Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
File:                     e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer (raw, json)
Hash identifier:          t+BrDE6vnJwJeF7S2J9tJdlXAEx05ZF5Gcu7xmVWjNc=
Subject key identifier:   7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942748705C26FA99A7E9D6034A2334D897
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8692
                          IP: 85.158.224.0/21
                          IP: 95.131.192.0/21
                          IP: 193.58.210.0 -- 193.58.215.255
                          IP: 193.194.146.0/24
                          IP: 2a00:4400::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:70:5c:26:fa:99:a7:e9:d6:03:4a:23:34:d8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7bd78d9140ad6e742e167063206582c1c45952bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:7c:4f:6f:a1:ea:4b:df:5b:2c:e8:a9:2b:
                    08:75:f3:5e:ed:ba:f3:a2:8d:cb:9e:fc:52:b1:7f:
                    22:39:3f:1e:31:b0:c3:83:1e:6a:34:3a:ee:1c:c8:
                    8a:f9:74:83:d5:f0:98:52:f4:fd:ef:48:90:17:4f:
                    fb:1b:27:62:42:91:17:9b:a7:7f:58:9e:7d:99:5d:
                    2e:d1:41:b7:52:d0:8b:7e:a2:86:76:05:fa:3a:6d:
                    50:6e:d1:26:11:3e:4b:2d:a7:82:93:e0:36:1b:5a:
                    ed:94:72:3f:be:43:e9:11:3d:6e:e1:55:cd:7a:32:
                    1b:65:0d:7a:04:86:7a:d6:9b:96:22:fd:1b:6d:a8:
                    50:a1:50:91:ee:7c:37:7a:d8:28:62:35:b0:86:3a:
                    17:22:71:e7:6d:3b:f9:90:53:b5:94:3e:86:04:9b:
                    5e:16:ad:26:27:13:b2:ff:c0:ad:af:8d:83:9e:10:
                    85:bd:f5:c3:40:95:52:04:3c:b4:c0:b1:96:73:b7:
                    10:80:6a:f9:7b:cc:ba:10:de:51:71:9d:b0:bc:f9:
                    87:e1:29:57:df:86:51:a3:93:5d:9c:02:f4:49:1a:
                    f1:6f:6e:78:38:82:d8:53:74:e3:f6:ca:fa:e1:96:
                    bc:4f:9a:39:7e:c7:1e:42:3c:bd:2e:63:9b:af:38:
                    69:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.158.224.0/21
                  95.131.192.0/21
                  193.58.210.0-193.58.215.255
                  193.194.146.0/24
                IPv6:
                  2a00:4400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8692

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:23:2d:af:a0:80:b4:24:c3:12:58:64:b1:c5:ac:95:4a:
         77:2a:7e:46:f0:7a:bf:fe:8e:90:d5:73:2c:9c:ab:a7:09:59:
         02:47:14:40:02:e7:8c:41:b5:3c:18:cd:c6:b5:ca:f5:01:fc:
         0b:c8:4f:a5:94:b4:7a:76:dd:aa:f8:d7:67:7f:b3:d4:52:b2:
         2e:73:4f:88:b2:e8:81:47:7f:ac:70:e5:e0:9e:67:79:d4:d2:
         62:55:7c:8f:3b:69:3a:43:ad:d2:f8:29:78:01:36:46:5a:2c:
         e2:c4:4d:d7:ad:85:18:5f:d7:72:e1:60:72:16:ec:ed:c0:51:
         7b:41:06:d6:2e:d8:2d:e4:a7:7e:32:00:c6:33:18:13:1b:61:
         ef:f8:d6:cc:66:80:6b:01:6d:7c:e3:f1:2a:1e:f8:0e:d3:7e:
         24:04:13:fe:04:cb:3f:e0:b2:6c:9c:e7:54:f5:b9:21:01:53:
         8b:d2:0e:c6:02:6a:c2:66:09:8a:05:ba:66:dc:7f:d3:30:1a:
         12:55:f6:a5:77:bf:6f:a9:1c:b7:1f:63:ba:74:f1:f4:03:a5:
         69:bd:cc:0e:d2:45:15:39:b3:33:6f:ed:55:d6:0d:66:cc:19:
         9e:2e:b9:3b:37:57:02:f2:d6:e0:eb:63:b0:a4:65:e6:b0:9e:
         8b:d9:ec:f4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZQnSHBcJvqZp+nWA0ojNNiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmQ3OGQ5MTQwYWQ2ZTc0MmUxNjcwNjMyMDY1ODJjMWM0NTk1MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29V8T2+h6kvfWyzoqSsIdfNe7brz
oo3LnvxSsX8iOT8eMbDDgx5qNDruHMiK+XSD1fCYUvT970iQF0/7GydiQpEXm6d/
WJ59mV0u0UG3UtCLfqKGdgX6Om1QbtEmET5LLaeCk+A2G1rtlHI/vkPpET1u4VXN
ejIbZQ16BIZ61puWIv0bbahQoVCR7nw3etgoYjWwhjoXInHnbTv5kFO1lD6GBJte
Fq0mJxOy/8Ctr42DnhCFvfXDQJVSBDy0wLGWc7cQgGr5e8y6EN5RcZ2wvPmH4SlX
34ZRo5NdnAL0SRrxb254OILYU3Tj9sr64Za8T5o5fsceQjy9LmObrzhpMwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFHvXjZFArW50LhZwYyBlgsHEWVK/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzJkMzg1
MC0yOWZiLTRiZmEtYTgwNi0zY2ZkOGVkNTJhOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmQzODUw
LTI5ZmItNGJmYS1hODA2LTNjZmQ4ZWQ1MmE5NC8xL2U5ZU5rVUN0Ym5RdUZuQmpJ
R1dDd2NSWlVyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAmBAIAATAgAwQDVZ7gAwQDX4PAMAwDBAHBOtIDBAPBOtADBADB
wpIwDQQCAAIwBwMFACoARAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICIfQwDQYJ
KoZIhvcNAQELBQADggEBAGWtIy2voIC0JMMSWGSxxayVSncqfkbwer/+jpDVcyyc
q6cJWQJHFEAC54xBtTwYzca1yvUB/AvIT6WUtHp23ar412d/s9RSsi5zT4iy6IFH
f6xw5eCeZ3nU0mJVfI87aTpDrdL4KXgBNkZaLOLETdethRhf13LhYHIW7O3AUXtB
BtYu2C3kp34yAMYzGBMbYe/41sxmgGsBbXzj8Soe+A7TfiQEE/4Eyz/gsmyc51T1
uSEBU4vSDsYCasJmCYoFumbcf9MwGhJV9qV3v2+pHLcfY7p08fQDpWm9zA7SRRU5
szNv7VXWDWbMGZ4uuTs3VwLy1uDrY7CkZeawnovZ7PQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:04 2025 by rpki-client