Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.cer (raw, json)
Hash identifier:          5roeLqql1zoASewNZWq/ZqYSZRP1DXDU9YOi4ZoIpOI=
Subject key identifier:   EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FB05439B2ECEE3F8D7400E429DF13
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:09 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 5550
                          AS: 12831
                          IP: 89.191.160.0/19
                          IP: 153.19.0.0/16
                          IP: 213.192.64.0/18
                          IP: 2001:4070::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:b0:54:39:b2:ec:ee:3f:8d:74:00:e4:29:df:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:b6:04:34:30:b3:bd:13:80:41:3c:66:3e:
                    2c:f9:4e:ac:55:0c:ea:66:7b:c9:d3:d8:5b:e3:35:
                    3b:75:42:29:6f:8f:6b:b8:6f:95:3f:60:0b:d8:5c:
                    9d:84:02:51:f0:ab:42:3c:81:c2:20:2b:22:cc:2e:
                    31:9f:1e:03:e2:b6:b9:40:ab:c9:4a:85:c1:14:15:
                    1e:38:58:df:eb:c5:79:1f:62:6f:46:1b:ca:89:ff:
                    15:d0:16:92:fb:22:c9:20:b5:2a:8b:fe:b7:e8:61:
                    58:dc:a6:ab:5e:e9:93:61:ae:b2:0f:e5:fb:08:5c:
                    41:56:8a:80:97:b4:bb:66:23:44:aa:52:a0:d8:ca:
                    7b:b9:00:5f:90:b3:4f:93:77:e6:92:52:72:0a:40:
                    cd:04:d7:00:28:ec:7f:1c:37:50:b5:36:68:4b:3c:
                    6d:1b:9e:a1:de:00:c5:30:20:24:3e:e4:f7:5e:77:
                    80:dd:38:58:6f:bf:9b:5e:59:a5:63:7f:7c:db:25:
                    7f:d1:60:fa:3e:bb:30:ea:95:73:e4:b2:c4:2f:2c:
                    66:a3:e0:5c:25:c6:c3:61:19:6b:bc:3f:bb:9b:b8:
                    0b:59:2a:28:43:78:d3:ea:f2:01:e3:8c:61:02:98:
                    f5:e5:27:58:a2:b3:26:bd:24:75:ef:f8:74:49:c5:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.191.160.0/19
                  153.19.0.0/16
                  213.192.64.0/18
                IPv6:
                  2001:4070::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5550
                  12831

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:d1:7c:c3:11:f0:9e:b6:36:12:69:b5:7d:23:b9:c0:16:
         3c:6a:f7:91:a4:a1:c0:d3:62:b1:52:3b:c1:45:06:93:73:d3:
         fd:81:bf:00:ce:69:48:90:3b:2e:46:c3:33:c0:9c:7a:29:9e:
         67:1f:fc:76:38:3e:8b:25:05:82:3c:fa:a2:fd:4d:66:23:2c:
         91:b8:d4:c4:ee:29:a7:d2:ae:37:14:c7:dc:06:50:bc:9a:55:
         c6:8f:b0:3d:78:d7:59:3a:87:ab:00:85:a1:c0:1a:d0:f7:20:
         95:08:0f:e4:e5:12:5a:3e:47:ec:7a:dc:d5:cb:9d:04:26:02:
         3c:4d:c1:46:12:bc:cc:e7:01:58:96:97:f1:1c:d2:73:03:f8:
         7b:6e:59:b1:32:5d:5a:e0:9f:03:d4:34:bc:b0:f7:cf:7a:40:
         b6:61:15:ee:5e:eb:5d:b7:b9:34:3b:6d:c6:e0:70:8f:fd:92:
         4a:13:94:6f:46:fb:dd:6d:f4:4b:11:31:1b:00:cd:48:55:d5:
         4f:e1:ab:32:95:61:00:a7:72:e2:1e:38:fb:da:fb:ab:27:d1:
         70:5f:09:7c:86:f1:be:e8:61:ec:76:a4:d5:74:8c:30:93:ba:
         e8:71:55:2e:73:8f:7a:c5:4d:e3:91:62:bc:17:7a:22:24:b6:
         2f:ff:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:03 2025 by rpki-client