Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
File:                     FpCXDdu3YZzIIYbdtTbrTomF0t4.cer (raw, json)
Hash identifier:          vfCDZtDucZuIlICEaYmuRQ5Wr4hAOAPCBt1ynyWMiU8=
Subject key identifier:   16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423694D6D7C4D96F975EE4795C30D7FEE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42697
                          IP: 77.243.48.0/20
                          IP: 109.200.64.0/20
                          IP: 185.29.76.0/22
                          IP: 2a03:dc80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:4d:6d:7c:4d:96:f9:75:ee:47:95:c3:0d:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:32:e0:72:aa:26:0f:d1:e8:a9:7d:6d:b4:
                    59:1e:93:84:5a:a8:e4:2f:62:d9:9a:a5:fd:66:44:
                    9c:84:29:24:22:b7:e6:b6:c2:66:1c:88:9b:fb:3b:
                    31:3c:5e:c3:d8:ba:bf:88:fe:e8:fc:6d:8f:5a:15:
                    25:ca:d6:eb:e9:56:71:63:9a:73:9e:5c:6d:36:19:
                    bd:99:2b:9a:f3:6e:1f:71:c1:43:d9:f6:94:11:71:
                    a4:f6:07:ef:e4:c7:91:ad:9e:5d:32:5d:2d:4d:b0:
                    67:f8:b2:a0:0d:e4:46:d7:e0:d2:bb:dc:1f:4b:ca:
                    2d:f4:ce:35:49:c5:56:b4:11:29:34:f2:4b:a8:91:
                    37:5f:54:7e:a8:b5:d2:e3:a8:bb:4c:39:70:4e:e0:
                    38:4a:3c:e4:bf:b0:04:28:f9:77:9f:00:88:c7:97:
                    88:71:3c:05:16:de:a8:c1:ea:5c:d7:58:39:c3:27:
                    a3:77:a8:24:46:42:e4:82:00:c7:02:f2:36:72:7d:
                    99:a7:03:49:13:7b:89:6f:57:05:25:77:3c:22:2b:
                    36:d8:29:84:7e:9e:49:b9:c7:b8:fd:63:44:43:7e:
                    a6:cb:94:49:2d:cc:70:e4:21:d0:e9:27:d7:13:d7:
                    45:5a:b0:02:0c:65:9e:93:72:d9:8b:f7:56:0a:26:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.48.0/20
                  109.200.64.0/20
                  185.29.76.0/22
                IPv6:
                  2a03:dc80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42697

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:b2:82:c6:f8:36:0f:ab:df:8b:85:7d:e4:dc:72:6b:ac:
         74:48:ca:58:25:6c:1c:3b:07:76:b0:67:b2:ba:fa:9d:ee:33:
         0e:4e:77:91:7a:64:63:04:b1:bf:79:e5:96:60:63:7c:38:82:
         43:76:76:f9:53:b9:fb:e3:e4:6f:26:ad:4e:a1:4e:06:d3:8e:
         02:36:10:3e:d1:76:d6:b7:12:c7:6e:eb:13:df:64:df:05:c5:
         36:14:b9:28:65:2c:fc:b9:a3:9b:60:9d:96:cc:4e:76:07:d9:
         2c:99:73:2e:95:ea:d4:cd:ff:8a:1a:16:88:dd:86:d4:81:49:
         c0:33:b6:d0:5f:b9:ca:60:8a:08:5e:cd:63:42:33:10:bd:2f:
         d4:0c:e7:65:ab:83:d2:f5:95:7f:99:fc:57:13:35:9d:dc:36:
         4b:66:d9:f4:13:a3:dd:b2:cc:2a:0e:9e:46:59:81:3f:2c:95:
         05:a5:cc:84:7e:91:41:75:66:a7:1a:4d:1e:f3:ac:9e:85:69:
         7e:f8:53:d3:e8:1b:cc:5d:77:3a:b7:5d:12:91:f2:f9:3b:34:
         4f:68:e0:96:4a:45:05:54:38:3a:9a:d9:53:6f:f6:1e:70:c4:
         02:35:14:61:b6:ef:51:e4:d3:62:9d:97:ea:9b:b8:04:e6:58:
         8a:3b:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:43 2025 by rpki-client