Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
File:                     UNpYj16aHCr1a-CPfmosmYGrYCY.cer (raw, json)
Hash identifier:          xoQF8j+v7x9rxAWiqUa3Olbp95ma8byslkHoNQzo0Mk=
Subject key identifier:   50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BDCA8302D7CF32EEF75509F837B04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:50 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 12962
                          IP: 193.178.166.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:dc:a8:30:2d:7c:f3:2e:ef:75:50:9f:83:7b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:2c:36:4f:e2:fe:cd:7b:77:5e:ce:1c:d1:
                    7f:51:a8:fb:d9:2f:b7:d1:39:de:c4:86:51:bf:a4:
                    b6:c4:12:29:5c:23:67:89:c7:14:2a:1c:c2:23:7b:
                    ba:8d:11:77:10:b2:44:ac:04:45:c1:58:34:1a:56:
                    f6:51:c6:b7:bd:fd:ed:f7:f0:00:ec:5a:ad:dd:48:
                    e0:0e:48:79:e5:6a:d3:73:21:42:8e:01:74:da:4d:
                    b0:f9:26:67:15:56:45:40:d0:49:8b:f0:48:1f:b9:
                    7d:ff:0b:e3:3a:2e:35:9c:31:e3:50:15:8d:7c:6e:
                    c7:a3:4b:63:07:8b:5d:f9:4e:2a:ff:22:3c:24:24:
                    dc:01:85:40:b6:11:e0:d0:ac:3e:9e:35:59:eb:38:
                    cc:e3:93:67:db:bf:c1:a1:d5:ca:02:3e:4c:cb:6c:
                    e5:88:ec:72:54:a1:67:d8:04:f3:2d:ce:7d:8d:94:
                    da:a2:b5:d7:4f:9a:0b:73:ce:5d:df:10:94:40:e8:
                    dd:23:f5:3d:9e:31:34:8d:1f:6c:37:5d:f8:fd:dc:
                    22:6e:51:64:16:b5:14:be:af:6d:62:a6:47:69:1e:
                    b0:fa:9d:6f:1f:aa:8a:48:df:55:79:fe:4a:da:8c:
                    0f:f9:47:f1:60:f4:cc:75:06:93:c1:08:84:b8:12:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.166.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12962

    Signature Algorithm: sha256WithRSAEncryption
         16:58:43:41:79:44:f4:67:1b:c5:9c:41:4f:eb:3c:57:4e:cc:
         cf:2f:50:90:6b:7a:08:56:28:c2:89:f0:80:a0:e0:b4:bf:3c:
         3b:c7:4a:f4:9e:fe:b8:7f:74:d5:b2:b7:c3:d1:db:ac:50:09:
         b4:54:37:d9:65:ad:61:1a:7e:7b:9a:10:84:ea:bf:f9:47:59:
         82:4e:01:8e:64:18:4e:50:46:31:82:ee:55:11:91:df:d8:dd:
         ed:5a:fe:04:42:e1:2c:56:e6:8c:05:63:0c:f7:99:00:79:ee:
         e5:c3:c3:2d:d4:86:63:55:ee:f7:d0:03:fb:26:ff:31:b6:ec:
         7c:77:f8:df:a6:38:d4:b2:7f:c6:1e:a1:0d:fd:c3:b2:52:15:
         3a:7c:8d:4e:32:89:2e:a4:3a:d0:f5:35:c9:33:18:7e:1b:e4:
         ed:2b:d5:c4:99:45:6d:ce:29:e6:e0:04:ed:06:37:0e:96:dd:
         aa:5b:e1:a7:2f:e3:22:12:19:e5:e5:2d:a6:21:69:44:bc:07:
         d8:4c:db:c1:11:72:b8:93:87:91:b5:1b:39:58:8a:b6:51:e0:
         6c:f8:59:f3:6f:87:08:c0:f2:ad:93:e7:43:93:22:66:fc:0c:
         d0:1b:09:5b:01:20:2a:c9:15:fa:b0:47:6f:f8:e3:3d:b5:98:
         22:0b:56:72
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQma9yoMC188y7vdVCfg3sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGRhNTg4ZjVlOWExYzJhZjU2YmUwOGY3ZTZhMmM5OTgxYWI2MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuUsNk/i/s17d17OHNF/Uaj72S+3
0TnexIZRv6S2xBIpXCNniccUKhzCI3u6jRF3ELJErARFwVg0Glb2Uca3vf3t9/AA
7Fqt3UjgDkh55WrTcyFCjgF02k2w+SZnFVZFQNBJi/BIH7l9/wvjOi41nDHjUBWN
fG7Ho0tjB4td+U4q/yI8JCTcAYVAthHg0Kw+njVZ6zjM45Nn27/BodXKAj5My2zl
iOxyVKFn2ATzLc59jZTaorXXT5oLc85d3xCUQOjdI/U9njE0jR9sN134/dwiblFk
FrUUvq9tYqZHaR6w+p1vH6qKSN9Vef5K2owP+UfxYPTMdQaTwQiEuBKF1wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFFDaWI9emhwq9Wvgj35qLJmBq2AmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3LzczMWI0
Yy04Y2E4LTQ5N2ItOGEyYi00M2MxYzYxZDAyZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvNzMxYjRj
LThjYTgtNDk3Yi04YTJiLTQzYzFjNjFkMDJlYi8xL1VOcFlqMTZhSENyMWEtQ1Bm
bW9zbVlHcllDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwbKmMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjKiMA0GCSqGSIb3DQEBCwUAA4IBAQAWWENBeUT0ZxvFnEFP6zxXTszPL1CQa3oI
VijCifCAoOC0vzw7x0r0nv64f3TVsrfD0dusUAm0VDfZZa1hGn57mhCE6r/5R1mC
TgGOZBhOUEYxgu5VEZHf2N3tWv4EQuEsVuaMBWMM95kAee7lw8Mt1IZjVe730AP7
Jv8xtux8d/jfpjjUsn/GHqEN/cOyUhU6fI1OMokupDrQ9TXJMxh+G+TtK9XEmUVt
zinm4ATtBjcOlt2qW+GnL+MiEhnl5S2mIWlEvAfYTNvBEXK4k4eRtRs5WIq2UeBs
+Fnzb4cIwPKtk+dDkyJm/AzQGwlbASAqyRX6sEdv+OM9tZgiC1Zy
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:37 2025 by rpki-client