43:a0:0a:4c:d0:69:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.148.0.0-5.148.159.255
                  31.221.0.0/17
                  62.244.160.0/19
                  83.244.128.0/17
                  109.231.192.0/18
                  149.63.0.0/16
                  167.98.0.0/16
                  176.46.160.0/19
                IPv6:
                  2a00:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25180

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:4a:81:2a:be:ba:f2:21:b7:39:a6:8f:44:fa:cc:38:96:
         e6:cd:88:3f:5b:85:f1:c7:f8:22:31:8a:ea:10:0c:94:ce:f4:
         7b:7a:5a:15:6d:0c:d6:91:ba:3f:95:25:05:03:9d:08:f8:06:
         ff:7a:fe:ff:4b:e2:8d:0e:61:ac:0e:8f:4c:aa:10:dd:fd:cf:
         ad:74:d4:69:21:00:f8:a1:b2:ad:e3:5d:83:e7:65:76:86:95:
         59:c0:fd:4b:b7:d1:3b:ff:54:6b:90:5b:ac:cc:f0:bb:65:60:
         4b:43:72:91:a0:cf:3a:17:12:93:b7:44:00:84:bf:65:b6:84:
         b2:c7:d4:c6:4f:a7:1d:be:fd:cb:a6:e7:db:f5:20:78:df:10:
         f2:9e:a8:fe:12:3b:47:f8:28:23:62:1f:a4:b1:ec:93:15:bf:
         aa:7b:3b:df:29:12:3e:18:84:46:32:bd:9c:b9:99:f2:6d:86:
         54:c2:8f:05:70:ac:75:8c:6f:c3:ae:01:df:d5:c4:76:9f:f8:
         68:41:0b:66:e9:82:c7:02:41:e3:e9:0b:47:5c:ed:9d:24:43:
         d3:28:82:2b:6a:85:af:b0:26:e1:12:26:44:aa:6b:d9:16:2b:
         a0:fb:b4:4d:7f:7a:89:a3:a0:68:ae:06:09:59:b3:87:30:dd:
         17:e2:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:08 2025 by rpki-client