Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
File:                     _Jvk7U5UtgHmtqQtC6BM-3qyw78.cer (raw, json)
Hash identifier:          YGiuENHR119WPgV2Az9oAXGSmAzgltBSC1b8VcdlrbE=
Subject key identifier:   FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942067FF8CBE98A4F9905294D378D6699C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:47:54 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202319
                          IP: 185.166.104.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:ff:8c:be:98:a4:f9:90:52:94:d3:78:d6:69:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:b5:56:0d:3f:81:2f:54:19:01:6b:a6:9a:
                    73:a5:7b:36:3c:1e:ab:c0:23:6e:e3:76:e6:68:eb:
                    ac:60:95:b5:b9:d2:51:35:4d:e9:f2:5a:c0:a2:f7:
                    a6:fe:44:1f:a7:d1:0e:7d:86:07:3f:8f:bf:a4:f8:
                    51:91:5f:0c:54:15:b7:0e:1a:73:e6:eb:cf:81:d7:
                    58:a9:d0:43:a4:95:71:ab:71:9c:55:59:c7:38:82:
                    ed:e3:6b:c4:40:cc:23:26:3d:15:07:04:75:ba:75:
                    cb:c8:ab:41:c2:28:9b:5d:7f:28:b1:ad:f8:1d:f0:
                    54:7c:bf:7c:34:5f:c3:09:b4:6f:ad:06:1a:d2:aa:
                    61:de:b6:ec:80:e9:9d:ad:4a:f6:93:fc:bf:c3:8c:
                    e2:7a:01:14:ac:bb:d1:ec:9a:01:fa:93:c4:79:5b:
                    75:bd:73:f9:18:5f:27:36:14:d1:2c:11:b6:ad:a3:
                    6d:fb:8a:82:82:7f:51:e9:c3:83:40:62:13:8a:d5:
                    f3:d1:8b:68:7b:5c:17:55:0a:e8:b2:b1:e4:10:78:
                    44:cb:2a:37:58:f3:84:7a:27:d0:c9:a0:e7:dc:af:
                    5e:46:e6:43:90:ea:a0:91:12:b6:69:20:94:c3:7d:
                    98:36:65:89:c1:a5:09:fb:59:72:90:74:49:f8:38:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.104.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202319

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:79:90:44:25:ec:df:c8:0d:0c:90:3a:25:44:18:79:29:
         c7:32:96:3f:01:a3:1c:88:ee:61:eb:d3:2b:15:ad:6d:50:b0:
         10:9b:00:39:57:56:c5:f8:dd:1c:3c:ad:46:7a:58:8e:a1:19:
         41:34:b7:6a:f2:84:31:2c:35:0d:73:6e:63:2c:2a:d2:42:04:
         bd:ab:cc:e5:b2:6f:1e:16:e6:61:da:82:37:9b:ab:d5:0b:1a:
         9d:a9:94:df:37:c5:3a:1d:19:82:1c:55:d5:bd:ef:3e:b7:fe:
         eb:52:6d:1c:62:a4:d4:27:55:46:90:8e:72:28:f5:99:ae:97:
         a2:2e:3e:d8:b8:cf:fd:18:39:0c:ab:c4:b5:d6:1c:a1:ed:1d:
         85:68:00:a2:67:fc:c1:cc:b1:06:d9:78:ff:25:83:cb:bc:b9:
         f9:6a:b6:a4:9a:65:e5:5e:a3:e0:9f:99:92:09:83:21:7d:07:
         d7:ad:23:b9:a2:d9:23:b3:7c:cf:3a:24:b4:eb:9f:3c:28:d0:
         ae:42:d7:f4:2a:19:96:14:46:af:e2:a3:fb:af:e7:b0:1b:a8:
         09:bf:67:5e:3d:84:bc:8f:0c:9b:af:95:ed:0e:f9:a5:d5:43:
         2b:70:22:39:ce:65:a8:17:83:43:5d:fc:9a:cd:e7:e2:7a:5e:
         16:93:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:37 2025 by rpki-client