Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.cer (raw, json)
Hash identifier:          jfvC5eDXqG0dyZm5UlFqMmmK0pjATlH2b3tYjmpYZBo=
Subject key identifier:   0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01943BE1E4B382EF381599F458BBED27CFED
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 06 Jan 2025 13:50:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8674
                          AS: 20943
                          AS: 29216
                          AS: 39840
                          AS: 39870 -- 39871
                          AS: 42381
                          AS: 52005
                          AS: 56908
                          AS: 57021
                          AS: 59758
                          IP: 77.72.224.0/21
                          IP: 83.143.176.0/21
                          IP: 185.1.230.0/24
                          IP: 185.42.136.0/22
                          IP: 194.58.192.0/20
                          IP: 194.146.105.0 -- 194.146.108.255
                          IP: 195.69.116.0/22
                          IP: 195.245.240.0/24
                          IP: 212.237.192.0/21
                          IP: 213.32.232.0/21
                          IP: 2001:67c:1010::/47
                          IP: 2001:67c:254c::/48
                          IP: 2001:67c:2550::/48
                          IP: 2001:67c:2554::/48
                          IP: 2001:67c:2558::/48
                          IP: 2001:7f8:d::/48
                          IP: 2001:7f8:122::/48
                          IP: 2001:7fe::/32
                          IP: 2a01:3f0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:3b:e1:e4:b3:82:ef:38:15:99:f4:58:bb:ed:27:cf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  6 13:50:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bac82804700ad36538bf86f34c073e971430da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:bb:04:6c:0c:b7:48:62:f3:66:a4:14:49:
                    94:d0:77:6b:ed:0d:14:24:1e:5c:86:da:6c:e9:0c:
                    4e:69:01:e5:0f:da:aa:ea:6f:2b:f1:84:6a:fe:b5:
                    13:24:15:74:c0:81:54:9e:85:f2:f0:5d:58:3e:65:
                    4b:1d:88:09:e8:b5:70:67:df:51:4d:0d:ad:72:ff:
                    5e:62:3a:8a:d3:46:7a:52:b5:8e:03:ff:11:78:70:
                    40:be:90:34:1f:9b:36:8d:78:59:68:8a:5e:a6:71:
                    8f:dd:d0:73:9d:36:1f:67:c9:b2:de:74:61:95:f6:
                    3f:45:be:37:a7:c5:8c:7a:69:67:2c:52:81:46:0d:
                    f1:7e:5f:a5:9b:e8:47:d5:7a:d8:95:d9:f3:ff:48:
                    30:2b:a1:e2:82:07:d9:17:50:92:1a:6a:1d:4c:f5:
                    d6:b6:e0:42:10:bd:89:9a:8e:86:7b:34:98:46:7c:
                    84:bc:e0:4b:2a:36:40:f0:12:3c:82:81:3c:72:03:
                    8f:0f:72:ff:de:f7:1f:88:a5:7a:5f:8e:5d:ce:6a:
                    57:80:76:4c:55:2f:a4:b9:fd:14:b7:8f:c5:6c:fe:
                    e6:3e:03:38:0c:e8:0b:9d:e0:f7:cd:48:cb:6e:7d:
                    38:d5:c0:6c:28:b2:4f:c3:c1:85:6a:43:9e:e6:c3:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.224.0/21
                  83.143.176.0/21
                  185.1.230.0/24
                  185.42.136.0/22
                  194.58.192.0/20
                  194.146.105.0-194.146.108.255
                  195.69.116.0/22
                  195.245.240.0/24
                  212.237.192.0/21
                  213.32.232.0/21
                IPv6:
                  2001:67c:1010::/47
                  2001:67c:254c::/48
                  2001:67c:2550::/48
                  2001:67c:2554::/48
                  2001:67c:2558::/48
                  2001:7f8:d::/48
                  2001:7f8:122::/48
                  2001:7fe::/32
                  2a01:3f0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8674
                  20943
                  29216
                  39840
                  39870-39871
                  42381
                  52005
                  56908
                  57021
                  59758

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:01:88:85:91:e6:a8:a9:3e:40:a2:4d:49:80:e0:0c:85:
         b0:fd:31:7b:6b:dc:01:d6:90:1a:72:45:e8:6a:15:30:49:de:
         b7:d4:2f:21:68:ef:a5:5b:28:05:bb:07:6f:4a:2a:2a:15:cc:
         69:3b:99:e8:d9:b1:10:2e:c7:01:6a:f0:1f:43:2d:54:61:5b:
         2c:06:b0:29:a9:9f:f4:6c:29:fe:d2:2f:3f:ef:7d:b7:30:fe:
         09:d9:21:08:05:64:bd:a5:19:4b:de:52:7f:3f:a2:48:98:37:
         2c:49:81:66:90:19:db:2a:9e:d6:a6:c1:1f:0c:9f:55:83:fc:
         cf:b8:51:2c:c4:23:b3:09:06:a4:96:5c:f4:63:b1:c7:ab:16:
         e2:b4:1d:8c:2c:22:e0:9d:08:8e:9d:86:60:a0:9d:4d:1e:e0:
         30:82:1b:11:b7:d5:70:4c:d7:af:a3:5e:6e:b6:79:a8:47:f0:
         6b:cb:ea:9f:a4:49:fc:0e:6b:9e:97:1f:7f:98:14:31:4b:be:
         72:e7:c6:14:45:c7:87:dd:92:0c:25:fb:29:96:fa:a1:1a:44:
         ab:03:00:bb:6a:f6:26:26:9c:03:3d:22:c2:00:be:90:32:ec:
         f2:38:f6:22:40:bf:13:d0:d3:67:78:b6:1e:f8:98:19:5d:02:
         78:08:55:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:13 2025 by rpki-client