Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
File:                     GcplSdJk-JmK6KjbvWWpZFBIlqs.cer (raw, json)
Hash identifier:          JeB5JLl3gF/q3B858A/msIjpaxFJK6byfBq5KeM0jwA=
Subject key identifier:   19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266AED79B078AD85F246C9D218C8797D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209050
                          IP: 5.183.216.0/22
                          IP: 2a0e:a600::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:ed:79:b0:78:ad:85:f2:46:c9:d2:18:c8:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:f7:4a:17:f6:0a:1d:4e:aa:fb:37:d0:ac:
                    ab:63:b4:a6:de:0e:0d:e3:a7:d1:ae:fe:92:a3:0e:
                    f9:40:8b:b1:c3:9c:f8:41:4c:45:22:8c:09:4c:05:
                    9e:cf:6c:18:61:0a:ea:3a:4b:18:2f:fd:81:21:bb:
                    1c:8a:11:b4:11:9a:a5:da:9e:be:d2:69:40:c0:e2:
                    3a:dd:94:72:a1:5d:90:b3:b2:38:e8:26:cb:8a:c2:
                    42:ab:20:c8:0c:07:e7:47:96:2b:a8:00:b2:e5:06:
                    7e:4b:ad:69:82:4c:46:e3:af:b8:e2:17:71:0d:a7:
                    e5:c7:5a:57:b0:13:72:3e:db:91:a0:51:88:fe:74:
                    b0:6f:c3:de:8e:d2:2f:ce:61:6c:d6:3f:ee:48:e8:
                    31:fc:19:7b:99:ad:68:04:93:0d:7e:05:7e:63:c1:
                    c8:fd:0e:ba:55:95:78:d7:11:aa:6c:0f:47:54:c1:
                    ac:3e:96:c6:58:16:db:68:36:4d:aa:aa:e9:3d:6c:
                    a1:07:4d:b5:98:54:72:51:51:56:48:69:88:e2:bc:
                    74:92:44:f8:75:cb:57:b7:bc:bd:da:54:9c:7c:98:
                    4b:e6:c1:11:a1:40:98:1b:f8:da:33:35:86:54:ee:
                    38:29:41:34:8a:ee:5c:9c:8c:af:25:2c:5a:41:92:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.216.0/22
                IPv6:
                  2a0e:a600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209050

    Signature Algorithm: sha256WithRSAEncryption
         78:11:d3:0c:24:8d:c4:ad:1a:7f:39:ae:3a:7b:dd:ab:fb:46:
         06:c7:71:2d:c7:74:ed:b8:7d:1b:6d:86:65:ff:70:59:09:f2:
         b3:26:96:91:65:d7:f4:f4:c3:42:65:a7:da:1b:c5:ea:e3:03:
         e1:5f:70:09:05:de:5a:ea:8c:9e:87:29:bf:92:c9:ae:63:dc:
         73:a4:23:1f:83:88:01:65:93:8c:e7:38:08:75:56:fa:b5:9b:
         20:e3:7c:20:f2:0e:a7:72:50:f1:3e:3d:09:39:f6:dd:19:c9:
         23:5f:02:fa:24:ec:2d:9f:75:2d:95:01:10:df:d3:28:88:07:
         18:31:b0:d8:bf:a7:ef:b6:a0:f2:98:c9:e6:3e:e1:2c:41:42:
         85:30:96:0e:94:2f:3a:06:b2:17:d9:24:8e:3a:1a:b5:85:9f:
         7d:f2:42:81:c7:48:38:a6:30:f4:1d:3f:f0:f3:85:0d:a4:f1:
         6e:71:d9:16:4f:5e:c2:15:98:e5:31:93:38:05:e1:bd:c3:82:
         97:b7:5d:6f:c9:55:ac:3b:15:1e:b6:17:f1:90:20:1a:64:27:
         2f:b1:1a:20:ab:18:d2:69:11:dd:17:46:0f:5d:da:92:fb:35:
         26:18:02:fe:6c:1c:e6:72:e2:eb:c3:5d:10:6f:9c:b3:21:f4:
         03:2c:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:22 2025 by rpki-client