Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
File:                     HvyrTe3tZqvvfNftcmV7wDqCKdY.cer (raw, json)
Hash identifier:          hF2WQA0ajTqsMz2AAVbnVQHrdgZMUoz1397Ft4xLByQ=
Subject key identifier:   1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB76535D7CF7A0CB0BD2D81F98B906
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:12 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47180
                          IP: 194.179.140.0/22
                          IP: 2a13:f8c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:76:53:5d:7c:f7:a0:cb:0b:d2:d8:1f:98:b9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:82:0a:7c:4e:0f:e8:c4:ad:18:fd:4d:93:
                    f9:78:60:9c:fa:26:34:6d:99:04:41:04:6c:17:7c:
                    e4:ca:7a:35:61:6a:aa:f9:6f:8d:4d:58:7c:35:41:
                    30:36:b0:23:05:c9:56:36:ef:20:c9:da:ba:28:6e:
                    65:21:c4:39:06:12:ec:24:7a:96:b5:9d:aa:f6:5f:
                    fd:8b:59:19:ed:d6:ce:21:5c:88:bd:77:b8:25:75:
                    c4:fb:0f:0e:17:db:87:a9:2f:f8:1b:7a:52:8c:b4:
                    77:d4:c4:c2:4a:f9:03:d4:32:28:cd:a0:5b:5d:31:
                    d1:1d:ea:cb:52:3d:c0:30:33:39:c0:88:ba:08:d5:
                    af:bd:45:d1:55:19:b4:a8:fb:42:92:92:de:4c:3f:
                    57:49:76:0d:67:6e:b4:9b:93:ee:85:56:4b:27:88:
                    32:88:6a:94:0b:c5:ed:db:9e:07:f6:df:22:22:4e:
                    f2:23:72:6a:6a:0f:13:7e:25:bc:43:32:17:de:ad:
                    57:88:7b:01:d4:8e:a6:c1:40:10:ce:e2:bb:f4:ee:
                    a4:70:85:d1:db:58:2f:de:16:15:85:24:a7:7a:11:
                    07:80:4c:99:09:55:f2:4a:cc:09:9d:1f:d7:1b:21:
                    f3:f4:7b:f7:58:c9:ee:3c:4c:c6:cd:50:b0:ae:b9:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.140.0/22
                IPv6:
                  2a13:f8c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47180

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:52:04:05:bd:30:65:af:27:9e:c2:4e:b9:bd:ca:3e:8f:
         b4:30:87:5b:d3:47:da:73:2d:fd:de:8e:6c:ab:de:ed:dc:b3:
         d3:6f:63:f4:7a:d0:34:95:84:c0:ed:91:25:e4:89:05:de:a9:
         5e:88:44:8d:be:3f:7f:df:be:a0:f6:29:42:32:41:37:10:91:
         f8:41:4c:5a:14:f7:48:e0:36:41:ef:71:f7:f6:53:e7:86:69:
         8c:cf:ca:48:45:cb:ed:14:74:97:05:ef:fa:ce:75:54:8f:99:
         5d:75:2f:9d:4d:0d:f0:ed:e2:fb:c8:7f:c0:98:ba:af:f5:3e:
         1a:76:1b:ea:8f:93:8c:15:9f:c4:04:fe:d0:87:f7:7a:61:51:
         b4:32:bf:33:f1:6f:61:80:bb:e4:a7:9b:85:55:2d:47:51:ed:
         b6:25:15:10:75:7f:43:8e:82:01:ac:b7:2d:d9:f8:56:69:c1:
         97:a9:f4:f7:2d:82:e1:bc:cd:08:43:b9:f5:4a:b1:8a:2a:05:
         1b:cc:30:f6:85:d4:b5:2f:7e:e0:3b:56:f9:d8:24:28:b2:a1:
         ea:25:ab:b4:a1:d0:4e:21:d0:7d:9b:ad:dd:fc:19:4b:5f:de:
         88:05:59:43:a6:ed:9e:aa:b0:db:c5:79:1a:57:a3:e3:9d:0b:
         c2:7e:83:7e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi+3ZTXXz3oMsL0tgfmLkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWZjYWI0ZGVkZWQ2NmFiZWY3Y2Q3ZWQ3MjY1N2JjMDNhODIyOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUiCCnxOD+jErRj9TZP5eGCc+iY0
bZkEQQRsF3zkyno1YWqq+W+NTVh8NUEwNrAjBclWNu8gydq6KG5lIcQ5BhLsJHqW
tZ2q9l/9i1kZ7dbOIVyIvXe4JXXE+w8OF9uHqS/4G3pSjLR31MTCSvkD1DIozaBb
XTHRHerLUj3AMDM5wIi6CNWvvUXRVRm0qPtCkpLeTD9XSXYNZ260m5PuhVZLJ4gy
iGqUC8Xt254H9t8iIk7yI3Jqag8TfiW8QzIX3q1XiHsB1I6mwUAQzuK79O6kcIXR
21gv3hYVhSSnehEHgEyZCVXySswJnR/XGyHz9Hv3WMnuPEzGzVCwrrlotwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFB78q03t7War73zX7XJle8A6ginWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2M3Yzgz
Zi1mYWMyLTQ1NTEtOGY3OC05MWE3N2VhMDVkZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYzdjODNm
LWZhYzItNDU1MS04Zjc4LTkxYTc3ZWEwNWRmMS8xL0h2eXJUZTN0WnF2dmZOZnRj
bVY3d0RxQ0tkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwrOMMA0EAgACMAcDBQMqE/jAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC4TDANBgkqhkiG9w0BAQsFAAOCAQEARbJSBAW9MGWv
J57CTrm9yj6PtDCHW9NH2nMt/d6ObKve7dyz029j9HrQNJWEwO2RJeSJBd6pXohE
jb4/f9++oPYpQjJBNxCR+EFMWhT3SOA2Qe9x9/ZT54ZpjM/KSEXL7RR0lwXv+s51
VI+ZXXUvnU0N8O3i+8h/wJi6r/U+GnYb6o+TjBWfxAT+0If3emFRtDK/M/FvYYC7
5KebhVUtR1HttiUVEHV/Q46CAay3Ldn4VmnBl6n09y2C4bzNCEO59UqxiioFG8ww
9oXUtS9+4DtW+dgkKLKh6iWrtKHQTiHQfZut3fwZS1/eiAVZQ6btnqqw28V5Glej
450Lwn6Dfg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:29 2025 by rpki-client