Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
File:                     DxgybgAap_xW-DUxMVN2-equCYg.cer (raw, json)
Hash identifier:          K1Ea3RIn3M7iRJJS94DnoemgzGdjyFFSo5RDVOg6yw8=
Subject key identifier:   0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194282626B8DEDEF0BB39E7F716BE196F51
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205134
                          IP: 91.216.171.0/24
                          IP: 2a12:d9c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:26:b8:de:de:f0:bb:39:e7:f7:16:be:19:6f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f18326e001aa7fc56f83531315376f9eaae0988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:ad:4b:68:3b:d9:9d:b8:9c:b3:d6:b6:f9:
                    3a:8f:fe:cc:66:8d:bd:3a:c1:69:f7:83:4f:d4:99:
                    50:1d:a4:15:17:80:5a:ab:6e:56:e4:49:8f:52:18:
                    04:07:9c:0c:68:8f:12:73:eb:fe:1f:db:03:52:a6:
                    5f:0c:52:c4:c7:a5:06:dc:e2:0e:57:ff:69:b4:ab:
                    ea:72:80:e6:46:cd:5c:8a:81:85:4f:f4:84:70:f5:
                    0f:c1:c7:76:85:af:5a:88:a7:35:51:e3:11:f6:e5:
                    d7:79:60:cb:10:2d:a8:0e:7d:d9:89:69:7b:d6:70:
                    62:b1:3f:4a:b3:ec:9f:20:6c:dd:1d:2b:c7:21:30:
                    2a:c1:b5:5f:b5:31:3f:3c:7a:90:ee:be:f5:62:61:
                    ee:13:9e:d9:30:14:9e:eb:fa:69:00:92:1b:a4:c8:
                    e0:53:5c:63:6c:23:17:c4:9c:db:5f:e8:63:6a:b2:
                    cf:52:3f:21:83:fa:a3:69:fc:df:fd:ed:3f:a3:5d:
                    68:bc:e6:08:dd:df:55:b9:5a:78:1b:d2:95:be:ee:
                    e7:c6:9e:a5:81:b5:cc:21:ed:88:62:6d:25:21:5b:
                    13:ba:5e:9f:36:80:05:7b:69:c5:fc:b8:22:1a:9a:
                    c3:cf:ad:3d:2d:4e:53:af:ca:99:88:15:db:23:15:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.171.0/24
                IPv6:
                  2a12:d9c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205134

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:d4:7a:df:81:44:c8:d9:51:74:16:79:78:a6:93:44:c0:
         23:dc:6e:f0:3e:f9:a8:16:6f:94:ec:f5:77:bf:6d:47:39:b5:
         24:f6:87:da:52:09:38:d9:f5:71:bf:6e:bf:96:36:38:10:84:
         8f:37:ec:9c:1c:9d:f0:d0:83:7c:71:3f:c8:f2:22:3b:82:ef:
         9b:f9:0e:ce:09:a0:65:94:cc:0e:5e:a5:31:be:f8:fd:19:2c:
         07:f6:b8:4e:89:45:82:ab:98:76:6e:d7:dd:a4:c4:e3:19:87:
         6f:32:42:a1:30:df:24:34:01:b3:80:66:99:15:f3:30:a2:25:
         25:51:d5:1a:6f:cf:32:5b:b0:08:4c:bd:d1:51:c4:95:61:0d:
         33:2b:52:10:d7:1e:a0:10:a9:ef:c1:e0:d3:96:5e:a6:2b:3d:
         e4:b6:dd:e1:8d:60:fc:46:21:0d:9e:93:c9:4e:5e:d5:20:10:
         20:35:51:b7:f3:92:2f:1a:f6:76:57:74:82:e4:fe:f5:8b:eb:
         e5:69:62:3e:dd:54:6a:72:7d:c0:8f:20:e2:02:e5:d0:38:43:
         81:23:61:d7:57:07:50:e8:b9:30:97:40:27:57:3f:b5:6a:10:
         9c:b7:5a:e6:9f:01:89:44:76:f2:34:70:16:3c:35:47:29:61:
         c0:02:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:11 2025 by rpki-client