Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
File:                     e0fNwhx8siRnTA6v3sY6ID7uMQg.cer (raw, json)
Hash identifier:          QeqY8pWQyHGfjZqHbFvuE6HD+1lP0pY5lut05Np0RKQ=
Subject key identifier:   7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266BA02D901F430C9D28F02289CE8DFA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207421
                          IP: 94.231.214.0/24
                          IP: 2a10:b00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:a0:2d:90:1f:43:0c:9d:28:f0:22:89:ce:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:da:93:10:82:b1:78:51:c0:ea:7a:d9:05:
                    16:1f:d6:e3:d3:3c:2a:e6:42:77:35:c1:89:3c:4a:
                    0b:e4:d1:c2:3a:7c:77:99:6b:de:4e:63:0f:78:2c:
                    71:2f:ee:1d:c0:a5:20:35:b5:f0:44:02:55:fa:0f:
                    34:43:3e:d6:34:cc:29:10:12:66:ae:48:b9:ce:84:
                    8b:0c:fa:1f:1d:16:4e:9a:fe:5f:07:ea:64:e4:18:
                    f5:91:97:2f:81:c7:8b:ee:f0:24:db:ab:e7:e0:62:
                    b4:6f:3a:08:f5:3b:db:45:66:8f:e8:2d:fd:f4:17:
                    a0:1a:da:f6:72:26:5b:62:e5:05:93:e1:4e:25:d9:
                    be:96:6f:c4:36:47:51:4d:14:b7:0d:c3:04:8c:08:
                    4d:93:a0:9c:1f:6e:1f:54:c0:5a:dd:4d:48:7a:2f:
                    a0:0b:e3:1d:e1:4c:6b:e2:b9:ae:9b:b7:10:5d:37:
                    12:f4:b9:43:b2:ee:99:b9:4e:1a:eb:aa:bb:63:3c:
                    f3:c3:6f:2e:ee:32:20:8d:67:0b:a0:73:61:40:75:
                    51:e7:7b:ed:b3:62:e2:44:dd:ff:ee:8f:61:13:38:
                    a4:51:a0:f5:b3:80:31:7a:fa:19:d0:9f:44:ec:d7:
                    24:a6:1d:47:2b:b6:75:5a:4e:2f:4a:6f:de:b0:b7:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.214.0/24
                IPv6:
                  2a10:b00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207421

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:64:b9:58:d9:15:05:ad:e4:b8:40:99:9e:3b:ab:2c:0d:
         b6:3a:31:a9:a0:90:50:d0:dd:91:bc:a8:40:7f:51:f6:97:03:
         5c:3b:dd:03:c0:19:65:45:ae:69:c1:ac:7d:88:e1:9e:8a:e3:
         15:32:30:e9:70:a3:ff:c9:dd:e0:8a:7d:5e:8a:b1:2c:12:63:
         4c:52:ea:a6:af:79:35:00:07:39:52:cb:bd:ef:62:41:da:81:
         82:5c:ce:a7:26:88:90:0b:33:e3:e7:65:ae:ba:6e:1c:6c:41:
         69:b1:f2:75:5e:e5:d6:9a:d0:73:11:e0:50:0c:de:fd:ff:27:
         dc:1b:b4:ab:a1:e9:f3:6b:1b:ea:0e:ba:dd:1c:15:68:6c:70:
         46:db:a9:c5:26:78:2d:d3:ad:90:e5:48:57:16:9a:82:e9:f2:
         96:43:15:27:30:20:47:db:04:71:70:45:c2:a1:52:54:e1:54:
         39:29:75:f1:2a:d6:ea:00:e3:f8:88:09:ed:9e:ef:a0:34:69:
         0a:0a:65:85:0b:88:cf:8c:20:cb:f8:76:32:87:75:85:f4:25:
         d3:f6:7f:16:9e:fe:2e:80:a7:7b:c5:57:5e:73:e6:14:53:ea:
         06:e4:46:fe:02:32:71:12:c9:46:0a:32:b4:8d:c2:14:6b:e4:
         13:1f:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:38 2025 by rpki-client