Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
File:                     stitAnqWdO3JNueMXU0bZJZNhEA.cer (raw, json)
Hash identifier:          6EfnX3sP3yiw1A9f9Q9FiFnF7xh7loscD2FnbxXL7O4=
Subject key identifier:   B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019420685754FB35BF7433106BB4754E5634
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:16 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198895
                          IP: 45.140.133.0/24
                          IP: 46.229.241.0 -- 46.229.242.255
                          IP: 188.65.167.0/24
                          IP: 193.16.149.0/24
                          IP: 2a13:2580::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:57:54:fb:35:bf:74:33:10:6b:b4:75:4e:56:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:e3:fe:82:22:96:6d:dc:ea:13:f2:e7:bd:
                    c2:10:b7:d4:2a:87:e2:d0:94:89:c4:15:76:b7:2a:
                    f6:ff:a6:a3:8b:15:5f:48:aa:e8:24:a2:3a:f5:e1:
                    09:1f:58:a7:00:e9:d0:75:47:04:be:da:d9:23:2a:
                    26:48:ea:5f:5a:df:8d:93:29:be:40:2d:7a:37:a1:
                    49:c8:35:aa:9d:64:ea:36:ad:3e:86:f8:37:54:c2:
                    f2:60:4c:90:11:14:7a:f1:f5:f7:77:d6:b1:2a:39:
                    4d:de:df:68:69:2c:a9:e2:9f:dd:43:d8:5a:67:81:
                    5e:67:d2:e1:70:0f:69:8d:77:c5:c8:fa:9e:66:5e:
                    81:9d:7e:b7:c0:c2:c4:19:72:91:45:92:6b:55:d1:
                    f6:07:a9:c3:26:c0:d9:43:e0:47:7a:aa:d3:45:2f:
                    fc:eb:10:d6:9c:9a:c9:e0:47:5c:0e:32:76:53:18:
                    5c:0e:ff:1f:59:0d:ef:73:11:57:46:10:70:92:2c:
                    4f:30:2b:b0:ec:23:af:64:f0:08:f0:f8:56:02:7a:
                    e2:59:ca:15:cf:47:45:51:66:a3:f9:6f:fa:f6:78:
                    81:04:69:15:cb:2d:9b:eb:e9:ce:58:db:9c:0c:6f:
                    ee:30:5d:18:9d:5c:4c:25:78:bf:11:78:dd:33:bf:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.133.0/24
                  46.229.241.0-46.229.242.255
                  188.65.167.0/24
                  193.16.149.0/24
                IPv6:
                  2a13:2580::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198895

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:7c:70:d6:41:db:88:af:c5:e5:47:9f:a0:fc:88:88:75:
         1d:dd:91:e1:79:6c:ef:48:d1:fc:a6:a1:7a:6f:3a:2d:53:53:
         4f:8f:3b:80:aa:d8:0f:b1:14:1d:68:77:fb:72:8a:fc:40:e1:
         87:92:5b:2d:26:5b:81:10:fd:92:0f:15:4d:12:2f:bd:55:f8:
         9a:50:4d:00:ce:b7:f6:83:0c:6f:44:f6:52:d2:78:45:81:a3:
         b9:f7:f4:64:7b:45:0d:42:1a:2a:f9:1c:e0:fb:92:e6:bb:b3:
         e5:50:ce:8d:e7:25:7d:d9:3e:59:b2:46:28:df:fc:66:21:81:
         52:bb:54:10:0c:1c:24:b8:54:97:96:c0:62:13:38:1a:85:c2:
         b5:66:cd:15:f5:47:72:f3:b2:dc:50:54:79:c1:9c:19:fd:11:
         d7:ea:d8:57:2c:0f:9c:4e:7d:90:b4:47:69:09:c2:cd:df:75:
         af:71:04:45:11:6c:95:e1:bb:ce:bf:db:66:4d:e8:be:55:5e:
         24:c7:0d:e3:6f:b5:60:16:d5:04:c7:37:e6:9e:35:30:10:97:
         72:83:5b:d6:9b:4a:30:d5:9c:cb:20:d8:38:57:62:82:12:23:
         db:7a:6d:5f:33:96:fa:c0:5e:07:28:d7:ad:54:69:b5:c8:ff:
         a4:b8:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:50 2025 by rpki-client