Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
File:                     L8VFWRk_6APSh01pjzQpKPdjKgU.cer (raw, json)
Hash identifier:          izddQGpGUqAOvKd0fM4h+CnNel2f71OaKIj5Y7j++h4=
Subject key identifier:   2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EA7C47687865588417F8412E5C6EF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 48008
                          IP: 91.205.132.0 -- 91.205.143.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:a7:c4:76:87:86:55:88:41:7f:84:12:e5:c6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2fc54559193fe803d2874d698f342928f7632a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:8a:fd:c3:af:e9:9e:48:00:7d:63:38:ce:
                    be:32:fb:ce:c6:de:e9:5a:70:02:8b:52:13:69:5d:
                    59:bf:fd:93:34:78:b2:84:2b:f6:3e:b2:03:99:02:
                    9d:53:31:40:46:f5:d3:bd:15:6b:70:b4:27:b4:cd:
                    e7:e0:8a:bf:e7:5b:de:a2:d0:4f:4f:04:05:c8:9a:
                    4c:8d:b7:52:c4:1f:e8:12:44:5e:28:ce:09:c6:62:
                    aa:65:18:a8:95:d5:48:a6:ad:8e:a7:22:69:81:c1:
                    6e:cd:34:de:25:e7:72:02:f6:24:58:30:85:74:ad:
                    bf:f7:74:bd:ed:7d:89:46:d1:32:6a:48:18:91:30:
                    65:ac:bd:d2:a7:aa:6d:a5:ff:97:bc:27:e1:d8:c5:
                    11:78:ad:4f:a9:f1:2c:4d:54:fa:ab:d7:be:51:a6:
                    69:bc:e4:c9:e8:ab:04:ca:b8:c3:bc:7a:61:ed:73:
                    6a:97:35:aa:87:50:a9:e4:8c:71:6f:17:ed:2c:d8:
                    62:e4:48:af:19:a0:4e:b4:9a:04:9d:08:8d:e9:26:
                    a7:bf:44:39:74:fa:af:0f:dc:7b:66:03:39:88:9b:
                    0f:72:0f:e0:cf:08:1b:f2:ad:8b:ed:f3:42:86:bf:
                    b1:f3:19:ba:91:06:eb:b2:c4:02:76:be:64:4e:c8:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.132.0-91.205.143.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48008

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:30:3b:ed:be:05:a8:b0:ca:85:1e:33:62:54:93:d5:ca:
         ea:c1:06:f8:27:d1:0e:df:ea:9d:23:db:6c:01:4b:73:ef:20:
         c5:e8:ce:5f:e4:3a:8c:5a:b3:fd:5c:08:04:e6:89:53:29:3b:
         cb:9d:ff:1c:1d:c6:b7:2a:26:25:58:7b:58:99:91:cf:9c:f1:
         7f:83:30:9e:0b:82:46:b0:75:4c:2a:a0:12:72:f9:26:e9:75:
         e9:fb:90:a0:94:4b:8e:f1:3e:9c:b7:56:e1:96:b3:36:a0:a9:
         37:d1:5d:83:05:97:8f:64:30:33:e2:49:a8:41:77:1f:e9:30:
         60:d7:fa:a6:6f:38:88:9e:35:cc:f1:57:ec:1b:2a:21:3f:31:
         d8:c5:ae:22:18:55:b3:51:8f:58:11:c3:b2:41:a3:03:18:1f:
         98:bc:02:29:5a:f5:c0:d6:e4:06:dc:e2:3c:52:8b:4f:0b:17:
         9c:41:33:03:46:ee:cd:fb:4c:c3:f7:44:73:44:3b:b8:3f:79:
         b1:b6:e1:05:64:5e:45:e3:ce:44:c7:30:35:aa:ab:86:bf:cd:
         93:ac:53:ff:55:29:46:37:4b:74:3a:30:04:1e:a6:02:b9:83:
         98:74:73:74:d7:54:20:94:16:ee:ce:48:3e:3f:5b:82:a6:db:
         27:89:f0:91
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZQljqfEdoeGVYhBf4QS5cbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmM1NDU1OTE5M2ZlODAzZDI4NzRkNjk4ZjM0MjkyOGY3NjMyYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TaK/cOv6Z5IAH1jOM6+MvvOxt7p
WnACi1ITaV1Zv/2TNHiyhCv2PrIDmQKdUzFARvXTvRVrcLQntM3n4Iq/51veotBP
TwQFyJpMjbdSxB/oEkReKM4JxmKqZRioldVIpq2OpyJpgcFuzTTeJedyAvYkWDCF
dK2/93S97X2JRtEyakgYkTBlrL3Sp6ptpf+XvCfh2MUReK1PqfEsTVT6q9e+UaZp
vOTJ6KsEyrjDvHph7XNqlzWqh1Cp5IxxbxftLNhi5EivGaBOtJoEnQiN6Sanv0Q5
dPqvD9x7ZgM5iJsPcg/gzwgb8q2L7fNChr+x8xm6kQbrssQCdr5kTsic9wIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFC/FRVkZP+gD0odNaY80KSj3YyoFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzA4NDJl
My05MDhkLTQxMWEtOWI2OS1mMjBjYzc5OGNiMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMDg0MmUz
LTkwOGQtNDExYS05YjY5LWYyMGNjNzk4Y2IxZC8xL0w4VkZXUmtfNkFQU2gwMXBq
elFwS1BkaktnVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBAJbzYQDBARbzYAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDALuIMA0GCSqGSIb3DQEBCwUAA4IBAQBudDA77b4FqLDKhR4zYlST
1crqwQb4J9EO3+qdI9tsAUtz7yDF6M5f5DqMWrP9XAgE5olTKTvLnf8cHca3KiYl
WHtYmZHPnPF/gzCeC4JGsHVMKqAScvkm6XXp+5CglEuO8T6ct1bhlrM2oKk30V2D
BZePZDAz4kmoQXcf6TBg1/qmbziInjXM8VfsGyohPzHYxa4iGFWzUY9YEcOyQaMD
GB+YvAIpWvXA1uQG3OI8UotPCxecQTMDRu7N+0zD90RzRDu4P3mxtuEFZF5F485E
xzA1qquGv82TrFP/VSlGN0t0OjAEHqYCuYOYdHN011QglBbuzkg+P1uCptsnifCR
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:55 2025 by rpki-client