Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M8Y-DlUr7tQzDxjQkmYBoELzXjA.cer
File:                     M8Y-DlUr7tQzDxjQkmYBoELzXjA.cer (raw, json)
Hash identifier:          mWoHI+7Fj5iCjkOCxZyhoVGwsF9V/49ZGhkPz9WreAs=
Subject key identifier:   33:C6:3E:0E:55:2B:EE:D4:33:0F:18:D0:92:66:01:A0:42:F3:5E:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018795BAE40140F0223E72C3F2555518527E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 18 Apr 2023 18:57:45 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 60900
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:95:ba:e4:01:40:f0:22:3e:72:c3:f2:55:55:18:52:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 18 18:57:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=33c63e0e552beed4330f18d0926601a042f35e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:fe:d4:06:43:0d:df:21:b7:c6:dc:b5:09:
                    ed:f4:a7:39:83:18:f9:a5:ac:e7:a9:7b:8c:61:97:
                    64:27:03:22:2d:ad:1b:2a:c5:14:46:4c:8e:95:56:
                    d8:a2:75:29:f9:27:97:73:2c:67:b1:e0:e8:c3:25:
                    54:82:a5:f6:c9:1b:40:0f:f3:af:bf:71:07:62:f9:
                    c6:1f:e4:2f:36:1f:5c:c8:2c:51:a8:47:07:46:0f:
                    95:11:3d:1b:e8:75:15:16:17:12:7c:9e:b9:0c:85:
                    dd:49:dd:29:01:9a:b6:ca:91:c2:f5:ab:4b:19:33:
                    b0:93:92:28:f7:c1:38:6d:6f:16:d6:10:bc:b3:88:
                    bb:94:d8:97:7d:e7:71:56:e1:7b:ad:6b:4a:bb:00:
                    fa:90:61:e2:56:f4:63:ba:17:af:93:b9:63:33:a4:
                    cb:4f:89:09:1e:84:1c:b1:a0:5d:d0:3f:57:6d:c5:
                    dc:df:52:02:9c:18:d9:46:42:f3:ec:b2:bf:d7:29:
                    e4:d6:ba:78:ad:35:ea:3d:11:0a:f4:c0:24:14:4a:
                    cb:4a:21:3c:77:73:21:b7:3c:d7:2a:3f:62:aa:3a:
                    e1:a4:0b:3a:30:4e:4d:60:aa:36:45:e2:9c:21:25:
                    3c:eb:ef:62:88:0e:99:78:d5:64:f4:84:ed:eb:0d:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C6:3E:0E:55:2B:EE:D4:33:0F:18:D0:92:66:01:A0:42:F3:5E:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60900

    Signature Algorithm: sha256WithRSAEncryption
         27:89:81:0d:1f:bf:32:12:70:33:41:13:7e:a4:c8:ac:55:43:
         49:f7:6f:10:ad:35:c2:7d:06:c3:f4:69:02:ba:b4:62:bb:ad:
         3d:07:bc:ea:00:ed:be:af:24:95:ee:da:2c:eb:44:a1:54:7e:
         c6:10:e1:92:67:bf:3a:a8:b0:1a:52:38:38:38:c0:7a:b4:5c:
         51:87:67:a0:ac:3a:3f:88:b7:0e:cb:34:4d:38:ea:39:02:98:
         13:5d:07:6e:65:8e:de:0f:81:73:5b:b6:cc:47:12:a4:c6:47:
         5c:f4:9c:40:84:07:d5:c1:61:20:88:be:e1:89:5e:ad:a6:15:
         6a:20:4e:a3:6c:21:ef:98:2b:d3:64:da:05:12:c3:d5:ad:4c:
         04:4d:88:5a:f8:bb:3b:5b:1e:92:1c:c9:c6:de:55:09:2b:d4:
         51:50:e9:f3:91:8d:21:e6:a1:54:4f:60:b0:53:18:f5:c1:91:
         35:ca:94:d5:61:eb:1c:2e:87:ed:cf:16:dc:f7:67:a5:00:84:
         7a:13:fe:7b:31:df:98:89:2a:97:58:24:f6:28:58:01:2d:50:
         cd:f5:23:0e:80:3a:17:92:c8:0e:d9:b7:45:e7:58:73:66:08:
         1b:01:5d:98:ff:8a:ac:1f:85:10:81:08:e4:c8:e6:04:b3:c4:
         7f:2c:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:12 2025 by rpki-client