Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
File:                     b1frSRlt0uBgbVl3wrdLEBt5vAs.cer (raw, json)
Hash identifier:          UYQn8Ozf9vcGulA/VOlqCF8xxp9geiwfSgWXa2vddcw=
Subject key identifier:   6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B31F831FB9C33ABE8A3CDE096FF181
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:48:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201967
                          IP: 193.104.143.0/24
                          IP: 2a0c:2380::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:1f:83:1f:b9:c3:3a:be:8a:3c:de:09:6f:f1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:ac:2d:57:df:d1:23:a2:a6:8d:59:f5:c6:
                    44:29:42:a5:97:31:f5:a5:d0:d3:9e:7b:ba:22:62:
                    db:b4:8b:4c:92:80:f1:08:a7:95:e6:68:ac:68:77:
                    f5:1f:5a:bd:22:87:77:a2:df:64:e4:b9:c0:37:fc:
                    d6:e1:63:91:19:d2:e1:7f:03:2d:db:92:09:56:91:
                    a2:6c:94:06:18:9e:e5:cd:23:24:ec:37:6c:71:8d:
                    83:ad:2d:22:a4:2f:a0:bd:93:27:c1:54:4c:56:41:
                    f9:7f:f9:ae:f3:b1:e1:1a:3f:b1:8c:be:9d:9c:1e:
                    a2:c7:a3:fb:aa:3d:51:38:08:f4:9a:96:a2:97:08:
                    72:12:38:2c:d7:a4:df:53:7a:d2:aa:b5:5f:2d:e6:
                    bd:45:9d:87:ee:06:ad:13:de:d8:88:4b:a4:9e:71:
                    43:83:9f:73:f7:ba:34:78:be:53:16:7d:cc:0c:eb:
                    7e:83:37:05:2a:7b:a3:86:3e:0a:2b:8f:4a:1d:17:
                    5d:cb:02:5d:73:9b:15:a3:1c:9b:fb:23:0a:96:ce:
                    9c:b9:f4:4d:62:d2:56:36:f1:cd:b7:1b:d5:84:3f:
                    38:9a:c4:3e:98:db:12:cf:0c:74:f5:19:ee:ee:cf:
                    e1:62:7f:9e:0f:8a:ad:e1:36:42:46:f6:08:c8:14:
                    33:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.143.0/24
                IPv6:
                  2a0c:2380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201967

    Signature Algorithm: sha256WithRSAEncryption
         48:46:d5:8e:34:d2:73:30:91:4a:6d:85:96:30:fc:c9:f5:a1:
         8f:7f:e8:95:54:cc:9e:6d:80:ec:e6:04:95:cc:03:85:f9:b2:
         e9:32:63:24:4c:16:f5:2a:24:da:f7:31:fe:49:9b:a5:1a:52:
         9a:18:5e:c6:43:77:5d:78:c4:a6:60:df:bc:58:98:42:6c:1c:
         80:22:93:0f:82:34:db:65:cc:79:c3:a1:c2:23:f8:8f:4b:56:
         fe:b1:c6:29:71:55:46:7f:32:86:ee:f5:31:89:9b:52:46:a4:
         58:95:06:94:91:d6:8f:44:f7:b5:1f:84:b5:8d:5e:81:56:8b:
         2e:6f:d4:94:da:8f:d1:70:7d:0a:ad:f0:ba:43:e7:16:c3:1e:
         89:5c:e6:1a:e7:d5:83:4b:a5:69:88:fd:3d:fb:4e:8c:d9:c2:
         c7:0a:e9:ab:7e:b2:7e:7e:b3:30:22:e2:75:c5:98:d7:95:b8:
         3f:bd:50:ee:a1:27:cd:0c:1b:3b:14:9f:d8:44:6c:b8:0c:08:
         a0:11:95:cb:33:95:a2:c5:02:20:e6:5d:9f:87:cd:b3:b5:74:
         96:ad:b3:2e:b6:db:c9:66:59:bb:b3:cc:c2:08:e2:68:ad:aa:
         8f:63:84:1a:ba:19:3e:b8:37:41:87:49:9c:9d:9e:8e:39:7b:
         eb:4d:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:51 2025 by rpki-client