Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.cer (raw, json)
Hash identifier:          tGgBVwwwd6OXIA2ijTKu1DInNSA/O4i0KMaM6fwoUXI=
Subject key identifier:   7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3CC8F4FD95980B5DA56711F015FB0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 49036
                          IP: 185.113.168.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:cc:8f:4f:d9:59:80:b5:da:56:71:1f:01:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:38:0b:fb:7d:a2:2a:a4:d5:0b:78:17:fa:
                    00:01:21:e2:4a:07:48:83:5b:96:bf:fe:d1:50:65:
                    c6:2e:f8:d1:5a:d2:9c:b3:1e:f7:20:89:dc:17:ae:
                    12:bf:54:a2:57:24:66:ba:0e:24:9f:83:b6:48:9b:
                    9b:c0:a4:0b:bf:e2:1a:c5:07:6a:46:e3:31:81:04:
                    68:ba:e7:64:f1:15:93:82:1e:da:35:86:52:1e:78:
                    4b:d7:f5:2f:ff:b8:d9:49:aa:2d:19:89:0b:bb:13:
                    db:4b:b4:4a:90:d4:12:a3:2b:ef:fe:46:da:c0:18:
                    cf:74:63:4b:4c:b2:15:d8:d5:1d:4b:a8:54:20:a1:
                    34:e7:16:a0:a7:93:f6:0b:77:da:03:27:bc:26:c9:
                    6e:40:94:46:7e:fb:c9:8d:5b:41:48:74:b8:89:96:
                    c9:bd:19:be:e7:51:25:12:ae:ab:41:a2:8b:e1:5d:
                    44:5d:88:ef:52:ee:60:2e:c3:15:e9:37:ac:07:78:
                    33:75:39:ba:ee:a1:34:5d:9d:ab:cb:da:92:26:e6:
                    46:fd:9b:06:dd:ab:4f:dd:b1:3b:84:dd:9b:35:bb:
                    0e:81:5d:5a:21:df:ce:e2:3a:b9:a3:41:05:5b:87:
                    77:4a:54:6b:f1:a7:97:ff:d8:57:fd:19:3c:db:3f:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.168.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49036

    Signature Algorithm: sha256WithRSAEncryption
         06:4a:b1:d0:4d:de:0f:54:da:a8:10:89:fc:66:52:ce:62:e0:
         50:27:d6:40:66:de:18:69:e6:af:1a:bd:1b:86:0d:a8:33:35:
         d7:b1:0e:19:e3:db:d6:1a:a5:24:c2:f4:54:40:24:40:e0:d7:
         d6:86:92:55:3f:cb:68:34:f9:90:43:05:1a:60:84:4e:e4:32:
         e4:f4:66:65:34:99:03:58:eb:8c:be:66:15:ec:0b:be:3f:d5:
         9d:a0:a4:3f:05:ec:bc:7f:fa:84:f7:f3:56:d3:55:8b:c9:b3:
         41:4f:26:47:f8:1b:71:8c:bb:70:32:47:98:58:99:78:91:4a:
         eb:a2:12:49:7b:7e:cc:51:a3:31:46:80:32:5d:51:92:31:16:
         50:f2:ea:4d:06:f9:61:97:9d:3e:d8:b1:7d:4b:0e:5a:d0:94:
         ba:66:01:c1:52:9f:97:af:0c:81:5f:0e:49:25:70:23:8e:0e:
         3c:18:e4:01:a3:4a:95:c5:75:9a:12:bc:04:15:43:cb:b7:c9:
         d9:67:62:21:b2:48:49:c7:eb:bf:4d:f6:3f:9e:88:47:da:dd:
         51:22:c9:36:d7:21:04:8f:b5:75:e9:1e:af:ee:1f:fa:f6:6b:
         16:28:aa:8b:24:ca:19:e3:03:ba:95:aa:42:d1:a8:37:49:94:
         b2:4e:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:49 2025 by rpki-client