Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
File:                     AsNPg3O-f_saNes4hgVlvDxFG-Y.cer (raw, json)
Hash identifier:          B6VQbRB8EfslzKvmtI5RsPbyEYLxhqxIxlqsAzWZCNg=
Subject key identifier:   02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FC04E17390145473AC087BF370F02
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197384
                          IP: 185.207.44.0/22
                          IP: 2a0b:80c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:c0:4e:17:39:01:45:47:3a:c0:87:bf:37:0f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:24:89:8c:83:39:d6:10:f1:c4:df:03:7f:
                    70:62:25:86:4e:a5:b6:dc:c6:24:57:04:35:b0:36:
                    b3:e4:f5:2b:11:75:ae:e7:9a:b6:a5:e5:18:d5:4f:
                    c3:61:de:3f:68:17:ea:f6:ec:a3:b2:30:46:5c:b3:
                    c5:29:11:a7:6b:f3:fa:20:33:e9:49:57:5d:9b:fb:
                    aa:9b:db:ac:b0:a4:1e:fd:a3:00:1e:98:77:58:19:
                    27:8d:6f:3e:d4:f7:b1:e0:47:e3:37:9a:27:30:28:
                    05:82:86:bf:d6:8a:76:3a:1e:7b:4e:94:9e:a2:81:
                    22:1a:41:62:e6:37:38:1e:91:02:88:93:a1:99:ba:
                    69:a7:a4:3d:24:e4:c3:dc:43:5a:cd:93:19:45:e3:
                    7b:09:29:f7:45:d0:1c:eb:f4:c4:8c:39:80:4a:30:
                    eb:42:7b:0c:ed:23:ce:cd:49:45:26:1e:3e:b9:30:
                    5b:9f:97:7d:bc:fd:93:d2:73:a2:e1:61:d2:91:4a:
                    e2:8a:27:fe:d3:04:23:08:9a:a7:c5:fe:b0:b8:e5:
                    41:33:2e:bb:4f:4d:79:ca:28:44:84:54:d6:4c:15:
                    a3:7b:13:db:47:7e:45:f4:43:58:5e:44:8c:b4:68:
                    34:fd:a0:3c:c6:41:a1:11:58:d1:8b:1e:1a:6b:1d:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.44.0/22
                IPv6:
                  2a0b:80c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197384

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:94:d2:03:9f:14:a6:3f:ea:fe:a3:5d:0e:e0:49:45:ff:
         9f:9c:c4:e4:74:dd:34:79:b6:a7:54:9a:c0:e8:67:f3:29:86:
         b2:1f:a7:29:44:94:8b:bc:93:bf:b6:b2:47:8e:8a:0a:d6:a5:
         ef:8a:2f:d2:eb:41:3c:4b:41:1b:4d:c0:9f:47:fc:11:45:3e:
         34:32:e5:7e:a2:c6:44:a6:dc:75:1d:57:91:1f:7c:a1:3b:19:
         63:91:ab:63:e9:b1:b5:35:5c:a4:2a:7e:5b:77:8d:3d:7a:64:
         80:04:f0:e4:66:9e:b2:55:24:8b:1c:84:8e:c2:40:1a:1f:94:
         30:40:e6:b3:2c:38:7f:40:77:e9:a5:94:e6:6e:a4:55:a6:51:
         ed:3e:5b:63:a3:95:5b:bd:08:a0:2f:41:20:f6:49:e5:bc:2a:
         7b:48:7b:1f:89:bc:53:29:38:94:2b:58:f3:1c:2b:19:cc:78:
         8b:dc:f4:42:fc:e0:b3:90:aa:4e:1a:22:7f:4f:89:10:17:f0:
         59:bf:6c:69:39:51:c3:bc:a2:c5:33:8c:1f:ec:11:2d:eb:ae:
         25:05:71:4e:35:74:60:f5:9b:a8:a1:09:33:c0:98:2f:6f:a5:
         0f:3d:44:c6:bf:d8:8f:63:1d:93:9f:8b:61:62:66:de:12:a5:
         d8:32:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:17 2025 by rpki-client