Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
File:                     vhji2fUJydO0VREqoojTNhhYAaA.cer (raw, json)
Hash identifier:          GezSSJMDPAKg4iQPBuURJNmyHKbEW0lyUl9vC4ls4yU=
Subject key identifier:   BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194244599BA04DC382DC9863A16B359F2B8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 23:48:48 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211425
                          IP: 91.151.85.0/24
                          IP: 91.151.92.0/24
                          IP: 193.56.0.0/24
                          IP: 2a14:d600::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:99:ba:04:dc:38:2d:c9:86:3a:16:b3:59:f2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 23:48:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be18e2d9f509c9d3b455112aa288d336185801a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:c4:0a:67:74:b0:4b:e3:90:79:ca:5d:1c:
                    e2:31:26:d1:58:00:8e:72:94:38:66:15:cc:6c:3f:
                    3b:51:86:66:cb:10:5b:12:15:6c:08:81:48:09:e3:
                    de:14:83:96:23:30:ba:10:e9:91:63:ff:33:1e:a1:
                    b6:03:11:d4:49:29:a0:4e:f1:93:19:8c:e2:bc:f6:
                    02:53:da:1f:39:36:9e:20:54:da:e7:27:24:e8:c7:
                    88:f5:7e:58:48:92:23:38:3d:3b:3b:e9:6b:cd:1b:
                    75:c1:33:26:82:80:1c:db:1d:13:99:a8:35:69:a9:
                    08:83:34:b6:df:b2:21:9e:59:c2:2c:3d:fd:57:92:
                    c6:20:e1:d1:07:aa:4a:84:a7:ac:d5:a8:03:5b:a1:
                    9e:39:7f:b7:05:6b:ed:63:8b:d5:8a:17:ed:98:6f:
                    7e:72:2b:04:1f:c7:d4:b0:48:5a:f9:02:2d:c0:be:
                    53:7f:48:2a:17:50:37:20:b9:d5:02:e1:d4:7b:45:
                    59:86:74:1b:98:f1:35:43:8f:a5:c8:7d:07:0e:cb:
                    de:0c:56:5d:7a:6c:ea:b7:e2:40:42:4a:b8:72:94:
                    e5:41:83:76:ea:b6:a8:50:69:6a:73:1d:93:e0:48:
                    a9:27:d7:bb:c1:a8:d4:03:69:11:10:41:2c:08:62:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.151.85.0/24
                  91.151.92.0/24
                  193.56.0.0/24
                IPv6:
                  2a14:d600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211425

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:c5:ff:81:fa:ee:e4:da:1e:a0:c0:88:6a:e9:bf:67:35:
         27:fa:bd:6c:7a:af:9c:69:20:c3:c2:8b:51:41:ca:2e:df:6f:
         c2:77:b3:76:80:4c:d1:84:1c:42:27:36:71:bc:9d:7a:32:f0:
         bb:d6:08:67:c5:88:1d:57:31:93:7f:73:3a:73:36:c2:17:3b:
         7e:12:03:10:bf:e9:67:f8:9c:86:71:a1:7d:cf:f8:b8:81:ef:
         52:f0:34:f8:b5:88:9b:73:ab:14:e7:83:75:13:48:3d:99:62:
         f7:51:16:00:e2:9c:ad:56:09:db:72:8f:25:6c:69:03:48:5b:
         05:35:ef:c1:6c:88:6a:d3:85:df:d9:84:50:bf:29:62:08:ae:
         ab:be:d7:58:2f:36:bc:c8:3e:e3:96:19:e1:6e:18:19:72:65:
         75:85:bd:3d:3f:36:83:bb:40:ef:7d:12:1c:ef:b5:67:92:8b:
         5b:52:f8:ad:8b:b7:b2:d1:2b:44:ae:ba:85:a2:58:89:c4:3e:
         50:d6:62:91:b7:9a:14:99:06:1b:da:7b:19:c0:25:af:69:fb:
         d4:2b:08:0f:02:59:43:20:fe:2d:44:c7:a3:32:ad:73:f4:36:
         df:78:d1:72:b5:88:99:b4:9d:42:38:ee:bb:82:b1:db:89:a4:
         55:ad:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:29 2025 by rpki-client