Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
File:                     7giC55F0FC1OVM0R9xwVum45chM.cer (raw, json)
Hash identifier:          GED9BrljVF7cb1+NvGVQvu97LSEn8/7j96Y2fDO54/o=
Subject key identifier:   EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D985D2B201C64954D2EAC53EC6D242
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:37 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44254
                          IP: 195.93.150.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:85:d2:b2:01:c6:49:54:d2:ea:c5:3e:c6:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:75:e6:1a:d5:47:d6:9d:06:38:3d:ed:ae:
                    47:88:f2:cb:4f:4c:6d:3a:91:ef:a6:de:20:29:7e:
                    fd:40:0d:09:b0:5c:96:f8:4c:c1:ca:14:f7:7c:fc:
                    b8:51:d5:8b:94:5c:d1:09:31:e6:6e:df:75:b0:16:
                    8c:46:10:76:1c:4c:c9:f3:bc:2e:e7:da:8e:cd:7a:
                    85:9f:8b:51:7c:fc:1b:65:18:f2:ce:1d:b7:d0:f6:
                    22:8c:5a:e2:82:41:dc:d9:fe:9e:96:2b:de:ca:96:
                    43:b2:5a:33:a4:38:ed:6a:b9:10:16:92:b8:dc:1f:
                    eb:cb:8c:2c:06:22:95:f4:2b:8c:e4:0c:3e:9c:f0:
                    af:8f:54:c4:26:b1:84:9b:1f:c2:e2:31:78:81:71:
                    40:01:5b:13:bf:c4:6c:12:06:33:a5:bc:29:72:35:
                    c6:77:a5:29:f7:71:26:aa:c0:8f:15:99:6a:3d:5f:
                    46:f6:71:84:d6:f8:b5:e8:d7:b7:ce:9e:9f:31:ad:
                    b4:4d:a3:c0:c5:d4:ea:ff:7c:f7:d6:79:88:58:93:
                    41:ef:c1:55:6d:d9:cf:37:6a:ad:ea:6e:57:cc:51:
                    c3:aa:61:50:0a:a3:fd:dc:c9:b0:80:e8:a4:b4:11:
                    da:a8:b2:3d:8a:eb:ae:17:bc:ca:a1:df:2d:d6:b0:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.150.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44254

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:d3:73:4f:99:2d:7f:5b:04:81:4a:79:fd:be:f5:5b:87:
         55:a3:e1:4e:65:28:ae:76:cf:e9:f5:2a:81:e0:c8:f0:4e:1e:
         fc:ab:63:4d:3b:57:7d:99:ea:b7:b6:8f:5e:50:21:82:ba:10:
         a9:3e:32:4d:a5:5e:88:9d:c1:71:1d:c0:5b:b3:3f:97:5c:55:
         a0:4e:71:40:e7:a5:aa:43:fa:84:dd:ff:77:93:9d:85:88:e8:
         5e:59:7f:bf:5b:8f:30:9d:ef:7d:d2:7c:5a:7e:3e:2d:40:f3:
         cd:2f:d0:ff:ce:c2:7d:9a:b6:a9:d8:a6:11:b6:eb:7c:e1:d5:
         75:c1:44:64:00:b7:7d:08:fc:47:04:f5:4d:9a:e7:16:3b:8e:
         e6:29:c0:bb:f4:74:b8:59:4f:7f:1a:98:3d:15:e0:53:22:34:
         f0:6b:18:50:fa:5f:1f:03:36:b3:41:05:f1:43:76:eb:39:cf:
         b0:db:87:66:57:d6:0c:7c:22:a0:e2:f2:f5:d4:84:ec:92:dd:
         93:12:78:c7:00:7c:59:60:24:89:33:f3:12:a7:f2:ff:13:8b:
         b6:ba:70:68:39:6e:7f:f4:50:cc:15:2c:59:45:31:59:fe:9a:
         26:a3:09:c3:90:83:fd:c3:ec:c5:12:e7:39:8d:27:c4:2f:c0:
         8c:f7:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:49 2025 by rpki-client