Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer
File:                     Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer (raw, json)
Hash identifier:          Hd4aVOh3Yu2+MseJJwoZDjEUebOq5NbrD8cGGzdbBH8=
Subject key identifier:   16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBBDADC3078786D3BA366B86859098
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 216115
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:bd:ad:c3:07:87:86:d3:ba:36:6b:86:85:90:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=164c2ad7d60ecbf89300e3e7d4ec85f14931466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:09:8d:8e:07:68:bc:73:51:e9:85:f6:4d:
                    29:be:c8:ed:ef:89:6b:35:a0:6d:f0:ad:d4:6b:9b:
                    99:d1:6d:e2:fd:74:d3:dc:7a:2f:e2:d3:90:09:e0:
                    2e:95:c5:3a:ac:49:29:35:5b:01:d0:42:19:d7:1c:
                    06:cf:1a:5b:47:bf:2c:91:1d:31:c6:56:80:3d:1b:
                    ce:71:50:bc:a3:ea:35:2a:7b:e2:c6:e2:f7:68:07:
                    eb:db:ed:f4:9c:96:ed:2b:d4:f5:23:88:8b:5d:fb:
                    d2:19:5f:92:9c:76:98:10:e6:31:79:d7:90:a1:12:
                    5f:d9:5b:1b:c1:da:20:7d:20:5b:40:7e:78:9e:5e:
                    62:1a:c7:55:6b:c8:d3:8d:b6:59:d6:1d:e7:55:06:
                    26:0b:23:06:92:fd:bf:56:ac:34:4c:92:5d:d4:95:
                    97:82:fb:8b:1d:0a:cc:a2:59:63:e6:52:1f:2f:cc:
                    f8:9e:b7:5a:e4:23:ee:c5:2e:d7:90:c7:e4:72:c0:
                    7c:01:73:03:e7:e1:0d:82:cc:82:7b:83:fe:ce:a8:
                    be:9b:5f:b0:8a:42:19:44:09:f6:64:34:90:72:05:
                    f7:5f:7b:b3:62:4e:60:ce:7e:fd:30:43:e1:15:d2:
                    2d:a4:8f:5c:97:93:8c:b3:7d:e7:cd:56:82:65:a0:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216115

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:53:f0:eb:48:da:60:fb:fd:22:53:ab:b7:32:6f:ad:83:
         10:a6:74:a7:f0:92:b4:ee:28:4f:c7:a5:6a:7c:61:ec:3b:ae:
         90:a5:ce:9b:5b:3f:25:a2:5d:69:87:d3:8b:a3:d0:93:ad:10:
         88:75:8f:03:5c:06:28:ce:6e:da:8b:c7:01:31:97:e5:be:79:
         32:87:ae:cd:bc:59:01:73:b6:e5:cc:80:e7:76:41:2a:36:71:
         87:68:89:41:7c:17:79:fc:bc:18:c3:56:97:ef:23:f9:90:4b:
         23:42:2b:2b:38:b6:f3:8b:8d:d8:85:89:27:52:67:5a:18:8d:
         0d:e0:a4:ad:f6:8b:f9:33:2e:73:8a:f4:30:86:00:d8:42:a2:
         19:00:6c:c5:e1:bd:d6:5d:20:0b:c7:40:b6:76:8f:f7:d3:63:
         ac:c1:2b:79:c0:63:25:f1:f2:33:76:5a:1b:3a:2a:2b:39:65:
         97:92:d0:38:65:c6:0e:6e:e2:a8:ff:73:f9:10:a0:2c:33:77:
         36:ea:dc:36:95:c6:c5:66:2a:de:c3:bd:b5:c0:64:90:7d:8f:
         2d:45:b1:09:87:4f:b6:52:ae:a1:d4:74:e9:2b:83:90:d8:b6:
         4e:fc:0a:5c:8e:e4:b1:50:e7:a3:0f:7a:74:f0:4b:f7:2e:92:
         cf:04:4e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:58 2025 by rpki-client