Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.cer (raw, json)
Hash identifier:          zf88A/+YkUvbvN0kOEhQjPo3yW/3cEAJThAgCX1iHiw=
Subject key identifier:   7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941FFA36412F2C607FF7B82135023CCEE6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 03:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56984
                          IP: 193.36.168.0/22
                          IP: 2a0c:8940::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:36:41:2f:2c:60:7f:f7:b8:21:35:02:3c:ce:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:7f:cd:8d:34:3f:8b:65:1e:4c:34:6b:c1:
                    a0:0a:25:bf:1e:3d:a2:1e:99:a0:77:55:f8:c2:24:
                    27:a8:03:80:a3:8a:b7:28:e5:02:97:64:9f:61:46:
                    c3:e1:eb:35:56:1b:b8:8f:94:b7:c1:de:a3:8c:52:
                    ff:2b:d5:43:b1:72:98:52:18:e9:81:f2:ce:75:9a:
                    a2:c1:39:d8:bb:12:80:ff:60:d5:29:a9:0e:89:43:
                    44:bb:3f:a4:cf:9a:d6:1c:95:ab:04:05:17:97:bd:
                    6c:0b:f2:9a:cb:cd:10:31:2e:52:58:c6:64:1a:12:
                    8a:47:32:fe:6a:d2:8c:f3:68:fb:e8:15:77:7f:91:
                    51:78:c5:62:86:40:26:6b:4b:36:de:fc:81:0e:20:
                    39:83:5a:2c:f1:b9:0e:93:e8:68:23:51:b1:1e:0e:
                    b0:e3:f9:21:59:fb:cb:69:a0:db:0f:36:d3:73:06:
                    67:69:ff:65:c3:74:be:3e:80:bc:eb:9f:17:f5:b2:
                    0c:31:56:73:85:17:5a:8a:90:82:88:40:a4:ab:d0:
                    99:9c:9c:bb:f5:70:00:2f:76:49:d7:3c:f9:ef:78:
                    df:6a:9c:4c:0b:a6:c8:d8:29:5a:20:34:3b:05:aa:
                    ca:22:3b:cb:31:e5:92:9a:58:d4:f6:1d:57:8f:25:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.168.0/22
                IPv6:
                  2a0c:8940::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56984

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:41:56:c3:2b:a2:96:8a:ed:75:64:d9:ce:1a:d5:79:71:
         9a:6e:82:d5:56:85:00:a8:ad:1b:7c:b9:66:f7:07:9c:5b:09:
         fb:89:c7:89:ca:67:b1:89:0a:fb:11:aa:8e:57:5e:6b:f3:74:
         fe:be:cb:19:8f:68:a7:8a:bf:c2:dc:c5:9c:9d:ed:72:fc:6c:
         e7:5d:64:e6:37:80:de:00:09:51:d7:4f:65:68:00:de:94:69:
         db:ef:af:88:8e:d6:35:f1:6b:f0:d4:97:9f:0b:3c:e1:ea:6c:
         85:a8:ed:1b:aa:de:36:2a:17:d1:95:76:51:4b:af:66:c7:1d:
         76:70:61:ef:12:da:8e:a3:f2:62:4f:dd:5e:07:ab:4c:70:9e:
         4c:1e:35:73:25:16:84:66:ed:7f:20:3c:24:f8:f4:74:ca:46:
         c3:9e:ee:c6:6d:8c:b0:62:28:fb:bd:3e:a1:69:fc:06:61:07:
         80:59:5e:cf:3a:ae:3b:28:17:ba:df:d8:d5:e8:c8:d1:8f:bb:
         dd:ad:f2:80:5c:ee:68:4a:15:b0:96:4a:a3:80:32:bd:55:62:
         06:fa:ae:4e:46:08:26:ea:bd:b7:2d:0c:4b:32:cb:2a:ca:92:
         6f:ae:59:9a:be:4f:fc:ea:07:62:af:d8:e6:69:51:09:78:49:
         37:6c:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:11 2025 by rpki-client