Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
File:                     06v49M34ljoYLaDN-QjDhEf6egk.cer (raw, json)
Hash identifier:          VgULMtNEEZU9o1E1IMNl7VlYuN0TcBN+UiHQk0ngE5I=
Subject key identifier:   D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB06D5762EBCF09E0F6B685A1474F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.146.216.0/22
                          IP: 2a07:52c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:06:d5:76:2e:bc:f0:9e:0f:6b:68:5a:14:74:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:10:05:4d:28:e5:5c:9d:4a:20:1a:61:eb:
                    e9:99:47:1e:a7:52:a5:33:69:19:5d:1c:33:72:a8:
                    bc:80:21:ff:f7:76:15:6f:5b:1b:4c:5c:8f:34:61:
                    35:dd:f2:b2:05:cb:e2:0c:c1:da:dc:b8:e4:b4:de:
                    da:8b:a7:a5:71:31:dc:76:34:60:96:28:7f:d5:08:
                    2e:b2:3f:43:2c:9b:67:9b:49:f4:6d:a6:b9:01:ed:
                    94:3b:7d:db:f2:1c:d0:8e:0a:01:2e:f7:49:9b:6e:
                    8f:8b:09:69:80:ee:4c:86:6e:50:a9:3c:cf:11:0c:
                    e4:f1:28:17:e4:fb:a9:cf:8c:9b:58:b6:1c:0d:fd:
                    81:3a:80:f4:c1:d8:44:fd:be:32:b9:15:08:92:04:
                    ed:41:74:58:49:67:d5:db:7e:ff:73:95:b4:cd:3e:
                    c2:b0:65:57:86:1f:b0:07:ca:76:56:31:21:18:d1:
                    1f:3a:17:eb:79:95:13:e4:51:7d:24:0b:1e:6e:e9:
                    e5:3c:7e:c9:ae:ab:3c:b9:93:b2:f4:54:4a:2e:44:
                    a1:c7:ad:db:a4:33:22:18:a6:a7:7e:76:ed:3d:74:
                    0b:9f:12:4f:87:62:3c:2b:d2:c5:1b:53:cc:e4:9e:
                    91:8e:08:68:cd:f1:88:15:3e:5a:5d:7c:c4:b2:81:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.216.0/22
                IPv6:
                  2a07:52c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:79:db:82:1e:18:a6:54:3f:e3:7d:6c:39:fe:83:9e:85:
         ab:ed:7e:a3:ab:af:5f:b5:c0:73:1c:a1:ec:5e:0e:b0:4e:19:
         85:6f:c5:88:6c:e9:3e:b6:a7:8f:a6:70:3b:a1:02:35:4e:c6:
         2d:72:1b:c2:07:d6:e7:fb:cf:e5:96:53:25:31:07:5a:bb:28:
         73:ab:1a:c7:58:53:b5:81:6a:4a:26:6c:42:1a:52:8d:1d:2d:
         55:88:fd:a5:bd:3b:6e:52:09:ef:34:f9:ec:bd:fd:37:fe:71:
         e4:40:1b:1a:95:5c:eb:3c:53:ac:d4:8d:08:bf:e9:32:3a:af:
         f5:7d:7f:df:05:43:44:11:8b:9d:97:18:b5:c2:a4:cd:6f:f7:
         70:64:f5:9a:cb:e1:80:07:98:27:a0:bf:76:11:41:51:c3:37:
         a7:1f:05:76:85:b3:37:8f:58:c1:f7:4d:bf:10:cf:0a:97:e5:
         d9:8f:e3:43:36:a8:3b:44:56:a2:7d:2e:b9:94:fc:b6:c2:32:
         0a:e8:62:90:5c:74:c8:ea:20:87:38:2a:63:81:21:5e:06:ec:
         e0:24:57:9d:3c:9a:e8:52:93:d3:b8:b5:89:64:38:46:a2:35:
         fe:c2:60:5d:58:f8:04:51:df:41:6b:30:78:73:f3:9c:eb:7a:
         28:9a:be:55
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQi+wbVdi688J4Pa2haFHTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2FiZjhmNGNkZjg5NjNhMTgyZGEwY2RmOTA4YzM4NDQ3ZmE3YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dgQBU0o5VydSiAaYevpmUcep1Kl
M2kZXRwzcqi8gCH/93YVb1sbTFyPNGE13fKyBcviDMHa3LjktN7ai6elcTHcdjRg
lih/1Qgusj9DLJtnm0n0baa5Ae2UO33b8hzQjgoBLvdJm26PiwlpgO5Mhm5QqTzP
EQzk8SgX5Pupz4ybWLYcDf2BOoD0wdhE/b4yuRUIkgTtQXRYSWfV237/c5W0zT7C
sGVXhh+wB8p2VjEhGNEfOhfreZUT5FF9JAsebunlPH7Jrqs8uZOy9FRKLkShx63b
pDMiGKanfnbtPXQLnxJPh2I8K9LFG1PM5J6RjghozfGIFT5aXXzEsoFT/wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNOr+PTN+JY6GC2gzfkIw4RH+noJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzI2ZDE5
My00MGMyLTQxN2ItYmQ1Mi01YzEwYmRiODY2ZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMjZkMTkz
LTQwYzItNDE3Yi1iZDUyLTVjMTBiZGI4NjZlMC8xLzA2djQ5TTM0bGpvWUxhRE4t
UWpEaEVmNmVnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZLYMA0EAgACMAcDBQMqB1LAMA0GCSqGSIb3
DQEBCwUAA4IBAQBhP3nbgh4YplQ/431sOf6DnoWr7X6jq69ftcBzHKHsXg6wThmF
b8WIbOk+tqePpnA7oQI1TsYtchvCB9bn+8/lllMlMQdauyhzqxrHWFO1gWpKJmxC
GlKNHS1ViP2lvTtuUgnvNPnsvf03/nHkQBsalVzrPFOs1I0Iv+kyOq/1fX/fBUNE
EYudlxi1wqTNb/dwZPWay+GAB5gnoL92EUFRwzenHwV2hbM3j1jB902/EM8Kl+XZ
j+NDNqg7RFaifS65lPy2wjIK6GKQXHTI6iCHOCpjgSFeBuzgJFedPJroUpPTuLWJ
ZDhGojX+wmBdWPgEUd9BazB4c/Oc63oomr5V
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:31:17 2025 by rpki-client