Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer (raw, json)
Hash identifier:          4vlXigd6OzrARoHUxYSFp7vQXVUjR1ULRNKFkfLHCOc=
Subject key identifier:   5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424459069AB74F0CBA28AF1039DE1C47F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43623
                          IP: 91.195.78.0/23
                          IP: 185.17.244.0/22
                          IP: 194.113.143.0/24
                          IP: 194.156.7.0/24
                          IP: 2a04:880::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:90:69:ab:74:f0:cb:a2:8a:f1:03:9d:e1:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:28:8c:56:5f:d0:f2:26:9b:d1:dc:50:e5:
                    88:2c:43:1f:5e:7f:62:73:6a:ee:11:95:89:e9:14:
                    1f:d4:04:9c:a2:ff:d6:e6:3f:bf:e3:57:05:33:72:
                    38:07:02:78:ad:62:17:6b:2e:da:4a:b9:5c:0a:15:
                    09:2a:54:ad:e8:4f:30:f9:7b:9c:6f:13:bb:d2:f9:
                    c3:53:4c:21:0a:7b:4f:58:bc:97:2a:66:8f:98:c1:
                    45:74:00:aa:c8:24:82:74:8f:3d:1b:a2:49:60:3f:
                    3f:fd:42:fe:22:9d:61:bf:1f:07:cd:4a:f2:65:36:
                    77:04:08:86:b1:1c:2b:be:ac:7a:f3:f9:09:4f:27:
                    35:b2:19:e2:68:f6:35:c4:3b:c9:b7:b6:7d:d2:a0:
                    16:81:5b:5d:7c:56:b9:eb:cf:8f:59:73:53:d1:7a:
                    76:16:38:2a:20:69:8c:b1:8f:8e:eb:30:ba:b8:e1:
                    51:87:2d:de:84:90:b4:bf:a8:ff:bf:14:d7:42:e6:
                    c5:95:34:c4:ac:31:59:f2:9a:e3:59:08:99:1c:30:
                    77:15:a9:c0:ab:01:75:b3:fa:de:c2:a5:20:b6:97:
                    34:07:d3:9d:a0:40:2e:c9:00:72:b2:83:20:b0:ff:
                    2f:a9:2e:88:03:bc:a9:92:0d:96:40:4c:09:b2:47:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.78.0/23
                  185.17.244.0/22
                  194.113.143.0/24
                  194.156.7.0/24
                IPv6:
                  2a04:880::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43623

    Signature Algorithm: sha256WithRSAEncryption
         ad:e7:60:d7:2f:4e:21:dd:d7:71:55:63:20:d4:fe:1c:58:b7:
         d6:45:38:23:d7:60:df:95:b7:f6:2b:4c:c8:21:59:0a:dd:fc:
         c9:c3:73:ef:70:97:28:dd:52:a8:5a:fa:73:99:e0:14:94:b8:
         c0:c7:5e:27:2c:22:cc:49:28:1b:85:0d:4f:cb:e9:6c:0b:76:
         cb:47:d4:10:9c:7f:74:93:60:2c:a6:17:02:6d:94:29:de:fb:
         49:b8:6c:66:c3:5b:f7:c3:a7:0b:b9:35:62:9b:7d:5a:e3:94:
         27:92:64:8e:40:6a:f6:27:c7:23:1a:ea:51:00:c2:c6:1c:23:
         b8:9c:e5:77:ae:89:f4:b7:9a:8a:0c:ce:d2:26:22:f1:1b:4d:
         4a:35:75:33:86:7b:66:ef:da:d9:26:7a:dc:6b:50:4b:17:95:
         88:5b:1e:61:47:55:a6:90:81:18:1e:28:d8:06:85:75:f9:27:
         f1:5d:f3:b8:ad:95:a1:ca:71:6c:85:db:e0:02:81:1f:8c:af:
         47:12:10:03:cc:7f:ee:69:f3:93:ee:6f:74:d8:21:61:65:e4:
         58:e9:22:c3:ed:c9:a3:f5:a2:10:16:35:cc:d3:71:e6:1b:c0:
         b4:e8:2a:3e:2c:44:a0:3c:a4:06:a8:e1:12:ab:1d:5f:19:ab:
         17:4e:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:47 2025 by rpki-client