Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer (raw, json)
Hash identifier:          tkouD++lJcEXz0pWX3OCb6KPTIMY0BoHsKkd8Cit5VM=
Subject key identifier:   12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B199E95F76CAC4CAA385C7C4B62636
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 2001:678:4d4::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:99:e9:5f:76:ca:c4:ca:a3:85:c7:c4:b6:26:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:9f:2f:2f:bd:84:59:a7:fc:d5:37:61:ef:
                    0b:15:96:a8:13:76:da:d5:fc:30:be:6f:be:f1:1f:
                    ca:25:87:0a:ef:d3:79:a7:c7:a9:c1:80:f9:b9:b4:
                    92:3a:e6:1f:a2:03:03:87:d2:fc:13:59:69:4c:4c:
                    7a:e0:d8:b3:b4:89:1b:e2:3b:96:8a:7a:7c:ad:5a:
                    63:ae:56:17:5e:fe:c3:2d:4c:18:74:f0:6b:d1:f9:
                    4e:5c:1d:f5:14:eb:7d:09:cd:05:72:53:05:19:6d:
                    ea:55:60:3e:2e:99:14:9f:23:ee:90:6a:49:80:c5:
                    15:ae:8c:8d:4f:7d:6f:39:14:b0:de:dc:98:5e:af:
                    4f:1b:75:c0:80:a8:9e:53:c8:e5:a1:61:94:e3:a4:
                    60:99:09:63:9e:42:f4:db:74:7a:2f:de:ca:59:b0:
                    ef:db:54:79:89:67:0d:2a:fa:4b:df:6a:1e:b8:03:
                    d1:b1:d3:c3:b6:ea:4f:ac:b3:e3:57:d4:67:96:2d:
                    78:6a:db:94:86:ab:41:c2:7f:49:8a:8e:22:2a:77:
                    56:75:8b:9c:15:86:4d:bd:0b:f2:7a:d8:ea:38:a0:
                    77:e5:f6:db:c0:2b:7a:38:52:de:7d:76:f6:c6:9f:
                    55:8d:ff:59:58:e1:d3:88:97:af:68:9b:6e:85:38:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:4d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:15:f0:e3:48:70:b8:45:c8:08:5a:4a:cf:31:5a:59:8a:f8:
         65:5c:96:7e:8e:5c:77:50:a7:c7:6e:51:95:13:66:48:e8:a3:
         aa:36:0c:7d:f6:60:ad:44:ee:46:f8:4e:cd:63:d7:64:ee:3f:
         f1:09:16:9c:39:5f:e3:28:17:51:9f:ea:2c:14:1c:18:21:78:
         b3:a4:f6:b8:0d:40:f4:17:8c:72:3f:e4:dd:cb:7f:46:84:cb:
         59:93:30:36:f9:cf:05:e5:e7:56:fe:3a:ef:de:44:23:da:9c:
         b5:fb:5f:46:b7:34:54:41:4f:5c:cc:b1:ef:c8:c4:96:e8:ef:
         ee:ab:c8:34:1e:8a:cc:60:cf:df:a8:61:06:03:b4:ad:bf:fb:
         e8:32:9d:74:f2:66:a7:31:b4:3f:f6:8b:18:78:21:66:84:10:
         6f:44:fb:b6:76:d1:d7:98:ae:17:ed:a8:d8:ea:58:de:46:56:
         b2:46:2b:6d:63:1f:b0:43:3b:04:f9:b1:4f:5d:aa:4f:8a:3c:
         23:02:20:0d:5c:cf:69:e3:99:5f:f2:67:81:bf:ee:12:40:de:
         20:26:88:22:34:29:e1:ba:48:00:a6:9d:2e:d6:39:e8:8f:39:
         55:9e:fb:85:17:c5:37:8c:7f:4c:d7:a6:85:fb:83:4e:35:7c:
         75:ff:cb:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQhsZnpX3bKxMqjhcfEtiY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmU2NDA0MmI2ZTcyODhhNDg1ZGIyNzBjNTUxMzI5YjgwMmZkOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvASfLy+9hFmn/NU3Ye8LFZaoE3ba
1fwwvm++8R/KJYcK79N5p8epwYD5ubSSOuYfogMDh9L8E1lpTEx64NiztIkb4juW
inp8rVpjrlYXXv7DLUwYdPBr0flOXB31FOt9Cc0FclMFGW3qVWA+LpkUnyPukGpJ
gMUVroyNT31vORSw3tyYXq9PG3XAgKieU8jloWGU46RgmQljnkL023R6L97KWbDv
21R5iWcNKvpL32oeuAPRsdPDtupPrLPjV9Rnli14atuUhqtBwn9Jio4iKndWdYuc
FYZNvQvyetjqOKB35fbbwCt6OFLefXb2xp9Vjf9ZWOHTiJevaJtuhThQQQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFBLmQEK25yiKSF2ycMVRMpuAL9jEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzhlMzVm
NS05N2QzLTQzNTEtOWJiMC1mY2IzNmQ4MTI1NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvOGUzNWY1
LTk3ZDMtNDM1MS05YmIwLWZjYjM2ZDgxMjU0YS8xL0V1WkFRcmJuS0lwSVhiSnd4
VkV5bTRBdjJNUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeATUMA0GCSqGSIb3DQEBCwUAA4IBAQBy
FfDjSHC4RcgIWkrPMVpZivhlXJZ+jlx3UKfHblGVE2ZI6KOqNgx99mCtRO5G+E7N
Y9dk7j/xCRacOV/jKBdRn+osFBwYIXizpPa4DUD0F4xyP+Tdy39GhMtZkzA2+c8F
5edW/jrv3kQj2py1+19GtzRUQU9czLHvyMSW6O/uq8g0HorMYM/fqGEGA7Stv/vo
Mp108manMbQ/9osYeCFmhBBvRPu2dtHXmK4X7ajY6ljeRlayRittYx+wQzsE+bFP
XapPijwjAiANXM9p45lf8meBv+4SQN4gJogiNCnhukgApp0u1jnojzlVnvuFF8U3
jH9M16aF+4NONXx1/8sk
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:00 2025 by rpki-client