Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
File:                     7eKhItz_wiL6mYS_Frb58T94paU.cer (raw, json)
Hash identifier:          joaQSCgQbRhbNleuwVHLCdqymlu/+0HZuP4oHt/5fG8=
Subject key identifier:   ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6B68253B34F4CF4D182E85E383D7C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:41 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201712
                          IP: 93.95.214.0/24
                          IP: 2a13:e00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:b6:82:53:b3:4f:4c:f4:d1:82:e8:5e:38:3d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:c9:c4:0b:92:56:66:2f:16:2b:d4:ea:0e:
                    25:7f:c3:5e:8e:79:6c:d2:a8:81:6e:4d:86:32:d6:
                    1b:12:dc:9f:0f:8d:40:7e:61:52:34:c7:32:44:57:
                    e8:a7:10:15:30:87:7d:2f:ad:54:ab:c2:17:31:7e:
                    3c:74:36:71:54:57:90:55:d1:14:48:6b:e9:b3:3b:
                    48:24:af:6b:33:31:4e:9b:00:38:d6:01:06:79:05:
                    8f:a4:cc:27:58:d4:26:76:6f:eb:09:28:0b:45:83:
                    e7:9f:06:d8:03:df:a1:25:c1:53:8f:ef:4a:39:f6:
                    d8:29:9d:7c:3f:fa:c2:ff:cd:65:f1:9d:e7:5a:f5:
                    d4:4a:64:46:40:68:0d:7f:5b:cd:35:b7:cd:d4:56:
                    6b:7b:02:8f:ab:2d:bb:bd:84:8f:f6:f1:93:16:a8:
                    69:c7:86:2c:61:33:b3:80:9f:e1:a5:77:b8:53:ef:
                    76:42:a8:08:d9:85:26:a8:b6:c3:af:b0:40:be:f6:
                    f6:38:16:6f:fc:10:f0:1c:69:56:03:86:b2:bb:55:
                    d1:ab:32:9e:67:f8:7b:84:b7:8a:fc:86:f5:b3:5e:
                    fc:f8:a1:44:09:b2:2f:af:ce:5f:fc:a6:83:70:0c:
                    6c:6f:b8:16:89:1e:dd:ca:f4:c3:71:f5:b8:69:ca:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.214.0/24
                IPv6:
                  2a13:e00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201712

    Signature Algorithm: sha256WithRSAEncryption
         b1:4e:b0:ac:9c:08:9e:0d:12:5e:5b:ff:75:c2:1a:9c:0f:1f:
         92:07:03:06:d2:2a:3a:5f:63:9b:18:58:7e:4f:59:18:65:ac:
         c7:e0:1c:1b:f6:00:44:39:be:04:33:b8:d6:69:c3:14:99:81:
         ce:85:a3:8c:0c:cf:0b:89:4a:0a:59:27:8e:da:4b:8e:c2:fb:
         44:2a:df:d3:08:d6:7d:6e:10:2f:80:ad:e4:ec:60:ef:f7:44:
         27:13:1e:4b:3c:b9:b6:e8:75:b5:1b:0e:bf:7f:9a:0f:b5:eb:
         43:b2:44:08:0c:69:7e:fb:a9:6b:bc:ad:0f:6e:63:4c:bb:9b:
         c9:fc:b5:61:f9:1b:16:c8:01:be:ca:e9:62:05:87:1e:75:9a:
         9f:88:db:bd:71:8e:bc:6c:05:5a:e3:59:62:1a:73:15:95:69:
         45:3b:61:0f:ce:16:88:57:fb:1b:3b:8b:ad:45:61:1b:3f:ee:
         16:f6:0f:04:20:d3:b9:6f:26:21:e0:c4:cc:81:92:29:3e:38:
         7d:ed:8a:83:96:1a:17:a7:03:9e:d9:08:96:6d:89:6a:a7:86:
         2b:91:ef:70:b8:75:07:b5:7f:54:57:44:97:36:4c:5d:a4:ee:
         98:f7:9c:9e:c2:2b:af:19:c6:d8:fc:fa:a0:9d:0b:8b:c6:c6:
         ba:de:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:33 2025 by rpki-client