Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
File:                     a30fHod8EnmCdOATNFVPiZ846sE.cer (raw, json)
Hash identifier:          Za7xKxP3xuiGN5lm8yKP99Q+xocDTxXfAnVMXj21KxA=
Subject key identifier:   6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9642D7336D117B51B5B20FC8E07C1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34118
                          IP: 185.21.128.0/24
                          IP: 194.145.117.0/24
                          IP: 195.160.192.0/22
                          IP: 2a0c:7100::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:64:2d:73:36:d1:17:b5:1b:5b:20:fc:8e:07:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:67:4f:89:3a:31:5e:7f:08:54:af:82:6a:
                    f5:0b:be:17:6f:25:47:e6:46:02:c6:45:52:05:83:
                    d2:5e:0a:da:59:07:f8:36:ee:e2:e0:1e:2c:1c:5f:
                    36:a7:c5:77:65:9e:19:3f:68:99:15:32:dd:31:58:
                    02:89:b9:3e:27:81:a5:3f:25:6f:13:84:70:83:41:
                    7f:9b:56:17:bb:11:f5:19:68:23:88:30:f3:17:ed:
                    a2:aa:82:f2:6f:eb:2d:a4:bd:76:07:1b:b7:86:9d:
                    9a:61:b7:d6:7d:a0:83:d7:09:8e:ff:23:e0:a8:51:
                    a0:bd:f3:a5:da:61:01:e9:3f:54:29:f4:04:5a:90:
                    32:b1:23:45:d0:76:1a:2d:cd:92:05:30:99:de:6f:
                    79:21:30:94:07:5b:72:26:71:0c:da:b1:70:98:c7:
                    4d:2e:c5:6f:3d:4d:c2:9d:48:08:f2:1e:8f:a7:59:
                    1f:9d:f6:94:d6:b2:8b:3e:e0:03:b9:ec:b4:57:8b:
                    20:91:92:6b:db:cb:79:43:91:a1:89:10:d6:4a:3e:
                    45:d8:df:9c:92:75:3b:92:12:a3:b3:53:6a:09:da:
                    ea:ec:fe:8c:0e:2e:78:b1:03:94:36:70:10:2d:e1:
                    d4:05:3c:47:46:99:53:f3:09:8b:f1:52:80:0c:9e:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.21.128.0/24
                  194.145.117.0/24
                  195.160.192.0/22
                IPv6:
                  2a0c:7100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34118

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:3a:81:45:77:66:98:af:15:9c:98:4c:97:bf:73:17:97:
         d8:e2:58:29:3c:2c:cd:8c:a6:df:48:aa:2b:a1:35:2b:ab:fc:
         68:b4:4f:ba:c6:b0:c6:92:6f:99:ef:a6:82:e8:62:a5:54:06:
         89:f8:d3:c0:8b:9e:7c:5c:25:cb:a3:ad:90:9b:63:e4:4c:bd:
         92:98:e2:44:69:dd:68:d9:a8:16:80:1a:9f:7a:10:78:93:d6:
         11:fc:2e:81:a8:a2:cb:d4:35:96:97:7a:a4:81:35:e5:52:db:
         ae:72:3f:e4:4c:24:f6:93:81:48:3c:a4:1e:17:51:69:49:70:
         00:4b:85:61:9b:e7:75:db:b9:ff:a7:e2:f3:7c:81:f4:24:3c:
         e6:b9:6f:0d:20:c5:0f:8e:76:77:31:03:ea:e9:23:90:78:98:
         7b:d6:f0:18:c0:d3:1d:30:4d:3a:44:9a:87:b5:35:62:56:94:
         0d:e6:69:e4:fa:b3:85:85:04:79:f6:83:4e:ab:04:39:51:35:
         ee:97:74:e4:a1:64:c1:6d:39:c8:71:87:70:74:e8:aa:77:ee:
         e6:6e:98:fd:f8:a1:6c:19:8a:d7:57:ff:7b:80:43:9d:29:b0:
         cb:c5:10:bc:0c:12:19:f2:8b:31:5f:3b:fb:fa:d7:89:4b:4a:
         77:76:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:48 2025 by rpki-client