Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.cer (raw, json)
Hash identifier:          D7dXAcFb/y9Ljfb/9ngmwyfm4zPL96taT5BzjQI9WiQ=
Subject key identifier:   C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FDB226FFB5B1B393B1876D2F56A58B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:49:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208617
                          IP: 185.160.204.0/24
                          IP: 2a12:e740::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:b2:26:ff:b5:b1:b3:93:b1:87:6d:2f:56:a5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:49:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:81:31:a8:9b:4e:e3:df:71:c3:9b:6f:c5:
                    2f:12:9a:b5:cd:46:47:99:9c:f3:ff:3f:f5:93:19:
                    32:ac:e4:0d:fc:eb:70:1e:24:28:a1:0b:c3:91:de:
                    12:8c:fe:71:68:cf:3d:e2:ed:a6:38:5f:e7:0d:15:
                    78:98:3e:3c:35:5c:84:5d:69:67:62:62:7d:e4:54:
                    82:50:6f:8a:fc:92:4b:95:67:b6:c7:d0:4f:d9:bc:
                    11:14:ae:dc:f4:92:70:1b:f4:f3:b3:f6:6d:7e:67:
                    a2:55:a5:62:69:ee:46:a1:00:92:23:50:85:61:26:
                    20:d1:99:8b:3b:ef:95:31:66:ea:33:aa:d9:4f:13:
                    4e:46:0e:d4:5c:6c:14:07:91:5d:e8:04:d8:9d:d0:
                    79:f7:ec:19:18:34:09:ef:16:96:c1:dc:6b:7d:87:
                    09:a6:4b:29:45:98:fe:02:c6:6c:15:27:52:1c:1e:
                    07:a0:9a:73:6e:8e:88:a3:6b:aa:38:a8:77:4d:d8:
                    42:26:45:af:4f:83:c0:1b:eb:52:1b:f9:a1:32:58:
                    cd:6e:70:a6:b1:1e:13:ae:73:d9:58:91:e1:cd:0c:
                    93:b3:e6:4a:0a:6b:40:d5:08:02:8b:46:26:15:6e:
                    20:f0:54:a6:89:a2:61:c8:2b:a0:56:9b:5f:9f:1b:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.204.0/24
                IPv6:
                  2a12:e740::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208617

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:b3:69:02:22:2a:ef:85:02:8d:c8:a4:95:97:65:05:fe:
         c0:01:fd:91:3a:51:61:5f:5c:e2:99:bc:bc:cc:ac:0f:43:a1:
         70:59:c7:a1:6f:ef:ac:c3:b8:0e:00:d3:91:4b:02:58:b9:9f:
         68:03:d4:0c:d3:f2:6d:4e:f6:05:0f:75:c3:fd:80:80:db:c6:
         38:27:33:fd:1f:15:2c:a8:61:91:54:40:20:b1:4a:50:22:21:
         91:eb:58:ef:ad:61:8e:e1:df:06:9e:7d:9c:c6:c3:cb:3f:dd:
         44:c3:ed:a4:d5:02:ae:24:8f:c2:7f:66:9b:22:27:90:8e:a3:
         96:19:f7:9b:5f:23:c6:e3:44:df:6d:49:38:53:23:d4:34:ec:
         24:f9:a9:a5:c4:09:67:4f:13:32:28:73:04:f9:8b:27:44:0f:
         95:54:7c:81:b8:d8:b5:63:f8:25:3d:95:26:7f:ce:0c:dd:0b:
         0d:4f:dd:90:6c:5c:f7:bd:14:6d:e4:c5:38:ac:90:3e:fc:c1:
         32:eb:c7:6a:f6:05:c5:ee:aa:23:bf:f7:af:0b:62:11:c9:bb:
         c2:bc:89:fa:20:d4:59:0f:16:0c:47:05:e6:58:08:20:33:39:
         35:5d:db:bb:93:92:5c:4f:24:c1:22:10:aa:7a:ef:dd:4c:66:
         60:49:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:42 2025 by rpki-client