Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.cer (raw, json)
Hash identifier:          R2ugBBxfdtxG+saMoZAzmrdsKj8oSQIfSVlUkVkEXMI=
Subject key identifier:   6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC2E6DBB90123E3CC261248A4B1B33
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:51 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 212354
                          IP: 2001:67c:b48::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:2e:6d:bb:90:12:3e:3c:c2:61:24:8a:4b:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:73:df:97:4a:0b:a6:32:94:e6:f8:b8:43:
                    62:51:05:ca:b0:de:04:9c:3a:d5:56:90:86:19:86:
                    6c:3b:44:3a:32:1b:30:51:3d:54:f9:26:d2:18:6d:
                    34:bc:3e:6a:c5:b0:ce:7b:70:57:95:0f:23:61:7b:
                    d8:08:d2:cc:3d:f0:3b:fd:0d:d5:f6:39:a8:59:6a:
                    7d:35:76:d3:d8:45:b3:c2:13:2c:05:66:f1:62:fb:
                    f7:c1:a3:25:fb:20:e0:f2:26:43:35:29:87:d7:75:
                    24:90:67:dc:1e:a5:ca:43:0a:13:c2:c3:3c:ec:7a:
                    ba:26:bb:e8:e0:3a:3c:68:fb:52:a5:02:2a:86:30:
                    65:d8:65:69:b4:82:30:0c:18:cb:12:9a:0c:dd:5d:
                    0a:c3:f2:bf:f6:fa:f8:4c:9b:01:a4:49:85:aa:fe:
                    50:d6:4f:41:91:20:35:c5:c2:86:22:1c:7b:25:fb:
                    a7:7d:b4:11:9c:f2:5a:eb:4d:7d:cb:b6:30:ab:f7:
                    13:81:64:34:40:ac:75:bb:8f:b9:87:7f:df:16:33:
                    8b:b7:05:92:9c:7c:23:37:32:32:8a:c4:38:37:42:
                    f6:f5:d9:2c:85:2d:c3:e6:4f:a3:c1:b8:d9:e3:85:
                    a8:d5:f1:99:ec:ac:6c:60:21:d9:e9:27:8a:a3:f8:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b48::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212354

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:e9:05:b6:e8:93:a3:6d:a3:01:80:db:cf:be:23:f3:06:
         78:18:e7:f3:03:ec:a8:e6:4e:0a:e3:f2:80:5d:bf:b8:fb:a8:
         05:f3:86:90:e7:b7:c4:90:b7:4b:9a:1b:7a:b4:71:4a:97:31:
         7e:b6:b8:12:6b:f6:f0:c1:69:d7:e4:03:7f:ba:65:fb:e0:7f:
         52:74:1f:e3:ee:7c:b5:6a:a9:e3:ac:39:31:f3:54:80:42:6b:
         c0:4b:f4:ce:64:04:9a:8f:71:b8:29:dd:20:52:8b:35:a4:d9:
         00:36:57:1e:53:0f:82:86:e5:ca:8c:f9:0b:a5:42:99:0d:4f:
         fd:7c:e6:93:79:37:ec:82:23:49:cc:09:ae:b2:5f:90:fe:57:
         7c:6e:fe:cb:c0:16:f8:73:1d:5b:1a:b1:4e:5d:2d:6d:71:ee:
         63:d9:07:07:3e:82:77:37:51:6d:9c:82:1a:0b:bb:c0:1e:91:
         84:16:89:a2:68:2e:5f:33:55:73:d3:b2:b2:0d:65:b4:e6:63:
         5b:f1:15:cd:fc:0f:8a:22:14:e2:2b:14:74:76:87:44:47:7a:
         e0:f4:16:81:e5:b5:34:93:95:61:b8:50:b9:17:ec:b1:21:9e:
         1d:79:a1:2f:fb:cd:52:ba:21:1f:c3:84:5e:8d:82:1d:8e:68:
         7d:90:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----