Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
File:                     dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer (raw, json)
Hash identifier:          wzuIN9RGB/laFPps/Gy7nTMMkph8PjJ6FyuZDoyGCGc=
Subject key identifier:   76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BBB67CF3F49B0C527989410BDA214
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42834
                          IP: 213.109.75.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:bb:67:cf:3f:49:b0:c5:27:98:94:10:bd:a2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=763d7a5535a5249e97a75064669399a93c46cc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:ab:4d:3a:05:be:bc:99:16:41:20:32:a1:
                    23:26:a7:3f:2c:6b:37:70:f8:c9:aa:9f:9e:3a:4e:
                    31:57:e1:a0:84:1b:06:89:3e:0e:ee:b8:9c:e3:45:
                    2f:88:7d:a6:af:1d:6f:73:c8:42:68:91:73:9a:61:
                    71:8c:83:02:c0:59:3a:28:63:0a:b8:da:15:86:12:
                    a4:27:ce:a9:a9:72:e3:e0:7e:63:54:bc:28:0f:55:
                    d7:4f:3a:64:36:c7:49:e7:2f:07:04:2a:80:2f:72:
                    2c:66:3c:75:a7:36:9e:6b:5e:7e:a9:7e:dc:5f:53:
                    65:cf:0c:c0:d8:95:a4:1c:b4:c6:92:0d:9b:b5:63:
                    70:6d:68:ee:f6:20:94:00:3f:2c:9b:40:11:60:ad:
                    cd:ff:3f:d6:6e:f0:60:f3:7b:73:b5:d2:14:15:c2:
                    41:35:80:64:f2:4a:b3:83:cb:61:03:f6:6b:0b:e9:
                    32:97:00:ba:86:26:cf:61:dc:d8:70:4d:87:2b:80:
                    d4:6d:0b:4d:3e:c8:3b:57:aa:7b:ae:21:10:cb:75:
                    b6:d6:04:73:5b:ac:47:e4:7d:3b:af:b3:66:5a:b1:
                    cb:45:01:95:0a:ab:59:cd:9e:b4:38:1f:48:f2:71:
                    40:5b:14:0d:94:0a:f8:cc:8b:33:88:6f:4a:5c:c4:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.75.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42834

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:e9:e0:2e:6a:54:8a:44:62:d4:50:72:6e:69:7b:d1:cd:
         a8:94:e8:a3:50:11:64:2a:c8:bf:34:ad:25:3c:9f:7a:f8:5a:
         b2:1a:00:dc:d9:ed:6b:47:8b:eb:5d:06:7a:10:ca:02:59:4b:
         10:1d:37:72:29:95:5c:2f:ff:29:8b:04:6c:45:84:ec:8f:77:
         ee:67:50:c1:a5:7d:73:4d:b3:38:ce:60:1b:49:f6:f3:c9:16:
         ba:12:dc:20:ad:88:c6:b4:59:39:43:a5:ea:89:cd:3f:10:b4:
         36:3b:70:8b:9b:bc:22:90:b8:9c:3d:1d:16:81:b7:1d:2d:5b:
         2e:b8:67:fa:24:85:18:01:fe:ff:57:a1:0e:e7:22:5f:ea:5c:
         21:98:07:64:c1:05:cf:c3:fb:36:dd:cb:02:00:aa:7a:b4:30:
         08:d9:f8:e8:62:38:78:57:1a:eb:95:fb:85:de:b8:6b:65:a4:
         d6:48:a8:38:45:10:f9:2f:c1:08:69:c7:ae:cf:8e:35:53:55:
         41:d5:63:0d:79:a7:a1:61:b3:44:e6:d7:11:d5:c3:f0:74:4d:
         7c:be:ae:0f:68:dd:b2:88:b4:5d:ee:0f:73:08:b6:48:b8:e6:
         45:0f:1e:8e:37:d4:ad:2d:0d:2b:7b:c0:ad:e3:a7:11:82:d6:
         81:6c:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:19 2025 by rpki-client