Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
File:                     IS6vWaK_88qxGHEYlEeLue_5O4U.cer (raw, json)
Hash identifier:          ssxBzOec1IPrrDgQLsEwIOYZlkChurJb8fN7QStfwHU=
Subject key identifier:   21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067E0BC9F16DC9A98116E1E78FCE65C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 24958
                          IP: 37.200.112.0/21
                          IP: 93.91.16.0/20
                          IP: 109.73.112.0/20
                          IP: 176.65.64.0/21
                          IP: 185.10.12.0/22
                          IP: 213.129.64.0/19
                          IP: 2a00:1430::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:e0:bc:9f:16:dc:9a:98:11:6e:1e:78:fc:e6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:6d:4d:f4:a0:23:26:07:61:5f:60:06:90:
                    0f:10:59:79:91:c5:17:29:19:8b:8d:ee:4e:90:5c:
                    31:1a:2b:cd:62:0c:2e:1c:12:c2:71:bf:fb:a9:0d:
                    e5:31:01:3e:2f:3e:4b:81:f5:d4:0c:f9:5f:d5:2e:
                    72:5b:1b:13:7a:af:12:64:ab:e1:4f:f2:ae:ea:53:
                    20:00:21:d6:d9:25:1b:25:6b:21:39:69:cd:d2:7b:
                    84:ac:b6:5a:a5:83:fe:2f:fa:f1:97:3b:f2:c0:5b:
                    bc:76:b4:4b:22:0e:b1:97:c1:f0:5b:0b:53:69:76:
                    ff:30:6a:a5:91:64:dc:25:26:fb:02:b9:8f:43:82:
                    6e:1f:ee:52:f2:ae:89:e8:cf:32:30:de:48:de:fb:
                    62:50:96:05:1d:eb:1a:f1:80:d0:46:74:1b:b9:fa:
                    e7:4d:9a:6d:bb:46:14:f8:c6:6c:21:22:9f:c2:6d:
                    a4:86:da:b0:41:23:03:16:40:59:80:e0:d8:2e:53:
                    46:11:4c:2b:a8:0c:eb:8f:8a:6b:02:48:52:c2:4f:
                    1e:2f:13:4d:03:13:1e:84:e5:41:39:aa:f6:ec:6b:
                    b7:40:cb:e3:ed:52:26:91:b8:0c:56:00:b8:46:10:
                    92:ed:12:e1:51:75:03:bc:5c:26:08:b6:7c:3f:b2:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.200.112.0/21
                  93.91.16.0/20
                  109.73.112.0/20
                  176.65.64.0/21
                  185.10.12.0/22
                  213.129.64.0/19
                IPv6:
                  2a00:1430::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24958

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:c6:5f:11:20:79:0e:de:e7:74:9e:e3:06:6e:a0:c1:fd:
         6e:d2:34:14:e0:85:32:33:ea:37:f7:ac:ad:e4:a4:6b:2b:f6:
         2c:16:69:d9:66:37:c5:ec:06:a3:78:44:dc:1a:27:88:64:f4:
         fc:38:b4:9e:71:e5:d9:59:db:76:ab:be:98:f4:be:ff:03:38:
         28:1c:40:7b:77:18:c8:d1:b5:3c:ea:16:aa:c4:df:e3:a7:fe:
         db:6a:ea:a7:dd:9f:88:dc:52:0f:3a:59:8e:de:a6:52:d1:2e:
         3c:60:66:df:95:13:01:82:29:04:ce:f3:02:1c:17:d2:fa:7a:
         c1:9b:05:23:dc:8c:0e:b4:aa:89:b1:e0:90:00:55:bd:55:a8:
         21:2b:11:90:4d:ee:88:a4:21:6b:e2:8d:da:75:3f:ca:8e:4d:
         e4:2a:3c:ac:c0:3a:45:a9:8f:b1:55:77:df:a3:2f:bf:b7:16:
         57:9d:9e:21:67:84:24:70:0c:b2:68:a9:c5:d7:04:6d:04:c3:
         4f:b4:19:ab:51:c4:28:c4:6e:83:24:26:d1:0e:b8:b8:31:4d:
         8d:41:61:51:87:a2:43:70:71:b0:96:d3:57:c6:0d:4a:ee:10:
         db:4a:ea:64:28:fe:f5:b2:cd:81:41:71:a3:ec:31:85:ae:fb:
         4a:1b:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:56 2025 by rpki-client