Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.cer (raw, json)
Hash identifier:          mAQSP8I7VYJr5J5SoefC6eP2u3ql7YslPZ/EgKhOTC0=
Subject key identifier:   F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266C14E55F23E4214154C22EC03A81D6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:50:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51049
                          IP: 194.126.223.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:14:e5:5f:23:e4:21:41:54:c2:2e:c0:3a:81:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:b0:1e:69:42:a1:f1:20:3a:d2:10:e0:0e:
                    b5:10:2f:29:76:f7:ff:8e:b3:ff:ba:69:a0:6e:50:
                    ad:b0:6d:99:05:24:19:dc:a4:78:40:c8:1b:90:2c:
                    78:9a:fd:31:46:3a:36:83:be:9e:b7:86:53:43:75:
                    0b:f4:a3:79:f0:7e:93:4f:a8:72:1f:0b:a6:6b:df:
                    f0:09:63:13:df:7c:f5:68:43:db:97:17:4a:1c:ae:
                    06:5a:06:cb:b8:e1:98:a8:dd:dc:ce:d6:ca:9d:82:
                    39:ef:98:51:c6:0f:4a:2a:57:a8:2a:e4:49:55:08:
                    d3:de:09:94:39:ad:8e:d7:35:7b:22:8e:39:09:81:
                    e5:32:4a:b5:65:5d:b3:3f:23:8f:41:c9:87:00:c7:
                    f9:54:89:ca:f5:a1:54:e0:3d:79:44:00:c9:b4:cd:
                    1e:1a:89:11:aa:8d:5e:0d:6b:1f:2b:1d:4b:ea:23:
                    ee:d5:7e:5d:cc:31:04:d8:ee:e4:e3:f2:e1:fb:e4:
                    d0:1b:40:c3:d5:0e:66:4a:5b:ed:2f:04:24:be:10:
                    73:e1:f5:24:03:11:16:24:a4:b2:18:45:a8:5d:07:
                    30:69:db:c3:fb:62:b2:e9:36:79:b8:0e:19:73:89:
                    5c:25:01:55:fa:59:35:27:8e:58:a1:eb:75:6e:ba:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.223.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51049

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:06:df:c5:97:55:92:65:db:16:27:f2:0a:7e:57:20:67:
         10:f3:d9:7e:9b:b1:90:c7:a4:0a:c3:ab:38:a9:33:b9:78:d3:
         ed:7f:87:a1:64:cd:40:5c:db:d7:2b:36:54:6e:23:31:0a:90:
         c4:60:15:27:cf:e6:a6:a1:64:f1:2d:db:64:e0:06:29:2d:48:
         ef:16:c1:53:e9:55:c3:0e:d4:71:13:a3:da:2b:af:ef:c7:f7:
         7b:3e:1e:b4:53:89:c7:ce:ed:fe:a8:20:02:50:12:1d:5c:2e:
         69:35:cf:c9:a0:6b:d6:6b:f5:1e:61:63:0b:cc:07:a6:75:f3:
         07:1b:07:f8:6f:fc:0e:e3:91:7b:04:0b:75:2d:6f:a9:e8:fc:
         12:4d:08:e3:17:37:db:05:d0:6b:bf:0e:1f:15:f1:cc:6f:ae:
         f2:22:7c:2a:04:fb:07:31:f0:f2:42:74:a5:0b:07:2e:ff:3f:
         3b:2c:71:a0:d6:97:e1:69:75:44:84:c0:d6:c0:cf:16:5c:9b:
         fd:e0:82:62:cf:4d:09:61:6b:43:37:d5:a9:4b:b7:b8:12:19:
         4c:24:5e:f4:e7:6d:c7:48:3d:1c:44:8d:5d:69:eb:ea:a6:c2:
         73:c6:70:e5:e2:06:b1:73:20:af:83:a2:07:43:56:d7:a8:ff:
         91:32:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:27 2025 by rpki-client