Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OwUIQF6b81Iuj1itd17FBrFX1xM.cer
File:                     OwUIQF6b81Iuj1itd17FBrFX1xM.cer (raw, json)
Hash identifier:          v2mWbR6ekAwFY+f21n3ysDtRMe16PRvpLMjco5GhtQM=
Subject key identifier:   3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018570FADFEBECE112DA49AF4DCDCABC2AEA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 05:36:07 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 212.18.105.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fa:df:eb:ec:e1:12:da:49:af:4d:cd:ca:bc:2a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:36:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b0508405e9bf3522e8f58ad775ec506b157d713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:7b:e2:fd:ab:97:4a:eb:74:17:ea:34:4d:
                    e9:15:e5:d5:4a:34:77:a5:8b:4c:44:30:11:4b:dd:
                    4b:42:21:62:0f:41:c2:b1:99:fa:c2:53:28:86:d8:
                    5f:d9:53:10:36:98:2f:bf:94:2a:77:e7:f5:09:43:
                    23:af:d9:ec:a8:0b:f7:8a:2b:36:35:c2:cb:53:b4:
                    72:b3:23:b8:6b:8f:82:1a:1c:2c:5a:66:32:c8:d6:
                    ea:ec:02:72:98:e5:73:7c:67:52:bc:5c:86:42:d6:
                    60:5d:92:8a:77:94:19:c2:80:87:d4:fd:f4:d8:79:
                    21:fd:59:04:8c:9f:8c:28:0b:e1:87:b3:0e:2f:86:
                    26:94:37:9c:b8:f3:32:f1:31:fe:ed:9b:4e:e7:95:
                    78:ea:00:40:f2:bb:f5:1f:f2:2b:da:4b:de:b2:4c:
                    14:82:af:b5:51:a5:08:90:fd:e9:0c:31:44:bc:33:
                    9b:81:59:d1:d5:8c:f8:e2:f2:ca:3e:78:5d:33:0c:
                    53:3b:cf:0b:2f:c0:6a:28:58:9a:5b:19:3a:8d:4f:
                    a0:8e:fe:34:da:e2:d1:c2:9a:ca:22:76:b4:7b:a5:
                    d0:5d:5f:36:62:85:97:77:af:f2:db:23:a9:5f:a6:
                    24:00:10:e8:75:f4:1e:62:19:f5:1a:32:8a:96:42:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:68:f3:e4:91:e7:39:d2:89:e1:56:75:9b:be:5a:c4:33:
         aa:ed:32:c5:fc:66:2b:f1:95:61:52:cb:0d:c4:56:98:7c:96:
         f9:f0:44:e8:f7:a1:c9:24:4c:34:03:e0:54:ea:8e:4a:60:99:
         40:79:10:62:83:83:b7:cb:66:a2:c4:0e:b0:e3:20:e3:33:52:
         98:a1:74:e6:18:9f:05:38:dd:4f:e5:52:2c:4a:ba:f6:e0:7a:
         d6:20:a8:95:e0:95:bb:57:b6:a8:7f:6d:93:16:83:f1:ff:91:
         2c:ff:1b:fa:e6:1d:db:16:58:76:40:32:de:fa:b7:0c:12:89:
         52:9f:6c:a6:b1:15:76:77:d7:2d:d1:b6:aa:f2:a3:83:1d:06:
         48:02:f9:ec:22:bf:d9:61:41:05:3f:01:e1:4f:14:66:7a:45:
         b5:fd:de:5d:9b:2f:38:45:a8:ca:c8:f9:1e:28:9f:e1:8f:7d:
         e5:d1:a1:97:f3:a9:64:34:b8:3a:e8:a5:0c:38:40:66:9b:99:
         24:6b:21:b3:19:c1:06:95:2a:9b:ff:5d:36:bf:96:25:c5:7f:
         da:fb:e5:c0:36:13:6d:ef:8c:83:17:22:5e:12:6c:e1:03:c5:
         65:e8:5d:10:4d:66:1e:87:ec:c4:87:6b:e4:1a:fe:3d:8c:84:
         29:9d:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:01 2025 by rpki-client