Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer
File:                     JDPLPigynY7phe1GyEKDubN0CPM.cer (raw, json)
Hash identifier:          hqJKl2zx62xcAuHEQ47k72V2t4j/7zZNg9oDPQ/CoK8=
Subject key identifier:   24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228E2BDEEB807940D30FBA9FC9B2D649
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200949
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:2b:de:eb:80:79:40:d3:0f:ba:9f:c9:b2:d6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:9c:92:69:7e:c5:d5:a4:74:c4:e1:d2:c7:
                    e2:28:0b:e0:65:e2:5b:7d:80:bb:0d:63:b5:14:9d:
                    b2:40:92:68:cc:3c:b9:92:b2:6b:1f:2b:c1:20:23:
                    93:19:d3:12:7c:a3:f1:25:15:48:60:e6:d1:59:59:
                    14:ae:ab:e9:64:9f:88:ba:17:11:36:9a:93:09:1f:
                    b9:a7:83:9f:82:73:15:94:4e:72:79:3e:46:13:7e:
                    83:fa:ac:60:b5:d6:d2:0a:4d:5d:6e:ca:c0:a1:6d:
                    98:32:67:62:48:bc:d8:ca:fa:36:eb:6e:ad:ea:64:
                    3c:ce:d2:6c:05:22:03:93:4e:24:38:aa:5a:df:d3:
                    fd:30:52:54:38:de:de:48:4e:95:fe:b8:33:2b:ef:
                    bc:9b:b9:8a:24:17:f2:55:b2:da:40:36:d0:80:11:
                    54:b8:52:a8:67:e7:ba:7c:57:09:cc:8b:7f:69:05:
                    ab:2d:0b:1e:8d:07:a7:80:50:5d:cb:d6:69:bb:dd:
                    60:83:ce:33:4a:24:77:a9:cb:5e:9d:7f:2c:a6:2b:
                    58:10:85:d5:70:ac:98:13:1c:ea:69:8a:49:2e:a0:
                    1d:a7:7f:eb:89:6a:1c:4c:80:a2:23:fe:ad:e8:62:
                    1d:5d:8b:57:3d:f2:23:a4:5a:9c:a8:98:8f:e1:bf:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200949

    Signature Algorithm: sha256WithRSAEncryption
         49:da:f3:ad:95:1c:97:55:21:14:c6:0f:c4:a6:fd:ca:45:47:
         81:f4:6e:05:aa:59:f1:f5:50:df:69:fb:7e:67:0d:64:b4:b2:
         b7:af:ed:42:11:28:bf:03:3a:1d:92:79:e6:3d:b9:73:ce:84:
         5f:17:53:68:dd:3d:96:f3:c3:bc:85:01:d9:46:ea:82:cf:d3:
         b4:2b:44:de:86:04:7c:06:60:9f:34:ce:0d:2c:a9:ba:96:84:
         7c:e9:70:40:27:65:fa:2e:f0:ea:d7:3d:bc:a2:39:22:97:3d:
         d3:a2:16:3f:84:1c:61:61:88:1f:61:3e:1d:d3:2f:62:50:6e:
         a4:e2:57:d4:48:ae:c6:94:3d:5e:91:d8:ad:d7:ce:fb:2f:63:
         59:29:f4:34:f7:2f:dc:8d:76:9c:e5:c5:0e:25:1e:2f:5a:a2:
         95:a3:a5:6d:aa:23:e6:8f:d5:94:94:50:76:bb:7d:f5:d1:e2:
         d9:c2:f4:c0:ee:8e:5c:a6:07:29:d1:b9:a7:4a:57:a9:99:fb:
         d3:2f:ca:58:4a:ec:5f:f4:c4:98:fc:a7:50:42:c8:4a:7a:8b:
         34:09:55:48:cc:8b:82:a6:69:4c:51:75:95:30:2b:45:a3:17:
         24:ff:ce:e7:ba:82:92:38:05:41:1b:f8:23:01:a2:d2:86:a2:
         e2:b4:25:8d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQijive64B5QNMPup/JstZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDMzY2IzZTI4MzI5ZDhlZTk4NWVkNDZjODQyODNiOWIzNzQwOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qSckml+xdWkdMTh0sfiKAvgZeJb
fYC7DWO1FJ2yQJJozDy5krJrHyvBICOTGdMSfKPxJRVIYObRWVkUrqvpZJ+IuhcR
NpqTCR+5p4OfgnMVlE5yeT5GE36D+qxgtdbSCk1dbsrAoW2YMmdiSLzYyvo2626t
6mQ8ztJsBSIDk04kOKpa39P9MFJUON7eSE6V/rgzK++8m7mKJBfyVbLaQDbQgBFU
uFKoZ+e6fFcJzIt/aQWrLQsejQengFBdy9Zpu91gg84zSiR3qctenX8spitYEIXV
cKyYExzqaYpJLqAdp3/riWocTICiI/6t6GIdXYtXPfIjpFqcqJiP4b8dzQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCQzyz4oMp2O6YXtRshCg7mzdAjzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzVlYjNj
Mi00ZjhiLTQ4NDUtYTc2MC02Nzk1MjRiODA2MzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNWViM2My
LTRmOGItNDg0NS1hNzYwLTY3OTUyNGI4MDYzMS8xL0pEUExQaWd5blk3cGhlMUd5
RUtEdWJOMENQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQ9TANBgkqhkiG9w0BAQsFAAOCAQEASdrzrZUcl1Uh
FMYPxKb9ykVHgfRuBapZ8fVQ32n7fmcNZLSyt6/tQhEovwM6HZJ55j25c86EXxdT
aN09lvPDvIUB2Ubqgs/TtCtE3oYEfAZgnzTODSypupaEfOlwQCdl+i7w6tc9vKI5
Ipc906IWP4QcYWGIH2E+HdMvYlBupOJX1EiuxpQ9XpHYrdfO+y9jWSn0NPcv3I12
nOXFDiUeL1qilaOlbaoj5o/VlJRQdrt99dHi2cL0wO6OXKYHKdG5p0pXqZn70y/K
WErsX/TEmPynUELISnqLNAlVSMyLgqZpTFF1lTArRaMXJP/O57qCkjgFQRv4IwGi
0oai4rQljQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:58 2025 by rpki-client