Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
File:                     boMQZuqP4gsGehNgBrevkGYzhDs.cer (raw, json)
Hash identifier:          szuStyWOkjHbVEFBKJcN9P7+//iMuV2tPisZu9eJgiE=
Subject key identifier:   6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDBC0C4EB8BE261C32BCF68593143E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:33 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49923
                          IP: 193.104.48.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:bc:0c:4e:b8:be:26:1c:32:bc:f6:85:93:14:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6e831066ea8fe20b067a136006b7af906633843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:fe:6c:44:29:6d:cc:af:a3:1b:0a:02:e3:
                    2e:51:64:8e:18:19:f1:d3:4c:85:45:bd:ff:df:9e:
                    ef:b6:ff:80:42:55:10:bd:ff:e9:10:30:f8:7e:5b:
                    bd:34:c6:64:06:bc:69:14:f0:f3:77:37:f7:4b:fc:
                    dc:33:a3:e3:d4:f6:7c:aa:1e:4a:42:23:b4:a9:95:
                    0b:b4:14:55:79:10:cf:b7:52:07:58:37:c6:75:45:
                    bc:2e:c7:59:72:9f:69:3e:75:93:67:b8:cb:d9:59:
                    b2:88:25:52:b0:a1:40:ed:85:37:3f:2e:06:bc:ba:
                    af:5b:75:3c:55:6e:ee:0a:df:49:c6:4d:56:44:ad:
                    75:10:e5:1d:7b:87:ca:dc:50:89:c1:74:c0:ec:80:
                    7e:1e:48:06:db:05:c1:45:49:c7:99:22:6a:f7:43:
                    e7:3e:02:2c:e7:6e:9e:8c:fc:8a:9c:8a:67:80:6f:
                    4c:a3:90:a8:8f:fe:63:ad:e9:f4:bb:ce:76:d1:02:
                    0e:a3:c7:38:63:1c:43:55:44:45:7c:8a:ee:9c:2a:
                    be:70:75:5f:07:9a:ff:4d:14:86:35:c6:c2:ba:11:
                    c0:5c:70:11:58:75:3c:4d:48:80:ae:c1:b0:bf:74:
                    48:86:d1:d1:0b:9b:c7:9f:58:e4:5c:cd:89:ea:17:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.48.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49923

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:d7:8d:09:31:e0:0f:51:e2:3d:95:7b:07:14:12:03:c9:
         1f:dc:fe:ca:84:8d:47:4e:ad:85:e3:29:a4:7d:92:70:08:34:
         2d:87:f9:81:c2:14:dc:a4:19:b0:e8:ce:bb:44:20:9c:f0:57:
         86:e0:4c:e2:d2:a3:f7:69:cc:66:c0:17:af:22:f3:ba:41:16:
         6f:09:e7:7f:74:f6:a2:8e:5d:3a:c5:55:d4:b4:69:e9:9e:6d:
         86:c2:9e:8c:74:01:fc:32:6c:61:99:de:42:d2:68:9f:f3:2f:
         0c:63:36:27:c3:12:b8:d0:2c:bd:79:c5:02:63:99:a8:c0:5c:
         8a:8d:7c:ed:87:ff:c9:b7:ca:4e:88:cf:fc:d6:63:2d:07:a3:
         e7:1a:ce:c3:12:3e:69:9e:34:0f:f3:33:1e:3e:c2:5a:61:cd:
         6e:21:9b:f9:86:15:6f:22:a1:10:c7:8d:50:f4:d9:bd:88:b7:
         b8:8c:e9:77:83:cb:85:a5:d0:ba:3e:64:32:56:13:0d:10:43:
         2c:79:36:55:df:26:66:b4:71:5d:c9:7b:94:70:bd:43:46:25:
         db:15:00:d2:5b:f3:ea:75:1b:9c:4e:ad:65:3c:e2:ac:fc:cb:
         2c:de:cd:fc:05:8f:f0:fc:26:87:4f:78:bb:93:20:36:da:49:
         1d:0a:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:30 2025 by rpki-client