Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer (raw, json)
Hash identifier:          VaBkhO+PzZi44gTQfYldXuRS1vHs9Sy813ct37VzrMM=
Subject key identifier:   17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BE95E43A4D31575C18632A93B0F00
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:53 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210412
                          IP: 45.150.57.0/24
                          IP: 89.106.203.0/24
                          IP: 2a12:b380::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:e9:5e:43:a4:d3:15:75:c1:86:32:a9:3b:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:51:e8:69:0c:5d:18:a6:b5:93:6e:ec:71:
                    f4:18:38:7e:2a:25:c0:e5:12:9e:42:45:c3:c4:3e:
                    90:af:36:e4:cc:b5:b4:a5:d6:58:12:d4:89:d1:e4:
                    bc:cc:b7:a4:70:ac:d0:23:33:b9:ac:01:8b:79:5a:
                    56:f6:3f:5b:2e:18:4b:cd:78:c4:07:98:ba:bb:fb:
                    51:64:08:c6:96:94:2d:9f:82:0a:a3:fa:0f:17:ad:
                    61:93:09:ad:d0:20:a2:78:9a:45:95:bc:21:70:c1:
                    14:84:c8:c9:1a:d9:cc:ff:61:c8:13:65:53:16:83:
                    d8:ed:9f:61:dc:6a:88:91:d1:a1:ba:13:c4:6e:e7:
                    e4:d2:d2:20:f4:50:26:86:fd:3d:be:5a:eb:a4:a1:
                    62:d5:45:ff:eb:f3:13:98:9d:ce:5c:0f:25:28:ab:
                    89:a5:0a:60:db:9d:fd:24:0b:41:b0:57:30:0d:28:
                    0e:b0:f7:0c:c6:69:62:28:ca:d9:1a:f9:c4:e4:66:
                    ab:58:86:a2:23:2b:3f:b0:2d:bb:e1:f4:38:2b:35:
                    5f:b8:35:a1:44:0a:93:56:dc:13:0a:f0:ef:6a:62:
                    76:b2:a7:19:20:2e:29:5d:73:6e:2e:b8:27:98:88:
                    d8:77:95:91:f5:a0:04:4b:35:c8:2a:a1:35:74:57:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.57.0/24
                  89.106.203.0/24
                IPv6:
                  2a12:b380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210412

    Signature Algorithm: sha256WithRSAEncryption
         85:62:b0:3c:92:76:ea:c6:39:09:b8:62:a0:9c:b2:5a:ad:bc:
         cd:f9:98:4e:b7:c5:d3:d2:8c:d5:74:f7:73:69:bb:51:ae:59:
         7b:fb:f6:11:a4:c3:07:15:b4:db:70:c3:04:06:17:de:82:86:
         2a:ce:fd:7b:21:25:54:c9:4e:43:b0:02:41:85:62:93:e9:07:
         9b:00:c9:dc:cc:26:ef:b6:16:aa:01:36:9c:ff:03:58:20:46:
         e6:2b:2d:57:b9:a5:a6:a4:f3:47:ca:c2:d7:ae:8e:83:31:c0:
         e9:0c:ea:fd:ec:12:bc:c2:0d:26:0f:c4:5b:fd:4e:0d:97:da:
         58:52:f4:47:ca:08:2b:d9:db:70:1b:d1:1b:88:11:9b:17:de:
         b8:be:2e:f8:39:05:f9:4c:61:e3:4f:3c:05:32:2b:d4:4a:03:
         0e:3b:9c:f2:51:4f:1b:fb:eb:ee:bb:d6:44:2b:96:18:06:dc:
         76:7e:ff:ab:2f:5c:a6:27:f9:88:92:6a:20:2f:56:c9:7b:b1:
         2a:7f:4c:ce:be:4f:14:4e:c0:d6:b9:13:c5:8a:33:70:14:1a:
         4a:c1:6e:2c:99:ba:6f:4f:b0:fa:86:13:12:c1:b0:f7:12:2e:
         bf:99:c1:0b:36:ad:bd:d5:a1:c8:fa:f4:d3:4e:c0:ac:73:70:
         ba:fb:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:42 2025 by rpki-client