Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
File:                     fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer (raw, json)
Hash identifier:          maXOX1QXd2uKPIekUAPAm15AufjaHSkWK4Vx08IqH+E=
Subject key identifier:   7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C61F5B434D17E9013096BD576AEA2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 42288
                          IP: 88.218.16.0/22
                          IP: 193.228.90.0/23
                          IP: 193.228.168.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:61:f5:b4:34:d1:7e:90:13:09:6b:d5:76:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:b5:21:e8:46:52:6c:18:24:84:ad:02:cb:
                    93:75:89:37:70:2c:0c:49:8a:96:06:5b:60:91:40:
                    0d:31:b5:cf:04:3f:6e:97:08:64:fb:0b:fb:79:8f:
                    ef:78:1e:d3:ce:28:a5:9d:b4:57:6e:80:10:03:13:
                    81:22:8a:38:bc:50:c1:dd:18:6b:f1:51:b0:f9:88:
                    a6:42:c6:32:f8:47:35:5b:c6:3d:e5:fd:34:b5:d8:
                    fd:2a:40:16:7a:9c:62:7b:5d:04:27:fb:97:b6:b9:
                    20:bf:56:15:b5:96:62:e2:42:39:b0:b2:30:a6:29:
                    84:42:31:aa:8d:f1:59:49:25:c2:04:33:f9:58:55:
                    72:bb:14:a7:c8:4e:e4:10:87:25:77:48:9e:85:3e:
                    83:aa:d3:94:2f:8f:ab:d0:83:86:b6:ba:00:a4:56:
                    bb:b0:57:00:33:ea:62:e5:bf:51:7b:6d:36:1c:90:
                    3e:a4:94:f1:5b:69:50:61:2a:e2:f3:64:e6:d5:cc:
                    a5:72:14:f5:d2:b9:4a:4f:eb:d0:cf:96:dd:6a:98:
                    ab:3b:45:c3:1d:05:31:ac:88:ff:40:d0:10:66:6c:
                    da:d1:23:b0:14:17:0d:20:0f:8b:cc:15:60:cd:15:
                    7d:79:50:1c:6f:fe:43:a3:b9:b4:f9:72:30:cc:c0:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.16.0/22
                  193.228.90.0/23
                  193.228.168.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42288

    Signature Algorithm: sha256WithRSAEncryption
         97:df:ab:e8:37:a9:44:a2:95:f2:36:97:5a:e6:61:0a:9c:f2:
         86:a5:7a:0a:f9:91:3e:d4:4d:24:82:87:3a:bc:df:43:18:72:
         e1:9e:d8:c2:b5:5d:25:d6:47:cf:85:6e:23:9e:6a:a0:a1:d9:
         19:01:32:13:82:98:d4:2e:ea:43:82:3a:84:11:7e:b3:95:be:
         20:9e:6a:26:c9:d3:e7:f8:5e:2c:13:74:81:74:f1:8b:0a:97:
         f5:3f:9e:6b:a4:5a:bb:28:71:7a:36:0d:43:25:c7:b4:93:4a:
         86:1f:31:b5:db:6a:24:b6:cd:fc:96:81:ec:19:65:c5:e0:10:
         f8:28:03:cb:85:da:60:7d:e3:c2:d4:80:9b:eb:06:47:df:f7:
         27:e3:d3:c0:d2:3f:48:13:c2:28:02:2f:b9:8a:63:fa:c1:59:
         7c:9d:bf:1e:62:0a:8d:53:e2:96:b6:53:c6:d2:bf:9a:59:f8:
         19:73:ae:57:9a:db:f5:c3:2c:e2:81:f4:b7:17:42:9c:af:83:
         5e:a5:01:ca:ba:f4:83:dc:b8:2e:a5:4b:5f:df:16:00:6b:7f:
         78:73:ab:86:47:51:28:da:13:fb:20:3a:4b:c0:4b:e2:0d:d5:
         0b:23:41:c4:45:12:ad:5d:fb:e7:19:7f:84:5d:6f:8d:7d:93:
         85:be:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:32 2025 by rpki-client