Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
File:                     VQt8DIuuYQ9-UZwEhaR3O860jas.cer (raw, json)
Hash identifier:          9+XHCNlKLsqWJQJfgJKyAgGsQRuHRkSCYB6sq2iDvgs=
Subject key identifier:   55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427487D3554476321BE380ACA29E7C05F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:49 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34619
                          IP: 37.148.208.0/21
                          IP: 80.253.240.0/22
                          IP: 85.159.64.0/21
                          IP: 89.19.0.0/19
                          IP: 94.73.128.0/18
                          IP: 185.22.184.0/22
                          IP: 2a02:2020::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:7d:35:54:47:63:21:be:38:0a:ca:29:e7:c0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:bf:1c:d2:dd:d0:a3:59:ba:77:ae:0c:62:
                    93:af:9d:3a:99:d9:9a:b6:0f:f7:f1:cd:fb:4b:5f:
                    e7:77:ee:0f:4c:89:06:b8:4c:7d:e6:3b:2d:69:9a:
                    dc:e8:56:c2:52:1e:4c:ec:9f:75:46:94:00:ec:08:
                    da:09:07:72:bd:82:d4:29:5f:e8:39:2e:5b:38:e6:
                    3b:bc:da:2a:59:8e:d0:26:f1:38:f4:59:92:45:73:
                    5c:2d:0f:54:f1:05:ad:5a:ad:8c:d5:cf:bb:2d:a7:
                    dd:fd:4e:98:b4:4e:41:bf:7d:3e:62:8e:dd:96:fa:
                    e1:ea:ea:1f:52:3a:ed:8a:e5:60:a6:f5:c9:07:5b:
                    be:91:93:dc:08:df:d9:50:40:72:ed:27:8a:bf:0c:
                    bf:74:dc:ec:1f:a8:23:e6:07:2c:2f:97:ba:2d:a8:
                    f2:9f:40:61:b2:32:50:12:7d:8f:1d:ab:de:4f:f9:
                    9a:b0:73:4c:1b:3e:e2:fc:27:c5:5e:91:d5:b1:c1:
                    c6:d7:83:07:f1:6d:a3:08:29:ff:50:78:01:73:50:
                    3c:3c:28:94:72:ff:92:c7:f3:00:af:2d:ff:2a:22:
                    87:73:f3:b9:0f:4c:42:15:09:30:ff:89:b6:4d:1a:
                    55:a5:0f:82:3e:08:9d:0a:2e:87:83:f7:f0:87:7b:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.208.0/21
                  80.253.240.0/22
                  85.159.64.0/21
                  89.19.0.0/19
                  94.73.128.0/18
                  185.22.184.0/22
                IPv6:
                  2a02:2020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34619

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:86:be:7b:fb:59:29:d9:4a:18:9b:fc:ef:83:fa:5f:3c:
         b5:0e:aa:96:d0:3c:1a:84:59:fc:68:3d:1a:24:3a:c9:6c:22:
         8d:76:6e:b5:f1:70:2f:06:17:c2:8b:be:e3:13:5e:45:6b:59:
         a0:be:33:75:35:4c:c0:32:56:25:42:e4:df:10:69:f7:a9:f3:
         bd:a3:db:2b:55:3c:77:be:93:b8:10:35:bb:d1:09:11:6a:27:
         3a:76:22:e4:fe:62:d5:9b:1e:97:fd:b3:72:ab:f5:38:4a:64:
         77:80:a1:4f:a9:54:7a:25:10:7e:df:b6:1e:61:25:2c:0b:e7:
         6a:1c:0c:85:92:04:a6:b7:0f:fe:37:92:32:96:78:a7:69:32:
         18:82:54:80:34:65:66:37:a2:67:7c:74:e6:93:3f:fe:a7:3b:
         ec:25:8f:5b:47:89:2c:80:83:b1:0b:39:e4:5c:a8:15:47:8d:
         f8:2c:c0:40:6b:f2:d5:49:fe:b3:ff:ac:23:a1:99:76:a3:7a:
         c3:07:78:5c:4a:55:63:84:09:29:2e:de:95:62:75:9c:91:4d:
         23:db:94:30:f9:a2:f5:11:48:51:53:49:65:be:18:45:89:ff:
         3b:df:3f:91:e0:fb:70:c7:f8:19:56:3f:87:da:1c:c9:ee:eb:
         9e:cb:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:58 2025 by rpki-client