Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.cer (raw, json)
Hash identifier:          WcN7MXkVOTQawjL5OmXIsC6pHTWV2Z59lszrmJVmJGE=
Subject key identifier:   59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D7C9B7367025C2A36D5734FBC4682
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 47870
                          IP: 93.174.168.0/21
                          IP: 2a03:f400::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:7c:9b:73:67:02:5c:2a:36:d5:73:4f:bc:46:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:b8:c4:3b:52:00:d8:9b:40:ce:73:17:ad:
                    80:98:9d:fa:e6:33:3d:8d:b7:fe:2b:05:a8:80:78:
                    84:b6:a6:46:96:50:aa:b8:be:b9:46:91:a9:5c:97:
                    5f:d2:b5:52:44:a8:4e:ee:8a:36:6c:de:59:0a:c1:
                    05:1f:ec:ea:60:06:02:83:3f:b2:79:f3:c6:0c:ff:
                    e1:fe:4d:18:8e:6c:60:02:72:09:3c:e0:f9:4a:67:
                    73:bd:8c:30:93:fe:49:5a:54:01:e1:d4:f7:8f:ed:
                    7f:a9:88:5b:78:60:a4:dc:02:ab:7f:d8:d6:13:a6:
                    51:8d:a1:33:eb:ed:7f:01:bf:24:3b:7a:90:8f:4d:
                    30:c4:c8:e4:27:d2:59:a1:92:71:fe:3f:b3:a7:5b:
                    23:c1:2d:40:fd:63:9c:b4:75:9b:96:af:f1:7d:5b:
                    0e:92:60:63:ac:7e:6b:1c:5e:4f:ed:af:a6:6e:68:
                    b3:99:ba:ea:cd:a9:39:b9:53:7b:b5:f8:e8:0c:8e:
                    3e:da:fd:bf:be:7d:a2:85:33:22:16:3a:a6:ed:7f:
                    95:91:93:83:7b:40:8f:04:26:0a:a5:60:58:e0:78:
                    c7:00:14:bd:6c:95:df:50:d9:29:9e:ec:c9:d2:01:
                    1c:77:40:61:41:08:79:ac:55:28:bb:d1:ce:7b:d5:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.174.168.0/21
                IPv6:
                  2a03:f400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47870

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:9b:74:43:c2:7c:db:90:74:70:16:c8:99:17:6b:40:be:
         8e:61:57:63:02:70:4d:aa:e5:49:bf:73:fb:a0:cb:97:ac:54:
         40:1a:01:37:6f:51:d8:67:0a:e0:f0:4d:c2:f5:b3:3c:d3:2c:
         e4:b0:ad:31:f5:3b:86:9b:a8:cb:dc:7b:bf:74:07:c8:26:65:
         20:ba:84:b3:41:1b:e0:42:91:49:3b:f3:f6:85:5a:8d:2c:75:
         f3:50:29:c9:b4:07:48:4a:bb:56:c2:08:ca:1f:17:9d:c5:2e:
         fb:10:21:1b:c7:32:88:fe:35:cc:dd:18:ff:92:2a:27:4d:ca:
         2e:3a:c0:8f:a3:a3:bd:0c:36:93:c6:4d:22:ed:ab:44:16:06:
         02:61:51:74:11:73:61:c9:78:e0:96:b8:08:61:5b:91:bf:4e:
         2e:34:0f:09:6e:52:0d:b6:c4:b7:c3:da:27:77:eb:e4:4f:0f:
         70:33:d3:51:3e:3f:76:2c:03:5f:84:a3:47:da:d2:46:ad:bf:
         d5:06:e4:0f:46:6f:c5:d1:84:d5:fb:1b:18:79:f0:c7:f1:c3:
         45:94:05:df:48:e7:e4:d4:86:6d:41:d9:d3:7f:5a:9f:ac:81:
         4a:79:3d:3b:c8:5f:37:28:cd:7f:89:cb:c7:68:12:7c:0b:b2:
         82:46:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:16 2025 by rpki-client