Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
File:                     v8pT8KWH822Jqcq4K_WlA2xhQKI.cer (raw, json)
Hash identifier:          IJvLw+Ylw2b7FVsh5ZC9tKibAdMzlx7tWvyosXTqxTY=
Subject key identifier:   BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D97F3866F390E0A55A4F7984FC5863
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:35 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197751
                          IP: 195.149.117.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:7f:38:66:f3:90:e0:a5:5a:4f:79:84:fc:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:2d:14:6b:a3:3c:f4:1a:51:23:af:92:cc:
                    25:80:97:4f:d4:1f:18:f9:7e:3a:e7:e9:de:cc:d6:
                    a0:9a:f7:95:7c:49:8d:23:96:af:42:a2:6e:18:3f:
                    e6:fe:81:77:4b:fe:59:a9:e8:3f:77:d9:3d:11:bc:
                    31:01:a2:70:24:71:52:09:8b:31:81:6e:2f:f0:b5:
                    14:63:a1:fc:8b:83:d1:1c:a9:ce:ba:8d:32:23:76:
                    87:01:cc:68:2e:1d:75:7a:dd:c5:69:87:cf:85:8d:
                    22:a9:8e:2a:aa:11:c8:8a:39:32:57:e0:98:ee:27:
                    cf:5c:3a:e6:ca:34:57:43:c1:c1:1a:b7:ae:6f:bf:
                    e7:d3:61:4a:79:bc:23:8d:13:7e:fe:08:10:41:70:
                    02:4e:61:2a:f9:1a:4d:8d:f5:60:9c:e1:e9:4e:80:
                    2b:c9:44:41:fc:95:90:9f:f0:33:f7:95:f5:16:9d:
                    3b:c3:1d:c6:d7:ce:7f:b6:45:dc:bc:59:99:e8:18:
                    de:82:b9:80:d4:b4:61:6b:fa:85:f0:95:4b:ad:4f:
                    df:81:f2:06:b5:68:09:1f:25:2a:97:08:ea:aa:e7:
                    d8:83:ba:16:b0:74:e1:77:8c:fd:85:8e:77:35:a3:
                    74:88:1c:7f:6e:f4:5f:8d:55:28:25:13:02:ef:1a:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.117.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197751

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:0b:c1:14:84:37:11:cf:77:5d:fe:e9:8a:da:1a:0b:1a:
         cf:c7:9d:83:38:39:4f:0d:9a:f7:51:0e:a1:e8:92:98:26:3c:
         6e:36:3e:fe:21:dc:81:79:0e:6c:01:02:45:7f:09:0f:5d:88:
         e0:32:17:02:a8:c0:05:55:e9:8c:3d:76:d3:ce:ae:5c:b4:de:
         62:9e:ec:48:b1:57:9b:88:a7:1f:c4:09:41:9b:07:2f:8b:46:
         53:64:74:e4:6f:ff:6c:ec:54:b9:43:a3:68:a0:28:01:34:96:
         d4:c0:07:65:3e:4c:30:98:2c:0d:c7:e7:65:ec:e4:5a:fb:4f:
         0d:79:92:d8:2e:88:38:2a:72:02:9b:02:f4:f9:32:6b:df:c9:
         41:72:42:07:b6:95:58:1c:56:c3:fe:df:c2:48:1b:9f:67:53:
         c5:99:0c:c5:bf:ad:cd:86:20:de:bf:07:67:da:f8:d5:e5:86:
         2f:88:13:cc:72:55:95:c7:bb:ce:4d:c7:b1:d6:1b:1b:ea:ca:
         3b:47:d7:71:d9:fe:c2:7f:31:85:65:43:04:b7:99:2a:c1:6f:
         79:a3:88:9a:1e:ea:c4:9b:7e:e6:5f:70:2c:97:44:57:0d:2b:
         46:c6:f6:00:09:93:f1:d8:77:2c:bc:a6:76:fc:ca:d1:2e:ce:
         cb:a5:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:29 2025 by rpki-client