Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
File:                     UYje2s3CQLSy94bxI0LgqD2K6A8.cer (raw, json)
Hash identifier:          zSelwzWzfmmaEwe1MgyMtbcpt5L3atL2ePUe8RslHWE=
Subject key identifier:   51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C2A6361FE336C74EB70D8B2D3EDE0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:47:47 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208366
                          IP: 45.142.220.0/22
                          IP: 2a0e:dbc0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:2a:63:61:fe:33:6c:74:eb:70:d8:b2:d3:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:47:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:cd:97:54:50:ac:63:03:22:d9:68:55:f8:
                    8c:9c:59:f6:c8:3e:83:f5:5c:16:b6:c1:55:c4:e9:
                    74:95:42:91:c8:01:0e:35:06:3f:8d:89:3a:17:34:
                    20:03:ac:ce:7c:04:8e:b4:39:3d:86:47:35:cd:a7:
                    f6:9f:5b:de:6b:e2:f9:a6:e7:b4:b1:c3:e9:61:f6:
                    4f:5e:e2:9a:8a:ab:69:03:04:98:77:35:93:e2:89:
                    7b:04:e9:51:a2:31:46:91:e1:36:75:e0:cd:8e:2b:
                    70:61:33:df:03:ab:96:5b:20:7d:7d:d7:24:fb:0a:
                    7d:bd:b4:c4:b5:58:0d:c0:16:8e:23:a8:49:c1:fc:
                    a0:ea:51:55:66:8d:af:3c:98:43:95:a4:b2:8a:5b:
                    9f:dc:e0:a4:f2:6e:f1:ea:de:a5:03:81:7f:c8:ff:
                    e2:ea:31:2e:fa:d6:32:61:1c:de:18:c2:b1:03:6c:
                    fa:09:5c:19:95:be:e5:af:6a:18:d1:6a:8c:02:a9:
                    57:ae:be:bb:f5:ed:bd:62:a0:5a:8b:45:e5:38:e1:
                    31:5f:69:dc:67:1b:d0:df:a2:ef:14:55:14:92:08:
                    3b:d6:ef:25:77:21:54:ac:5a:53:6c:6b:1e:01:89:
                    57:0f:8e:66:a4:89:25:b8:23:4f:2b:07:3e:93:b2:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.220.0/22
                IPv6:
                  2a0e:dbc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208366

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:a1:4e:0b:f7:3d:20:85:fe:c2:a5:a4:50:e8:d4:0e:d5:
         7b:e5:83:4a:a8:8b:df:06:28:ab:84:08:bd:83:77:9f:09:2f:
         55:29:6d:a4:75:68:0b:d1:ae:fe:f2:17:2e:8a:0c:88:a3:b0:
         be:76:94:cb:86:94:cb:8c:31:fe:7e:f8:e6:7c:9d:05:75:38:
         f7:b6:8d:dd:3c:a5:d4:9a:9c:be:2a:ca:b8:ab:e0:22:75:31:
         ed:19:be:15:6d:a2:c5:4b:9d:29:9c:5a:5a:59:e0:e6:ff:bc:
         15:bf:50:9f:00:06:1c:28:b5:a3:c7:84:9c:b2:fc:65:33:b0:
         a4:fb:ec:25:41:c8:1c:a7:70:fc:be:c1:63:32:28:63:05:e6:
         64:4b:82:35:6a:27:15:50:a2:5d:ba:13:12:75:4d:5c:7b:b9:
         5e:90:cd:11:7a:c3:00:d1:c3:23:cb:63:03:b3:88:f4:9a:9b:
         a4:da:c9:8d:14:97:db:8f:56:08:79:f6:a7:71:37:2c:5f:ba:
         47:a1:01:cb:82:9f:45:69:c0:40:2f:b2:f8:d4:88:06:d3:1c:
         67:3d:24:ec:f0:1a:46:38:be:6d:6b:7f:69:e3:ea:ea:71:c1:
         e9:58:19:67:30:21:ac:65:17:c7:6f:c4:d5:f4:35:e1:95:ea:
         d7:05:58:04
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjCpjYf4zbHTrcNiy0+3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg4ZGVkYWNkYzI0MGI0YjJmNzg2ZjEyMzQyZTBhODNkOGFlODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrbNl1RQrGMDItloVfiMnFn2yD6D
9VwWtsFVxOl0lUKRyAEONQY/jYk6FzQgA6zOfASOtDk9hkc1zaf2n1vea+L5pue0
scPpYfZPXuKaiqtpAwSYdzWT4ol7BOlRojFGkeE2deDNjitwYTPfA6uWWyB9fdck
+wp9vbTEtVgNwBaOI6hJwfyg6lFVZo2vPJhDlaSyiluf3OCk8m7x6t6lA4F/yP/i
6jEu+tYyYRzeGMKxA2z6CVwZlb7lr2oY0WqMAqlXrr679e29YqBai0XlOOExX2nc
ZxvQ36LvFFUUkgg71u8ldyFUrFpTbGseAYlXD45mpIkluCNPKwc+k7Lp2wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFGI3trNwkC0sveG8SNC4Kg9iugPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzFmYWEz
ZS04ODRjLTQ0NWYtODQ1ZC03OWIzZGI2NTlkZmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMWZhYTNl
LTg4NGMtNDQ1Zi04NDVkLTc5YjNkYjY1OWRmYy8xL1VZamUyczNDUUxTeTk0YnhJ
MExncUQySzZBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLY7cMA0EAgACMAcDBQMqDtvAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMt7jANBgkqhkiG9w0BAQsFAAOCAQEAiMShTgv3PSCF
/sKlpFDo1A7Ve+WDSqiL3wYoq4QIvYN3nwkvVSltpHVoC9Gu/vIXLooMiKOwvnaU
y4aUy4wx/n745nydBXU497aN3Tyl1JqcvirKuKvgInUx7Rm+FW2ixUudKZxaWlng
5v+8Fb9QnwAGHCi1o8eEnLL8ZTOwpPvsJUHIHKdw/L7BYzIoYwXmZEuCNWonFVCi
XboTEnVNXHu5XpDNEXrDANHDI8tjA7OI9JqbpNrJjRSX249WCHn2p3E3LF+6R6EB
y4KfRWnAQC+y+NSIBtMcZz0k7PAaRji+bWt/aePq6nHB6VgZZzAhrGUXx2/E1fQ1
4ZXq1wVYBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:54 2025 by rpki-client