Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.cer (raw, json)
Hash identifier:          p+6z4Juw6EJdN8M0NX4OedkfNwofmfeZzAeDWBjpw2M=
Subject key identifier:   4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F9B5CF4611867F29EDEFF0FA08CDE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:15 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 208708
                          IP: 45.87.112.0/22
                          IP: 2a10:8d00::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:9b:5c:f4:61:18:67:f2:9e:de:ff:0f:a0:8c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:1a:08:40:0e:36:ea:01:5d:8f:ef:6e:b2:
                    b3:f6:31:06:05:ec:2d:3c:d0:ca:3b:48:68:d2:0f:
                    6a:3e:ca:ad:80:8f:a1:25:70:cb:17:dd:cb:69:b5:
                    7d:90:0e:f9:b1:80:5a:be:42:41:57:52:73:6e:2f:
                    fb:44:a2:32:37:91:ea:0b:2e:c2:59:d7:df:84:c6:
                    a4:9d:b2:84:15:9a:a1:7d:cf:3c:e2:ed:d2:5f:a4:
                    25:4f:f6:be:d7:7d:8f:97:4d:a2:d4:f5:86:bd:c0:
                    df:93:f9:e5:8b:e6:c9:0f:a2:56:99:90:0b:33:35:
                    04:68:79:52:a3:85:c1:61:79:43:0d:c7:80:5b:2e:
                    da:0a:5f:d7:47:35:47:c7:2b:69:ad:2c:70:26:cb:
                    e8:f3:c2:95:65:9e:86:0a:87:a3:a5:bc:3c:71:df:
                    d2:f7:a0:1e:71:bd:e9:8f:cf:4d:7b:26:7e:60:62:
                    6b:28:84:33:34:ca:43:6c:c5:47:07:02:42:6f:5f:
                    78:5c:e0:49:1f:1b:3b:df:77:d4:05:c3:2e:3f:7c:
                    06:f4:78:26:f3:71:4e:10:65:f8:39:2a:49:4b:19:
                    ed:f8:c1:97:61:34:76:92:9c:90:66:8e:85:85:03:
                    b8:51:d3:ae:d2:61:97:d9:a4:57:24:01:4d:5a:51:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.112.0/22
                IPv6:
                  2a10:8d00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208708

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:19:4e:f2:0f:bb:53:d7:cc:47:58:1e:59:56:05:3d:32:
         12:48:9e:d7:47:f8:b5:2f:e7:0f:b4:52:50:b5:1f:3a:0f:13:
         69:3b:ff:1a:4d:8a:7a:64:0e:d9:8c:67:61:0e:17:3b:41:f2:
         76:46:6f:ae:1e:8b:13:40:ac:c4:57:ee:d4:e7:45:e5:98:dc:
         df:d3:60:5b:05:0c:8a:1b:57:e1:da:3e:39:21:e6:7a:de:f2:
         00:d3:59:bd:0f:87:51:1d:53:32:53:8a:68:fc:dc:17:72:ad:
         00:51:4a:9c:88:f7:dc:a6:85:0a:4c:7a:8b:51:55:9a:5d:4d:
         d6:5b:23:3e:36:ca:60:d3:0f:53:bd:7f:e6:16:82:1c:3a:ee:
         08:73:90:d7:48:97:2d:d5:19:16:13:f1:01:73:1f:49:e4:f3:
         7e:ae:05:c1:5a:9f:06:46:2b:fa:44:7c:b4:04:36:15:c9:78:
         2a:60:8a:cc:13:f8:2b:60:62:a7:37:6d:f4:8c:44:ec:3b:eb:
         4f:a1:81:28:5d:6b:7e:67:a1:18:9d:d0:f5:11:52:f0:de:b7:
         0b:2a:2b:e7:a5:92:18:d0:20:10:65:60:80:42:80:d1:a4:f9:
         4a:48:87:ac:c7:05:ef:a3:14:1f:30:a8:a5:3b:0a:80:16:b0:
         ae:9f:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:53 2025 by rpki-client