Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
File:                     DtBp69i6c1aNl9ixv7Q84upNqd4.cer (raw, json)
Hash identifier:          dEqKiXfFhKKV97PuHyfr3d+MKvST7YqZsa8omC+Whe4=
Subject key identifier:   0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3FCFFE62FCCF76A7DB211B34BCAAE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207401
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:fc:ff:e6:2f:cc:f7:6a:7d:b2:11:b3:4b:ca:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:b4:0e:41:a5:63:56:2c:8d:10:61:8e:3c:
                    a6:9f:4e:81:ce:76:d2:db:0a:c1:85:f8:60:c7:71:
                    df:db:95:90:4c:d3:7a:1a:2b:8c:37:e9:0b:0f:97:
                    05:3c:6a:e1:bc:ef:31:9d:65:5a:cf:9d:0f:73:1a:
                    07:86:c9:97:f2:ec:2c:a7:61:59:a5:4c:f1:04:1e:
                    9b:63:ca:92:de:c4:79:78:31:17:af:ed:e5:81:50:
                    f8:d9:42:ce:a0:b8:b2:49:4c:2e:57:34:4d:f2:ed:
                    07:ac:cf:5e:88:0a:9e:16:d8:84:33:29:66:30:7c:
                    1a:92:5e:54:f0:e9:57:17:ac:85:0d:7a:56:a9:28:
                    65:c7:59:fc:65:7f:44:dd:0e:34:58:b8:d6:28:48:
                    a4:f3:2b:c6:6e:02:60:65:67:21:b5:69:52:fc:e7:
                    ec:fa:7c:c0:f2:22:52:4a:70:cc:fa:ef:0d:13:bc:
                    fd:37:46:51:b0:9d:c0:57:17:5a:9f:cb:4f:78:4c:
                    1a:13:51:fe:a5:6b:1c:7f:c8:51:88:98:41:e6:f0:
                    68:21:8a:e4:6a:e8:f3:39:45:c0:e1:fa:e4:df:31:
                    37:f9:0a:8b:e0:d9:49:a6:6b:06:51:34:74:8f:8b:
                    9a:37:f2:c7:72:fa:eb:14:b4:b5:96:e7:37:17:b1:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207401

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:fa:52:01:a5:bc:0a:ed:d5:80:7c:24:4b:a2:f3:b2:bd:
         54:4d:b4:9d:7c:fb:2c:8d:96:fe:f6:60:89:fd:05:ff:18:2f:
         eb:14:e7:9b:39:27:06:c5:69:81:9d:64:a5:21:1e:25:50:8b:
         1c:0b:8c:5e:c9:79:25:b2:5e:93:e1:ca:ba:7f:98:06:a7:eb:
         66:ec:04:bf:08:10:38:a3:6c:aa:99:3c:ae:67:68:ba:ff:95:
         4c:ff:34:77:3d:ce:7e:f3:db:9c:15:a5:50:77:8d:8e:57:a5:
         f7:92:95:a3:af:12:04:4f:db:51:8d:46:a8:d0:e3:0b:10:ff:
         69:c4:81:11:fd:cc:ea:cf:98:7f:1e:17:d2:cc:3f:0b:6a:f8:
         31:72:c5:0d:c1:cd:69:2a:84:ba:98:52:92:53:b1:33:cc:c3:
         3c:41:95:49:d7:08:cc:31:d2:aa:99:c3:f5:cc:e4:32:dd:68:
         eb:11:61:23:2a:78:47:3d:7e:44:cb:15:4d:fe:be:03:0e:f3:
         39:bf:20:aa:5e:ad:d4:2e:d1:3c:8c:37:7b:c7:99:bc:26:9f:
         98:3f:3d:84:5e:01:a5:8a:7b:94:04:a7:95:44:90:d7:ca:d3:
         34:39:18:d4:dc:eb:51:e0:f8:5c:01:35:f7:e3:62:ee:38:91:
         c4:c0:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:32 2025 by rpki-client