Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
File:                     GGr6K4fO01gj1aLMCghE56FRa_M.cer (raw, json)
Hash identifier:          jIEACzabq2UXyzZYtkDLveSSe2Qf4TYdt0APEd46J7s=
Subject key identifier:   18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420D656801087053B113CD97C3974D988
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 07:48:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207485
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:56:80:10:87:05:3b:11:3c:d9:7c:39:74:d9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:cc:8d:86:7e:02:ba:03:40:8c:3d:5d:e8:
                    bd:ac:af:12:7f:d9:91:7d:30:2d:a1:7e:e4:ea:9e:
                    bd:54:46:9a:93:c6:e5:bc:77:f0:87:eb:6a:82:da:
                    24:d6:dc:71:16:5c:b7:fd:f5:ed:63:ca:cf:d1:f1:
                    7a:fe:ab:3b:42:70:7a:36:79:3f:58:8f:8f:fc:40:
                    91:c8:6d:b5:36:63:01:ca:6a:ee:1f:50:ba:27:33:
                    c5:70:a5:fd:eb:6a:86:06:36:e7:c3:19:be:7c:d4:
                    55:58:43:5c:ad:28:80:d4:92:78:9a:69:c6:d3:a9:
                    84:38:97:91:1b:d4:07:7e:ad:1d:7f:e2:60:f6:86:
                    71:bc:93:5b:9b:71:c4:79:6d:04:d3:19:54:8a:df:
                    d7:0e:8b:2b:84:c3:69:1d:2f:33:76:82:54:02:6a:
                    4b:8e:63:5c:32:14:38:f5:52:4c:22:71:68:73:bb:
                    16:7c:d9:06:cc:ea:72:5d:5f:28:df:05:ab:90:8d:
                    11:f2:df:82:15:22:ba:21:50:93:2b:20:0f:94:7b:
                    a0:41:30:f3:ff:65:b6:1a:23:47:0d:f3:d4:b0:a0:
                    e8:5b:c6:33:b5:80:e4:ad:03:ca:a9:92:b1:9f:4c:
                    79:75:a6:38:f9:a1:9a:18:f5:86:a7:34:78:d2:82:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207485

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:11:b9:bc:eb:41:f9:cb:22:64:79:74:d8:e8:cb:f3:7d:
         ca:9c:fc:08:be:8e:7f:ae:ad:4a:b6:07:9c:23:b2:e8:bc:c3:
         0e:48:50:eb:85:4c:9f:7b:1f:73:7f:30:30:46:1c:fc:2c:06:
         e6:21:44:e5:a5:15:3d:8e:89:f4:b1:d0:71:79:44:8c:e4:d4:
         4c:a2:4a:00:00:0e:b9:1b:6a:0f:8f:ca:9c:42:78:3b:b1:ef:
         d0:64:38:b5:1d:51:bd:56:4c:d3:db:e9:88:ae:d3:ef:12:99:
         0b:7b:e9:01:be:39:f0:2e:d7:02:f3:df:f1:69:86:70:4e:94:
         bd:4e:d2:d5:3f:de:4d:5a:25:1c:0e:18:2c:83:4e:04:63:72:
         e2:6a:e9:e6:50:44:06:5d:30:f0:18:0e:06:97:7c:35:7a:43:
         23:fd:74:a4:2f:53:d0:a3:51:a1:34:fe:75:55:dd:c8:94:e2:
         dd:11:3d:81:f2:5e:75:ca:7b:0a:d4:da:21:52:a6:8a:7f:7c:
         54:14:88:70:f6:44:1c:3e:66:8a:27:6e:8d:a7:21:02:9b:12:
         5f:52:ad:ae:f2:5f:da:f3:c7:7b:0b:6f:e9:80:4a:25:a3:f2:
         80:0b:5b:a5:56:35:6d:77:fb:ae:71:70:d8:a3:bd:73:7c:63:
         ac:8d:85:76
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1laAEIcFOxE82Xw5dNmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODZhZmEyYjg3Y2VkMzU4MjNkNWEyY2MwYTA4NDRlN2ExNTE2YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCXMjYZ+AroDQIw9Xei9rK8Sf9mR
fTAtoX7k6p69VEaak8blvHfwh+tqgtok1txxFly3/fXtY8rP0fF6/qs7QnB6Nnk/
WI+P/ECRyG21NmMBymruH1C6JzPFcKX962qGBjbnwxm+fNRVWENcrSiA1JJ4mmnG
06mEOJeRG9QHfq0df+Jg9oZxvJNbm3HEeW0E0xlUit/XDosrhMNpHS8zdoJUAmpL
jmNcMhQ49VJMInFoc7sWfNkGzOpyXV8o3wWrkI0R8t+CFSK6IVCTKyAPlHugQTDz
/2W2GiNHDfPUsKDoW8YztYDkrQPKqZKxn0x5daY4+aGaGPWGpzR40oLX5QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBhq+iuHztNYI9WizAoIROehUWvzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2VmYjEz
Yi01ZGJjLTQxMWItYjIzOC02NTVkNTM2OThmZGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZWZiMTNi
LTVkYmMtNDExYi1iMjM4LTY1NWQ1MzY5OGZkYS8xL0dHcjZLNGZPMDFnajFhTE1D
Z2hFNTZGUmFfTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMqfTANBgkqhkiG9w0BAQsFAAOCAQEAfDIRubzrQfnL
ImR5dNjoy/N9ypz8CL6Of66tSrYHnCOy6LzDDkhQ64VMn3sfc38wMEYc/CwG5iFE
5aUVPY6J9LHQcXlEjOTUTKJKAAAOuRtqD4/KnEJ4O7Hv0GQ4tR1RvVZM09vpiK7T
7xKZC3vpAb458C7XAvPf8WmGcE6UvU7S1T/eTVolHA4YLINOBGNy4mrp5lBEBl0w
8BgOBpd8NXpDI/10pC9T0KNRoTT+dVXdyJTi3RE9gfJedcp7CtTaIVKmin98VBSI
cPZEHD5miidujachApsSX1KtrvJf2vPHewtv6YBKJaPygAtbpVY1bXf7rnFw2KO9
c3xjrI2Fdg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:47 2025 by rpki-client