Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
File:                     UZhWegOeXM4j7pN0CW7tV7u6KY4.cer (raw, json)
Hash identifier:          qVqk1GE615L7y6G6t+HLSdCPN8f4tuorUXXWIWq8/p8=
Subject key identifier:   51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942220199C6B39C0399A094FA8E60A0AA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 41797
                          IP: 193.105.6.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:19:9c:6b:39:c0:39:9a:09:4f:a8:e6:0a:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5198567a039e5cce23ee9374096eed57bbba298e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:9d:ee:29:1b:28:e7:1e:c5:07:b1:11:a9:
                    05:7f:7d:db:b9:e4:f3:db:50:40:df:f6:3b:d3:59:
                    92:b0:ae:ed:f7:e0:9b:60:6c:af:c5:12:bf:dd:c8:
                    f6:d4:f6:87:82:d1:cd:f5:07:f5:13:7a:c5:67:a9:
                    b1:86:39:20:3f:ca:88:74:b1:6d:80:40:d8:e7:a2:
                    3b:57:63:11:bc:8d:53:c1:08:01:bd:66:f5:0c:a8:
                    8c:7a:24:dd:0a:ad:cf:13:39:78:7a:d2:0e:22:50:
                    41:df:47:af:3e:c4:76:8f:8c:df:93:05:09:22:d7:
                    ac:09:31:a2:ea:ca:5f:02:e4:b6:45:8c:92:17:0f:
                    f8:cd:96:f0:64:0a:28:d1:78:75:e0:90:cd:78:04:
                    bc:c0:1d:15:fe:c1:5a:5d:e6:b2:cf:b5:4f:de:7a:
                    a9:a6:98:2f:68:42:7b:2b:a3:10:13:8a:5c:16:39:
                    6f:c8:01:e0:04:02:1b:c0:f9:d3:9c:da:c2:e9:36:
                    a6:aa:f1:c6:98:e4:88:e7:7a:dd:72:46:6f:80:e9:
                    fe:a2:25:23:09:ca:c0:9b:5e:5b:b0:65:88:5f:86:
                    a9:f6:ec:43:ea:1f:8a:85:29:2d:47:b1:e9:3b:c5:
                    cc:02:cc:9a:f8:e1:95:a7:9a:39:0c:b5:69:7c:f9:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.6.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41797

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:09:ae:6c:0b:bf:29:ca:f0:0d:c9:8b:66:79:ae:70:bd:
         6a:1c:33:13:af:19:88:1a:a8:4a:10:a9:9a:0a:71:12:be:6a:
         53:4c:f8:85:81:a9:81:c5:e0:60:a8:a0:cf:0c:d9:18:c3:d0:
         9a:b9:fc:16:0a:7d:cd:5a:7e:6d:21:38:9f:c8:3f:6a:ad:4f:
         7a:2a:1b:bc:af:1c:5e:5f:c7:d9:f0:ec:89:58:cb:74:99:5a:
         da:a3:95:18:bb:03:4c:eb:50:cf:13:5b:4e:78:e2:70:7c:cd:
         12:1b:a0:af:3d:ea:5f:54:e5:90:26:7c:1a:12:9a:0f:61:26:
         95:98:67:3b:ce:4b:60:aa:1b:74:0c:49:5e:fd:c3:24:14:30:
         39:64:eb:dc:96:ed:b5:bd:0a:a9:77:13:55:40:40:46:ce:a7:
         49:90:0b:c4:38:59:35:61:49:ad:cc:cb:e2:b7:09:d5:9b:10:
         7e:d4:78:53:82:ad:a1:b4:ce:98:45:b7:9b:05:8d:aa:30:f2:
         cc:dc:09:6e:17:d2:29:50:7a:16:78:d9:fb:02:49:64:80:eb:
         32:e1:d3:be:d9:9a:1b:0b:b5:c0:80:7c:66:f3:8e:57:d4:68:
         48:84:b2:fd:2e:d8:a9:f3:6d:ad:2c:ed:67:7b:19:e5:4e:e0:
         77:da:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:11 2025 by rpki-client