Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer
File:                     9vwoeVAOHrgIVXBc-ENeA2NRN94.cer (raw, json)
Hash identifier:          iOJQHOfl6vBl0uASOarPV6g5XrRn4p974FlHknHZXVI=
Subject key identifier:   F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228DB6D84956D5438C0272515F234174
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216136
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:b6:d8:49:56:d5:43:8c:02:72:51:5f:23:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6fc2879500e1eb80855705cf8435e03635137de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:53:de:49:ea:1f:97:6b:98:4d:d5:59:8a:
                    87:6e:d7:d5:9a:87:df:64:b2:3d:98:e0:92:63:82:
                    73:99:85:c2:73:ad:ca:a2:2c:e5:02:b8:0e:45:00:
                    ad:80:75:ed:0e:d2:2c:3d:03:1a:e0:c0:74:18:63:
                    13:92:30:e8:cc:ee:f1:4e:3b:7a:e5:16:9f:b9:e8:
                    f4:01:4f:b6:05:3b:45:27:f9:ac:41:85:ea:06:5b:
                    e7:47:1f:ab:fc:f9:a1:ce:69:3a:81:96:fd:53:65:
                    23:a5:50:54:d0:2b:d9:5a:eb:6d:b1:d8:c5:95:ec:
                    0f:d0:7e:8f:5c:b6:31:7f:d2:dc:e6:18:3b:45:36:
                    88:4b:55:84:f2:72:e6:e2:45:48:e8:85:5d:ee:1a:
                    68:42:39:59:d8:19:11:37:fa:e7:33:cf:6d:eb:a1:
                    9a:a7:6d:1a:91:6d:f2:07:8e:f8:94:40:4e:29:a8:
                    62:66:4d:c2:be:89:cf:67:ee:bc:4f:b4:0a:d3:ab:
                    ce:5f:3e:0e:fe:28:d5:4d:d0:86:f7:e4:86:30:87:
                    c6:5d:10:05:f6:6a:dc:8b:5b:fe:44:d3:53:ae:77:
                    8a:01:fa:a6:6a:27:d2:c7:43:66:21:d7:99:92:82:
                    ed:02:cc:d9:4e:06:9c:e2:87:b8:31:a9:b4:45:de:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216136

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:7d:db:2b:ed:60:b4:0a:4c:3c:aa:08:0c:25:08:ac:f8:
         cc:b3:68:2c:3e:ba:83:fe:b1:00:c3:ed:f1:71:48:bb:de:d5:
         5d:6f:1d:f4:61:97:a6:58:0a:b7:56:9d:31:7c:9b:9c:63:28:
         9c:0b:0d:d9:42:da:76:bd:34:59:7e:a6:d1:4b:88:77:25:ad:
         bc:3b:f6:84:25:78:32:fd:ac:be:65:3b:ef:b4:20:0f:94:66:
         f5:4c:72:08:b6:2a:30:83:c5:30:47:f6:51:fb:cd:27:3a:d7:
         9a:7a:4c:37:0f:18:d3:08:45:f5:3e:61:25:d5:89:cf:b8:5b:
         91:55:86:9d:71:2c:40:3e:8c:91:45:91:e7:b4:95:34:7b:b1:
         4c:85:f5:95:55:de:a7:0f:e6:dd:70:00:10:c2:8c:0c:af:74:
         dd:31:a4:77:70:db:0d:d0:ab:91:33:bf:d0:33:09:6a:4c:df:
         87:68:ae:0a:7c:b8:88:9f:af:2c:11:f2:53:48:19:c2:16:85:
         a7:70:d4:d9:a0:5a:43:6a:9b:34:7f:55:f8:6a:e1:c7:cd:5c:
         2d:d5:d3:60:d2:db:7f:2f:56:0d:78:2f:b8:10:cc:70:6e:74:
         d7:4c:43:59:c4:32:16:bd:2f:12:6d:9a:05:e7:e2:74:da:af:
         a9:57:74:f9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQijbbYSVbVQ4wCclFfI0F0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmZjMjg3OTUwMGUxZWI4MDg1NTcwNWNmODQzNWUwMzYzNTEzN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr9T3knqH5drmE3VWYqHbtfVmoff
ZLI9mOCSY4JzmYXCc63KoizlArgORQCtgHXtDtIsPQMa4MB0GGMTkjDozO7xTjt6
5Rafuej0AU+2BTtFJ/msQYXqBlvnRx+r/Pmhzmk6gZb9U2UjpVBU0CvZWuttsdjF
lewP0H6PXLYxf9Lc5hg7RTaIS1WE8nLm4kVI6IVd7hpoQjlZ2BkRN/rnM89t66Ga
p20akW3yB474lEBOKahiZk3CvonPZ+68T7QK06vOXz4O/ijVTdCG9+SGMIfGXRAF
9mrci1v+RNNTrneKAfqmaifSx0NmIdeZkoLtAszZTgac4oe4Mam0Rd5nRwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPb8KHlQDh64CFVwXPhDXgNjUTfeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2VlZWJh
My1iMDM0LTQzZDktOGU0My03NDQ3MmUzOTZlODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWVlYmEz
LWIwMzQtNDNkOS04ZTQzLTc0NDcyZTM5NmU4NS8xLzl2d29lVkFPSHJnSVZYQmMt
RU5lQTJOUk45NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMSDANBgkqhkiG9w0BAQsFAAOCAQEAJ6R92yvtYLQK
TDyqCAwlCKz4zLNoLD66g/6xAMPt8XFIu97VXW8d9GGXplgKt1adMXybnGMonAsN
2ULadr00WX6m0UuIdyWtvDv2hCV4Mv2svmU777QgD5Rm9UxyCLYqMIPFMEf2UfvN
JzrXmnpMNw8Y0whF9T5hJdWJz7hbkVWGnXEsQD6MkUWR57SVNHuxTIX1lVXepw/m
3XAAEMKMDK903TGkd3DbDdCrkTO/0DMJakzfh2iuCny4iJ+vLBHyU0gZwhaFp3DU
2aBaQ2qbNH9V+Grhx81cLdXTYNLbfy9WDXgvuBDMcG5010xDWcQyFr0vEm2aBefi
dNqvqVd0+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:41 2025 by rpki-client