Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
File:                     v0fz41wqjMrpbOFyEPkTq-fpI_g.cer (raw, json)
Hash identifier:          knX9UDyYIJ/7n5JCbT5/dap1wtM2C1FmaPGQ9oJbYvE=
Subject key identifier:   BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D7180DC42A4E793DD761154971E3E5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 198755
                          IP: 193.33.166.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:18:0d:c4:2a:4e:79:3d:d7:61:15:49:71:e3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:21:f3:ab:f5:31:25:83:f5:63:ff:60:19:
                    34:3e:9d:5e:d9:16:18:2d:53:3a:05:a7:b0:ca:10:
                    1a:89:84:12:26:52:d7:9c:41:13:93:82:2a:06:88:
                    00:17:92:9e:cb:f3:c7:23:f2:4c:c6:42:2c:1b:66:
                    f5:a8:a9:7c:84:08:38:2b:6b:c6:f8:63:f5:71:04:
                    4c:0f:63:98:ce:17:43:f8:b4:31:e1:09:26:c8:1b:
                    8f:db:53:5d:be:d8:66:a1:68:92:7a:dc:9a:50:cf:
                    ec:c5:8c:ab:ac:17:3c:a6:9e:f2:6f:2c:18:ea:c2:
                    9c:ec:bc:6b:c7:f2:ad:6e:58:9a:bc:0e:54:d3:98:
                    df:89:18:19:5a:20:44:0d:51:89:03:76:bd:2a:f6:
                    a6:a4:38:98:55:2f:50:4e:98:70:d0:0b:df:39:8a:
                    a6:b6:3b:e8:45:77:cd:a3:82:86:dc:50:4c:5f:1d:
                    7a:33:c6:b8:52:f7:0f:b0:95:b7:b6:c9:77:a5:01:
                    0c:1a:a1:84:cd:b0:5d:58:6a:68:95:6d:d6:c6:db:
                    ab:1b:79:d0:9f:31:b7:f5:51:44:7d:f0:fd:e4:b7:
                    3d:4f:ac:a2:63:8c:c2:78:21:d5:95:5f:7e:0d:ed:
                    50:41:82:0b:15:37:02:ad:a6:62:be:93:0d:c6:33:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.166.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198755

    Signature Algorithm: sha256WithRSAEncryption
         68:79:1a:87:db:7e:6e:e9:7b:e6:4b:da:eb:b2:b2:d4:40:58:
         bd:47:86:1d:6a:bf:62:30:fa:03:95:04:3c:be:d7:c5:f6:f1:
         4e:9e:50:fc:05:22:0e:38:6f:13:86:d0:cd:50:ac:3a:52:62:
         bc:07:e3:65:d1:0c:50:52:1c:ed:63:1b:57:f7:ac:2b:38:0f:
         fd:fb:a0:ad:3d:60:16:06:f3:23:f7:26:1f:a6:05:9e:cb:8d:
         f4:62:f7:fa:7b:2f:d8:9c:15:57:e8:7c:a5:cb:bd:fd:a8:a5:
         2a:e5:9a:63:a8:03:67:f7:7d:6d:19:12:91:71:72:22:3b:e6:
         40:45:cb:a2:9c:6b:df:94:8a:af:54:25:21:f8:1e:46:db:d1:
         ba:5b:66:81:ef:5b:f6:25:48:6b:24:14:a9:60:51:1e:98:8f:
         e5:7b:1b:84:7d:7a:75:df:e0:93:85:06:d5:31:95:8f:0e:75:
         c2:73:6b:a5:89:65:26:bb:ed:16:98:a6:79:e4:f4:c5:0a:12:
         a7:6c:2a:16:4d:99:1e:35:e0:d3:7d:ff:72:be:a1:50:83:92:
         2d:5e:da:fc:84:10:8a:69:f2:14:d6:44:a7:dd:60:48:44:ac:
         ab:1c:4b:ba:bb:6f:92:be:f9:dc:7a:d9:01:67:3f:d7:4c:9c:
         fc:ff:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:38 2025 by rpki-client