Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.cer (raw, json)
Hash identifier:          0ObOZHjqxVhzIpDWOkGMavptTN7+jW7VHlXEHgpZbTY=
Subject key identifier:   E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FC0FE50848CA44E2990E5DF11B6DE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.46.253.0/24
                          IP: 194.107.208.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:c0:fe:50:84:8c:a4:4e:29:90:e5:df:11:b6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:79:0c:69:e8:54:32:9a:fe:5a:16:c6:e4:
                    63:c1:9a:02:b3:ba:1d:0b:fa:56:8b:32:f8:ba:f8:
                    8a:c2:fb:9f:b8:ca:9d:23:ec:8a:d9:98:fd:43:58:
                    a1:60:ea:e5:2d:7f:05:ab:08:c8:2f:fc:73:3a:40:
                    a5:c0:1c:a6:4d:0d:ba:77:62:29:c1:c2:b3:ce:1f:
                    e3:80:1a:3a:e8:32:54:73:31:04:6c:45:7c:a3:20:
                    43:42:49:80:33:2f:ad:b7:c0:22:61:ac:c4:8c:e8:
                    b9:2e:d2:9c:a4:cb:6d:99:0f:9c:a3:92:b1:e0:a1:
                    3f:f1:3a:00:d3:50:73:98:a1:bd:09:0c:c1:64:53:
                    e7:8f:25:32:46:bc:a2:50:f2:1c:a0:13:cd:88:53:
                    56:c9:f3:9f:8b:d5:a6:d1:bd:77:82:06:03:fe:b6:
                    86:cb:f0:c2:99:87:be:8a:a6:86:83:d7:12:bf:bc:
                    51:37:66:71:f2:f4:c8:7b:e6:2f:5f:13:13:6a:51:
                    cc:d5:7f:fd:4a:69:72:1b:f5:87:40:dd:b3:dd:da:
                    01:b7:fd:d3:ed:88:fa:3b:14:6e:78:84:e0:3d:b0:
                    62:e7:20:15:26:20:28:e7:01:dd:f4:4a:80:7f:d1:
                    d3:35:08:cf:54:3b:f6:55:22:33:b2:61:87:e8:cc:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.253.0/24
                  194.107.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:07:cd:80:24:c3:85:1b:16:5d:ed:00:87:73:c5:e7:9b:
         d0:8c:29:f8:48:d8:fc:17:4a:f7:9b:c0:6b:17:cb:c7:18:91:
         08:a2:16:fe:5b:e1:8c:fc:34:3c:ba:51:4a:25:48:51:33:a1:
         47:c0:25:3c:2a:9c:29:70:be:8c:b7:1b:6a:9d:3b:c4:a1:c4:
         ec:78:e1:3c:c5:0e:c1:a8:a4:a4:24:45:bf:de:fe:4a:fa:6b:
         34:41:ad:c3:83:be:56:50:79:b5:ce:6a:01:fc:54:bc:b7:3f:
         e1:ad:9a:4a:b8:3c:ff:ce:65:ec:d5:15:45:c8:a8:b9:7f:42:
         6f:b9:ff:62:64:55:c5:f0:87:b0:ea:1d:14:6f:35:a4:ed:2a:
         c1:09:75:b0:5c:70:a3:b9:e4:af:82:a9:ef:25:d4:de:ba:15:
         55:b8:6a:df:69:b8:03:f9:fd:8a:cd:44:65:d8:7d:74:d1:95:
         2e:21:83:13:f0:38:18:c9:4e:ac:f8:5c:93:2c:33:62:bc:7c:
         fc:e8:e0:0d:b2:62:6a:c4:c1:75:b5:13:e7:d8:6d:34:ed:80:
         e5:18:7c:d3:d9:6f:87:d6:e9:26:67:28:83:28:da:1d:24:3f:
         00:5a:f0:42:25:e2:ed:1f:99:08:e7:50:3d:77:58:24:e1:a5:
         84:79:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:58 2025 by rpki-client