Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.cer (raw, json)
Hash identifier:          CYaHWQKPQQ4ue4H7mJh8+sVtZuDFDAyvF/ZUjNGp1RA=
Subject key identifier:   13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258E2D57B92A2B02072F2869FBF400C7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:47:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.189.184.0/22
                          IP: 2a09:87c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:2d:57:b9:2a:2b:02:07:2f:28:69:fb:f4:00:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:47:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:ff:34:31:5b:05:ea:de:5c:d5:d8:fa:54:
                    67:b1:72:06:55:e7:12:20:88:cd:99:8e:3e:76:85:
                    f7:f6:1e:df:7f:0e:47:3d:7c:63:c0:ee:d3:bc:57:
                    55:8b:84:4a:25:77:6e:c6:18:bf:a2:7c:96:45:14:
                    2e:63:8e:18:4a:c6:5d:d2:7b:63:82:8c:20:e7:79:
                    ec:96:4a:96:e7:d0:e0:cb:90:df:ac:dc:50:b6:a2:
                    cc:fa:71:a7:a7:f3:bf:c3:bb:28:e5:70:c2:1a:ce:
                    b9:96:08:2f:91:10:e7:d5:57:46:8e:64:82:5c:3e:
                    21:37:02:06:11:f5:d1:9f:e1:ab:ec:2b:c4:a0:82:
                    b7:27:6a:de:da:a0:8d:21:e3:7e:84:dd:30:08:33:
                    d2:f6:c0:5c:44:f4:c7:af:95:8b:e7:b3:20:0c:7f:
                    9a:e8:13:1c:7e:88:b1:e5:3e:df:d2:45:56:c8:75:
                    d1:97:89:c3:05:ba:f0:69:8d:dd:4f:af:88:e0:17:
                    0a:d0:82:51:1b:7d:92:a4:97:be:16:fb:05:ff:a6:
                    b6:e2:3c:c9:65:7c:29:25:a2:b6:8a:dd:37:c4:91:
                    15:f5:22:4d:ce:f0:67:f3:51:15:7e:39:5b:95:6d:
                    9e:4a:af:44:77:ff:e3:83:64:8e:1f:02:b3:13:31:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.189.184.0/22
                IPv6:
                  2a09:87c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:90:66:79:cd:0d:0b:56:10:99:c0:80:3d:b5:d8:84:f1:
         31:bc:49:77:71:69:4c:e4:53:9e:8f:1a:9b:2d:e3:13:c4:c1:
         72:e6:1f:4a:5f:aa:f2:d3:e7:06:dc:f4:8b:f1:72:88:07:44:
         c7:c0:45:42:53:6a:32:fd:0c:20:33:27:b1:eb:d7:79:73:a2:
         aa:13:56:a3:9e:39:93:3f:03:8b:a2:d3:ad:c2:17:5b:4b:33:
         fd:7a:ea:d3:84:2f:d0:9a:c8:c9:9b:ea:c9:5d:3e:7f:18:f5:
         b7:56:3d:0b:2b:1b:3f:fa:2c:32:a5:88:22:4a:50:fe:68:e0:
         85:c6:5c:96:ad:aa:41:ca:2b:e7:e9:1e:2a:61:79:fa:2a:13:
         e2:f1:e8:24:85:14:b6:9f:e4:2b:52:75:65:52:e0:1c:8d:d3:
         59:88:ff:a8:eb:2c:10:66:47:91:1b:8e:70:c7:85:71:38:c2:
         e3:fc:e8:d4:93:d4:46:a7:0c:4e:af:eb:b3:d9:cc:cb:6e:72:
         98:e3:be:47:10:7c:8f:ac:0b:5f:94:a4:1e:95:6d:40:84:23:
         30:5d:e5:66:46:b3:95:27:a5:3f:16:5f:71:4a:2a:c1:56:69:
         85:c4:bc:0b:a0:24:c3:72:bb:e4:96:ce:c5:23:34:69:7f:bb:
         11:8d:23:61
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlji1XuSorAgcvKGn79ADHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzI5Y2QzZWUyZmUxMjZhODJjYTJhNThjODdlZDU4MzhmZTJhZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCX/NDFbBereXNXY+lRnsXIGVecS
IIjNmY4+doX39h7ffw5HPXxjwO7TvFdVi4RKJXduxhi/onyWRRQuY44YSsZd0ntj
gowg53nslkqW59Dgy5DfrNxQtqLM+nGnp/O/w7so5XDCGs65lggvkRDn1VdGjmSC
XD4hNwIGEfXRn+Gr7CvEoIK3J2re2qCNIeN+hN0wCDPS9sBcRPTHr5WL57MgDH+a
6BMcfoix5T7f0kVWyHXRl4nDBbrwaY3dT6+I4BcK0IJRG32SpJe+FvsF/6a24jzJ
ZXwpJaK2it03xJEV9SJNzvBn81EVfjlblW2eSq9Ed//jg2SOHwKzEzF7gQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBMpzT7i/hJqgsoqWMh+1YOP4q9XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2FmNThi
Ni05ZThmLTQwNmUtYWMxYy0yZmMwMzBhNjBjZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvYWY1OGI2
LTllOGYtNDA2ZS1hYzFjLTJmYzAzMGE2MGNlYS8xL0V5bk5QdUwtRW1xQ3lpcFl5
SDdWZzRfaXIxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCub24MA0EAgACMAcDBQMqCYfAMA0GCSqGSIb3
DQEBCwUAA4IBAQB99pBmec0NC1YQmcCAPbXYhPExvEl3cWlM5FOejxqbLeMTxMFy
5h9KX6ry0+cG3PSL8XKIB0THwEVCU2oy/QwgMyex69d5c6KqE1ajnjmTPwOLotOt
whdbSzP9eurThC/QmsjJm+rJXT5/GPW3Vj0LKxs/+iwypYgiSlD+aOCFxlyWrapB
yivn6R4qYXn6KhPi8egkhRS2n+QrUnVlUuAcjdNZiP+o6ywQZkeRG45wx4VxOMLj
/OjUk9RGpwxOr+uz2czLbnKY475HEHyPrAtflKQelW1AhCMwXeVmRrOVJ6U/Fl9x
SirBVmmFxLwLoCTDcrvkls7FIzRpf7sRjSNh
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:44 2025 by rpki-client