Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
File:                     CNedINdqndsHW5T58ABSqyGCdrc.cer (raw, json)
Hash identifier:          7LWzPoPeraTLDAo6O/oNeTspurS34i/LHnQzmM4c4IQ=
Subject key identifier:   08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5F9345F0930A196DEF2AF834B654F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 8831
                          IP: 62.108.64.0 -- 62.108.87.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:f9:34:5f:09:30:a1:96:de:f2:af:83:4b:65:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:3a:03:47:fe:c2:dc:8b:eb:20:e3:1f:b2:
                    62:0a:06:a9:a2:6c:04:11:44:86:db:bd:83:32:03:
                    30:b5:3f:99:d1:be:79:a7:25:b0:76:3f:86:2a:48:
                    80:d8:43:d7:30:fa:34:25:1c:a0:87:00:58:eb:4f:
                    11:88:8f:41:3a:7a:5a:07:4c:ef:fe:52:a3:3a:31:
                    61:f6:2b:a1:7d:59:ec:c5:d6:d0:3c:ce:e2:10:1b:
                    5f:cf:60:a1:a3:40:a8:45:60:5d:01:82:34:89:fe:
                    50:0b:04:6f:e3:4f:f1:07:00:36:5d:68:8c:5d:50:
                    dc:2b:b0:8a:6a:66:e4:1e:a0:70:d0:68:e0:d4:a6:
                    bf:df:60:b4:5c:cf:de:12:84:58:07:17:e0:31:44:
                    d7:98:cc:f7:a9:3a:5d:c2:a3:f4:82:f5:03:e8:e8:
                    b7:93:75:92:8e:7b:59:65:f7:ef:de:ef:0d:ec:ac:
                    13:b7:6f:23:bf:a3:03:aa:a8:01:8e:40:00:67:83:
                    81:65:30:8d:be:95:cc:60:fc:a4:c8:8c:b4:91:2e:
                    db:c3:f2:87:d1:11:32:e2:ad:e5:de:8d:24:d8:54:
                    e1:02:8f:78:c7:b2:13:36:54:01:78:46:1f:08:e9:
                    de:30:e6:07:83:ea:bb:72:3f:29:2e:43:19:c3:ca:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.108.64.0-62.108.87.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8831

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:ed:e4:8e:3e:10:d3:67:f4:18:22:4c:c6:6c:a5:89:e9:
         a1:cd:14:91:e0:4b:c9:43:e3:b2:f4:ee:93:2b:4b:04:e0:e6:
         60:52:78:52:d3:17:b9:07:67:83:e5:24:37:f0:a2:62:2c:dd:
         44:85:e9:99:d0:ef:50:4a:69:15:31:7d:72:b4:cc:40:40:3a:
         c3:f3:1e:0a:e7:22:4a:60:53:bd:ea:18:b4:19:3c:ac:e1:55:
         18:8d:6a:9d:f5:f9:48:5d:77:66:88:91:53:62:71:5e:08:c8:
         76:89:f4:fb:6b:22:df:9f:6e:d2:e9:af:42:21:e3:b9:f0:2a:
         78:cd:0c:93:8e:2d:75:70:ac:c5:1a:c6:47:32:fc:37:bb:65:
         6f:55:76:6b:2a:68:02:0e:66:43:0a:dc:0c:ca:55:e3:64:e5:
         d2:03:f2:30:a8:08:94:fc:23:78:1b:76:26:ba:08:69:25:24:
         55:94:9e:13:c2:16:12:b9:e8:86:0c:bc:07:d7:9e:7d:c1:82:
         d9:fa:d6:b9:14:73:51:a7:59:54:e7:00:29:27:5d:9d:44:e2:
         65:08:be:00:6d:d2:d5:50:8a:da:4b:c1:79:42:54:cb:32:ba:
         82:12:ae:0e:e1:3a:66:1e:37:db:f3:fd:a8:54:31:35:3f:ff:
         fc:ba:60:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:00:51 2025 by rpki-client