Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer
File:                     WM9XZktBa-WySLcdBD7xt4RT4F4.cer (raw, json)
Hash identifier:          2muI6OLY9gfzTAbIXevqQjxdv0mdnEDAqVneO8zgF58=
Subject key identifier:   58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425217672CF897762F5040538ACA277DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:48:57 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215262
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:76:72:cf:89:77:62:f5:04:05:38:ac:a2:77:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58cf57664b416be5b248b71d043ef1b78453e05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:82:75:10:4a:f6:04:5e:ff:d6:d4:e9:6d:
                    30:f4:93:22:87:3f:1e:30:56:88:0f:a9:54:4e:4d:
                    c1:37:57:78:16:be:83:51:a4:aa:65:f6:77:04:27:
                    cb:37:cd:8d:8f:2a:87:f2:e1:be:9f:ef:4a:46:08:
                    47:7b:6a:f1:1e:6d:4c:e3:bc:b8:ab:bc:87:fe:e0:
                    f2:36:04:c0:0a:23:e0:16:53:1c:1a:00:fa:66:8b:
                    63:eb:36:1d:0f:6c:77:a6:ac:e0:cd:30:b3:79:d4:
                    62:e7:63:d3:04:0a:93:40:1d:e9:ea:a2:d5:c4:36:
                    51:0a:1d:99:05:61:07:63:04:6f:1c:95:a2:d9:a9:
                    f9:52:61:1e:3a:cf:23:78:55:39:75:a8:62:e9:fc:
                    37:1b:57:d9:4c:eb:f8:b9:62:1f:bc:57:ba:28:73:
                    56:3c:42:92:65:4d:2d:84:16:5b:9f:9e:b7:f4:3e:
                    5e:57:98:44:cb:d4:d0:8a:ee:7c:bd:fd:55:1d:d4:
                    af:96:94:7a:42:23:b5:3b:7d:a6:6b:7d:94:11:ca:
                    e7:e3:10:f0:59:3f:76:5c:71:e9:4e:09:da:16:91:
                    4f:98:a8:ec:47:4f:c4:43:81:36:c7:6c:ee:63:a4:
                    a0:1a:80:44:68:b4:9b:07:8e:4b:5a:92:c6:69:d1:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215262

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:47:d1:9b:22:eb:37:e2:41:e3:94:74:8a:ba:12:cc:98:
         f2:a5:6e:4d:5a:ad:1e:ab:31:03:12:b3:74:2f:02:11:29:94:
         6c:14:bb:67:95:2d:55:5e:38:c1:2b:b8:f8:f8:5c:52:64:7a:
         51:1f:80:87:1c:8a:fc:62:34:f0:9e:00:5c:6c:be:21:56:68:
         57:86:36:d2:ef:12:bc:c8:34:93:67:ba:c9:f6:e2:87:d8:74:
         4c:c0:a4:92:f3:de:b1:06:33:7f:33:75:db:6c:bc:6f:7c:1a:
         ad:7c:e7:48:a6:58:5c:81:00:8e:02:bb:fb:b3:32:2e:75:f8:
         5a:bd:00:a1:44:35:29:f7:a4:ee:7a:b0:01:ab:fd:8f:58:d3:
         79:c8:8d:f5:f6:8b:75:ab:9d:b1:fb:5c:a9:8c:4e:4e:39:98:
         6c:cb:c6:00:eb:59:3a:bb:4a:03:c2:f7:95:17:ef:84:f7:c9:
         4b:c4:ac:da:04:ad:58:2f:bc:f9:00:00:9d:3d:77:4d:00:6f:
         c8:13:60:10:59:42:c2:0d:7a:b4:c8:1b:f1:37:da:f9:9b:25:
         a7:89:89:15:89:76:af:ae:62:14:2a:fe:e5:df:a2:f8:da:d0:
         c1:d8:ea:b6:66:63:30:58:1d:39:d0:a5:e1:df:38:8b:13:fc:
         a0:b4:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:11 2025 by rpki-client