Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
File:                     D5uga20iZz9_ez0PiJ9HIEQbbgw.cer (raw, json)
Hash identifier:          4e+wLFPh/Zivw3KN8/UR9Yx3lASnykT/H+FOxeCJ+dc=
Subject key identifier:   0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942746D331F6C09318A26728F163EAB426
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:00 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200249
                          IP: 185.252.140.0/22
                          IP: 2a13:7840::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:d3:31:f6:c0:93:18:a2:67:28:f1:63:ea:b4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:17:7c:ff:8a:83:35:5f:a3:a3:f6:81:0f:
                    55:b0:ef:31:8e:c3:b6:3a:63:8c:d8:1b:c3:a5:c8:
                    d1:63:ad:b2:c4:73:d6:5a:13:25:65:3a:39:03:59:
                    96:8a:88:23:25:52:b6:c0:c1:be:d1:82:f9:e8:ce:
                    eb:08:79:6c:a5:51:c7:92:6d:02:c8:07:a3:b8:7e:
                    72:c4:13:95:dd:c5:9c:d1:82:e9:a4:37:cd:91:83:
                    ac:c5:13:c7:01:4f:94:04:b9:3e:3d:12:61:c8:ed:
                    f2:45:1b:2a:cd:68:99:f5:78:83:49:06:57:19:29:
                    f7:d6:8e:a1:92:91:87:73:3a:1d:08:4a:c2:22:80:
                    25:15:8c:ae:bf:c8:da:ff:48:27:c7:3b:35:16:88:
                    3a:5f:50:4c:d5:e6:a5:1d:11:f5:c1:dc:cf:ea:b3:
                    5b:56:1f:bd:94:84:43:ff:76:38:1f:ac:b5:1d:4f:
                    1f:05:9b:71:72:08:2d:9a:a4:fb:59:0f:90:64:c8:
                    b5:72:50:a2:16:6e:e1:c3:54:b8:ce:28:78:00:b4:
                    bd:07:36:b4:ad:54:0f:6a:a4:13:e5:a8:6f:1a:2a:
                    45:48:20:dc:7b:10:0e:52:85:c9:10:d1:84:73:29:
                    da:9e:cc:c0:93:bc:6a:a0:60:75:ea:66:21:12:c4:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.140.0/22
                IPv6:
                  2a13:7840::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200249

    Signature Algorithm: sha256WithRSAEncryption
         66:f0:70:6b:08:ba:98:64:15:46:b5:f9:2b:17:e5:70:ac:f6:
         45:97:ab:b4:07:2c:57:f4:bb:5a:b1:bc:57:6e:e5:2a:42:10:
         ef:56:20:86:43:fd:07:de:f1:28:dd:02:d0:13:20:00:e9:63:
         2c:ff:b6:08:91:ce:7b:e2:f1:33:d8:75:a6:3c:b1:19:99:57:
         ae:c1:cd:2b:78:e2:3a:7d:27:43:ec:8d:2c:28:96:9c:82:1c:
         f2:8e:0a:f4:4d:e0:66:62:19:3d:e5:ab:d8:43:32:78:2c:a6:
         cf:af:2c:93:c2:33:7c:3f:92:cc:0c:b2:2b:df:f7:0c:73:51:
         22:5f:1b:c1:bd:21:7d:e4:05:23:ac:75:b3:9b:47:9b:ce:6f:
         5f:5b:37:e7:b8:60:11:49:9c:51:91:69:38:02:51:a4:b9:1c:
         7c:09:63:fc:e0:4e:30:25:e9:23:85:d2:15:22:a8:18:56:e6:
         75:ff:9e:ad:a9:25:72:0a:23:4e:4b:b9:0f:e0:c4:2f:67:f5:
         a1:dc:bb:22:64:f2:7c:d6:11:40:c2:c2:9e:47:3b:d6:8b:5d:
         be:08:36:9d:52:ce:d6:09:4d:e8:08:6e:e3:b9:41:37:f5:2f:
         8f:40:f9:6c:70:b9:b4:6b:c0:e6:38:7b:45:46:d9:f0:47:b5:
         7a:74:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:15 2025 by rpki-client