Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
File:                     TeHTcc2fJqEftklGZ0wxl198Lt8.cer (raw, json)
Hash identifier:          yTuZ+b2cneUGKHIkkCcby+p2ExPfShFeZha3A+Llc64=
Subject key identifier:   4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019421B1C8CC59D76673162E8E4E7827BC25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 11:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205057
                          IP: 185.231.92.0/22
                          IP: 2a0c:4f00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:c8:cc:59:d7:66:73:16:2e:8e:4e:78:27:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:48:c5:33:c9:b8:db:ab:f2:2c:24:66:16:
                    a9:e4:db:4b:71:be:88:36:21:e3:c4:e7:2c:f2:fe:
                    12:a5:12:a0:e4:14:ac:7d:66:ef:99:ca:ac:31:11:
                    ff:17:55:a9:7d:d2:b1:15:14:19:fe:28:df:9f:79:
                    b9:88:54:25:8f:c2:45:0e:c4:62:26:ab:bf:4f:f5:
                    a7:8a:ab:91:1f:ff:ed:af:9f:33:8d:e5:bf:ac:87:
                    a0:b6:f2:1e:75:2f:39:3f:43:61:32:91:bd:53:0d:
                    eb:f3:28:76:79:12:07:42:d9:19:1e:4b:38:b6:a2:
                    f2:92:3d:9d:ba:02:73:3a:a5:56:9a:e6:0d:0f:31:
                    5e:cd:9e:0d:d6:ea:18:77:f5:13:23:d5:17:d9:b8:
                    97:b4:5b:66:27:4c:43:60:2b:5f:ab:1e:b9:b2:32:
                    6c:62:01:57:7f:62:35:0c:af:93:d2:eb:50:ed:c4:
                    1f:ec:21:5c:3c:bc:40:c7:05:4d:42:f7:02:8e:2a:
                    bf:78:a3:74:23:42:a4:61:3d:bc:60:3e:85:30:0c:
                    6f:1f:f4:97:a1:9d:8a:c4:22:79:dd:27:27:88:39:
                    0e:1c:90:19:33:67:8f:d3:e0:c2:de:bc:d7:57:7c:
                    ba:6c:54:88:1e:0c:1e:60:3d:fb:3b:c2:8b:38:3e:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.92.0/22
                IPv6:
                  2a0c:4f00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205057

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:d3:3b:98:07:6f:a0:86:81:c7:76:76:a8:ab:8c:32:f7:
         de:5b:b0:e8:dc:20:71:ec:e1:86:03:e0:a1:8e:32:49:a4:63:
         48:62:1e:92:b6:3b:cd:7d:a6:5d:13:c7:e1:35:3b:e3:24:c2:
         19:38:5f:d7:c7:3e:f6:a7:60:7c:b5:3c:ac:fd:46:02:73:02:
         ef:3c:2f:76:c7:38:18:65:17:d6:6b:cd:5b:6a:4e:18:de:67:
         90:b0:0b:3f:4e:38:6c:85:34:a4:3c:4d:92:f7:ab:80:74:69:
         a4:18:43:a4:51:49:b9:4c:8e:27:23:56:5d:18:9c:be:fb:04:
         0a:73:5e:51:dd:08:ca:5d:7f:ac:b6:2d:4f:cc:67:88:bf:5a:
         6e:f5:ff:fa:5f:eb:df:bc:68:7a:e4:64:4f:d9:f8:52:2d:3d:
         c0:46:67:57:23:0d:c1:0d:5f:85:3e:c7:70:e8:c2:84:2e:45:
         6c:56:cb:a3:d7:ed:1f:d3:e8:d4:49:7d:2e:06:a8:b5:34:98:
         c7:1f:cc:c4:41:28:34:07:ab:40:6a:a7:99:ee:f3:71:9b:0f:
         5f:62:06:11:75:40:1f:b8:fc:50:54:e6:2c:14:7a:34:28:b4:
         f3:a6:bd:f5:a9:fe:0a:16:e8:ef:84:fa:5b:65:9b:c9:6c:91:
         93:59:c6:9a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhscjMWddmcxYujk54J7wlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGUxZDM3MWNkOWYyNmExMWZiNjQ5NDY2NzRjMzE5NzVmN2MyZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRIxTPJuNur8iwkZhap5NtLcb6I
NiHjxOcs8v4SpRKg5BSsfWbvmcqsMRH/F1WpfdKxFRQZ/ijfn3m5iFQlj8JFDsRi
Jqu/T/WniquRH//tr58zjeW/rIegtvIedS85P0NhMpG9Uw3r8yh2eRIHQtkZHks4
tqLykj2dugJzOqVWmuYNDzFezZ4N1uoYd/UTI9UX2biXtFtmJ0xDYCtfqx65sjJs
YgFXf2I1DK+T0utQ7cQf7CFcPLxAxwVNQvcCjiq/eKN0I0KkYT28YD6FMAxvH/SX
oZ2KxCJ53ScniDkOHJAZM2eP0+DC3rzXV3y6bFSIHgweYD37O8KLOD5PswIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFE3h03HNnyahH7ZJRmdMMZdffC7fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzA2MWYy
My00ZmI4LTQ2MzYtYjg3NC01ZTQyYTNmNjZmMzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMDYxZjIz
LTRmYjgtNDYzNi1iODc0LTVlNDJhM2Y2NmYzMi8xL1RlSFRjYzJmSnFFZnRrbEda
MHd4bDE5OEx0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuedcMA0EAgACMAcDBQMqDE8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMhATANBgkqhkiG9w0BAQsFAAOCAQEArJHTO5gHb6CG
gcd2dqirjDL33luw6NwgcezhhgPgoY4ySaRjSGIekrY7zX2mXRPH4TU74yTCGThf
18c+9qdgfLU8rP1GAnMC7zwvdsc4GGUX1mvNW2pOGN5nkLALP044bIU0pDxNkver
gHRppBhDpFFJuUyOJyNWXRicvvsECnNeUd0Iyl1/rLYtT8xniL9abvX/+l/r37xo
euRkT9n4Ui09wEZnVyMNwQ1fhT7HcOjChC5FbFbLo9ftH9Po1El9LgaotTSYxx/M
xEEoNAerQGqnme7zcZsPX2IGEXVAH7j8UFTmLBR6NCi086a99an+Chbo74T6W2Wb
yWyRk1nGmg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:49 2025 by rpki-client