Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
File:                     mRyTTgj1egPvTro2taTaeYolIgc.cer (raw, json)
Hash identifier:          2vmvimLBCiSyfUNZ9iG/m7zIDzZyhiZ/Gb6ERNVSB6A=
Subject key identifier:   99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6AD06C6AEC7D03955BE738E2104BF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211317
                          IP: 193.104.158.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:ad:06:c6:ae:c7:d0:39:55:be:73:8e:21:04:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=991c934e08f57a03ef4eba36b5a4da798a252207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:c6:29:60:91:fb:97:a6:da:7e:0a:f7:90:
                    aa:9a:3d:11:34:07:e4:f4:72:de:da:39:11:b0:a2:
                    64:ef:82:41:03:aa:f3:8c:7a:0f:0b:a6:9f:ee:50:
                    4f:c4:56:a3:34:ba:6a:0c:b0:31:1f:8b:e8:ca:6a:
                    46:d0:6f:50:f6:29:55:98:b5:95:ba:77:83:0a:37:
                    b1:96:e2:e8:10:a2:b6:32:6f:6a:ff:d4:f1:8b:60:
                    f7:2b:2c:34:6c:c0:64:f8:db:4f:94:7b:d2:a0:31:
                    cc:5f:77:65:6d:af:47:fd:b5:f1:e1:2e:3c:e8:c7:
                    9b:85:dc:8a:0e:89:a6:ad:97:bd:7a:38:55:53:31:
                    bc:ec:7f:3a:fb:52:ae:9d:a1:19:60:ae:d8:c8:39:
                    f5:a4:30:aa:39:61:df:bd:0b:6a:7e:2e:37:de:2a:
                    f6:dc:73:b8:55:01:dc:83:08:42:95:cb:0f:dc:15:
                    54:5d:31:d9:76:e8:09:70:b2:6b:80:7d:a4:e9:e1:
                    07:82:20:78:e7:4a:53:67:d2:04:b8:66:bc:61:16:
                    38:0c:e4:68:87:8e:fb:f4:0f:38:5e:5c:47:28:0d:
                    d2:c7:3c:9b:99:3f:fa:34:08:eb:c6:f8:2c:5a:21:
                    88:07:5f:66:94:38:f7:c1:9d:0c:28:e8:40:c9:7b:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.158.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211317

    Signature Algorithm: sha256WithRSAEncryption
         13:02:a1:5e:1f:0b:39:d4:45:3d:8e:75:47:3b:d1:0d:2c:8c:
         1f:6d:23:d0:ed:37:16:5e:cb:c0:aa:b4:6d:6f:be:57:0d:ac:
         6f:0a:97:9c:b1:bc:2c:cc:4d:fd:1f:54:a4:24:d6:55:6e:6e:
         a8:7f:77:8b:ee:b4:ac:d8:a1:ea:07:0f:22:a0:88:7f:9e:b5:
         f8:7f:a3:74:81:25:f1:14:9f:8a:d3:9b:ef:89:f4:ed:16:f7:
         b3:e7:7c:6b:22:f3:8e:ca:2a:53:03:cc:7d:62:43:a4:fd:78:
         a5:82:e1:de:3d:79:43:cf:40:0e:1c:9a:3a:ca:e7:68:3a:a4:
         24:6d:45:73:65:12:bc:22:f6:48:86:81:e6:e2:db:96:f0:b1:
         cd:4e:fa:96:b6:dd:12:e7:f8:e4:02:5f:79:38:de:82:0f:92:
         4d:fe:cc:ec:de:46:31:ca:fa:31:ec:db:51:ee:e7:59:4d:e9:
         19:1e:73:32:63:ab:5b:fe:89:57:5a:5c:29:37:fc:3f:5e:93:
         44:c4:a4:9b:0f:20:db:7b:fb:83:7b:0a:98:9d:e3:13:b2:3a:
         7a:0c:26:b4:65:cb:08:82:98:e9:63:42:ab:59:49:44:7d:82:
         a6:ee:e9:05:72:0d:fd:a2:61:c2:c3:2c:16:54:76:00:19:4c:
         2d:e3:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:08 2025 by rpki-client