Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJeNkjPSD_INFhws482TQOQ3r6U.cer
File:                     dJeNkjPSD_INFhws482TQOQ3r6U.cer (raw, json)
Hash identifier:          hQdcEX1aavFDadgkNB+ZC2UWRED4faz6emiq2SDBylk=
Subject key identifier:   74:97:8D:92:33:D2:0F:F2:0D:16:1C:2C:E3:CD:93:40:E4:37:AF:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701DF261FF48156A8920AEB4F620E642
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/a477d0-6241-453c-ad1c-d89febd4eaf1/1/dJeNkjPSD_INFhws482TQOQ3r6U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/a477d0-6241-453c-ad1c-d89febd4eaf1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:34:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 50589
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1d:f2:61:ff:48:15:6a:89:20:ae:b4:f6:20:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74978d9233d20ff20d161c2ce3cd9340e437afa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:85:a5:ab:4d:b7:79:be:fa:c3:ae:f4:fc:
                    26:12:22:08:d0:03:53:cf:2d:8d:fa:b5:40:d5:b9:
                    96:23:8e:c8:be:b0:5a:6d:a5:f5:5e:8a:3e:93:5e:
                    b4:58:38:ca:0a:ce:82:a1:10:9a:fa:1d:2e:0c:c6:
                    19:19:50:6e:46:98:29:9a:d1:6f:ab:a5:92:87:db:
                    e6:27:24:63:aa:9d:dd:f8:68:11:54:7a:0f:4d:31:
                    19:f5:23:22:12:85:b6:da:37:84:7b:43:7c:0c:68:
                    4b:17:8f:1c:0b:dd:a1:9b:c8:e9:e1:27:25:e5:0a:
                    0e:ee:7d:da:57:3d:b0:07:19:36:21:ad:9a:e5:e5:
                    ab:16:d2:45:d5:e2:e7:fa:e4:41:19:ec:fd:9d:23:
                    2e:7c:16:da:42:5d:70:7e:76:85:3b:18:50:18:c0:
                    97:58:69:8f:2e:c7:de:46:0c:75:79:ff:b6:28:5c:
                    e0:f3:1a:80:c9:ce:8b:18:c2:8d:44:bc:c8:33:0c:
                    3f:ed:74:91:ba:e6:12:b4:de:c3:0a:b1:de:4a:de:
                    0d:92:ac:ec:11:47:cf:c9:89:31:8d:f9:b1:ea:7d:
                    d3:89:9e:a9:46:8c:de:f4:f9:76:1c:ca:61:87:fc:
                    f8:0c:e9:c0:ad:94:b8:80:3b:3a:75:c8:26:dd:7e:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:97:8D:92:33:D2:0F:F2:0D:16:1C:2C:E3:CD:93:40:E4:37:AF:A5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/a477d0-6241-453c-ad1c-d89febd4eaf1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/a477d0-6241-453c-ad1c-d89febd4eaf1/1/dJeNkjPSD_INFhws482TQOQ3r6U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50589

    Signature Algorithm: sha256WithRSAEncryption
         81:94:b5:fb:7c:e1:3e:20:bc:81:f1:2c:cf:58:9a:22:88:6a:
         ce:b6:e1:ed:7d:81:53:00:f2:1b:a5:0a:32:24:32:95:c7:4b:
         c9:a4:e5:bd:fd:15:91:b3:7e:e3:a4:f4:04:1b:e5:7a:64:ec:
         a2:fc:a8:3d:1e:5a:ba:d0:01:07:a8:2d:b6:6b:4a:53:81:16:
         70:b0:56:48:93:5e:23:41:5b:7d:c8:c7:67:a4:44:77:69:9b:
         dd:ec:1e:e1:e3:13:39:f4:bb:df:b3:0f:b8:e5:90:42:c1:e6:
         35:86:7d:2a:21:e1:7f:5d:97:5a:6f:86:1b:b5:69:da:c2:86:
         65:71:7b:39:75:c2:20:b6:04:6b:c4:f7:4b:1f:15:4e:8e:7e:
         02:47:1a:dc:ca:23:dd:cb:34:ce:f0:ea:4f:61:bc:96:dc:65:
         5c:c2:5e:b9:13:5a:4f:36:50:24:6e:52:b9:07:d8:66:56:a3:
         0c:a6:33:32:b3:70:3b:cf:a9:6f:6b:02:d7:2d:69:a1:61:b9:
         3e:33:52:85:30:31:25:89:6b:d3:d2:d1:c3:23:12:a1:4c:ed:
         ed:3b:81:c7:3f:cb:7c:27:83:9c:f5:95:0b:09:eb:40:1e:05:
         6c:42:c7:2d:ff:86:40:6c:0f:6a:f2:8c:21:44:2e:75:93:20:
         45:bc:f9:58
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYVwHfJh/0gVaokgrrT2IOZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDk3OGQ5MjMzZDIwZmYyMGQxNjFjMmNlM2NkOTM0MGU0MzdhZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa+FpatNt3m++sOu9PwmEiII0ANT
zy2N+rVA1bmWI47IvrBabaX1Xoo+k160WDjKCs6CoRCa+h0uDMYZGVBuRpgpmtFv
q6WSh9vmJyRjqp3d+GgRVHoPTTEZ9SMiEoW22jeEe0N8DGhLF48cC92hm8jp4Scl
5QoO7n3aVz2wBxk2Ia2a5eWrFtJF1eLn+uRBGez9nSMufBbaQl1wfnaFOxhQGMCX
WGmPLsfeRgx1ef+2KFzg8xqAyc6LGMKNRLzIMww/7XSRuuYStN7DCrHeSt4Nkqzs
EUfPyYkxjfmx6n3TiZ6pRoze9Pl2HMphh/z4DOnArZS4gDs6dcgm3X5K+wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHSXjZIz0g/yDRYcLOPNk0DkN6+lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliL2E0Nzdk
MC02MjQxLTQ1M2MtYWQxYy1kODlmZWJkNGVhZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvYTQ3N2Qw
LTYyNDEtNDUzYy1hZDFjLWQ4OWZlYmQ0ZWFmMS8xL2RKZU5ralBTRF9JTkZod3M0
ODJUUU9RM3I2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDFnTANBgkqhkiG9w0BAQsFAAOCAQEAgZS1+3zhPiC8
gfEsz1iaIohqzrbh7X2BUwDyG6UKMiQylcdLyaTlvf0VkbN+46T0BBvlemTsovyo
PR5autABB6gttmtKU4EWcLBWSJNeI0FbfcjHZ6REd2mb3ewe4eMTOfS737MPuOWQ
QsHmNYZ9KiHhf12XWm+GG7Vp2sKGZXF7OXXCILYEa8T3Sx8VTo5+Akca3Moj3cs0
zvDqT2G8ltxlXMJeuRNaTzZQJG5SuQfYZlajDKYzMrNwO8+pb2sC1y1poWG5PjNS
hTAxJYlr09LRwyMSoUzt7TuBxz/LfCeDnPWVCwnrQB4FbELHLf+GQGwPavKMIUQu
dZMgRbz5WA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:42 2025 by rpki-client