Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.cer (raw, json)
Hash identifier:          j5Q2Yy5oZyjg4JbUNa2zMw1T6ApMn2hOL+fk+B609TE=
Subject key identifier:   7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194252236A51E308FE518A978407B056DC9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 31236
                          IP: 82.112.64.0/19
                          IP: 94.198.48.0/23
                          IP: 160.20.214.0/23
                          IP: 2a00:92c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:36:a5:1e:30:8f:e5:18:a9:78:40:7b:05:6d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:1a:0f:46:cc:6d:b6:08:31:39:b7:e8:67:
                    09:29:5f:e4:1c:9d:8e:7e:8c:2b:92:f7:32:35:9b:
                    d0:99:88:e9:79:d2:49:42:06:5c:fd:94:de:ee:e9:
                    ae:ba:ce:87:c7:6d:e1:4e:b4:4d:68:2f:ab:69:0f:
                    92:d7:32:bf:65:cc:c3:6d:90:be:23:fa:86:ca:38:
                    e2:16:7c:da:fb:86:c9:9b:d6:a5:f1:81:05:06:5d:
                    8a:d0:8a:e8:dd:c3:08:2c:18:ac:69:a5:95:ce:13:
                    fe:c5:5a:76:41:2a:4c:23:2b:21:33:f1:73:ca:d6:
                    fe:d8:95:af:c6:c6:21:e0:53:7c:16:df:b3:98:79:
                    40:c7:03:32:5f:a6:d0:3c:ba:de:6e:97:79:99:d3:
                    0e:ee:d6:4f:f8:6e:26:37:86:b6:8a:3e:8c:27:14:
                    d0:10:b3:68:89:6c:10:31:71:28:0f:9f:2b:fe:be:
                    df:d6:7d:2e:87:92:01:71:7a:fa:8e:aa:f2:b6:06:
                    55:26:51:13:69:84:03:17:fb:cd:db:f2:7a:c9:1a:
                    99:8a:94:d0:24:5c:66:71:fb:87:d0:e1:ba:e7:95:
                    5e:23:6c:5b:aa:d1:4f:0d:19:84:d8:62:5e:88:3e:
                    9c:5f:a4:10:af:f7:07:3d:46:33:ee:6b:9e:41:0d:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.112.64.0/19
                  94.198.48.0/23
                  160.20.214.0/23
                IPv6:
                  2a00:92c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31236

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:5e:f1:24:a9:8d:53:be:9b:11:09:12:57:d1:07:14:57:
         03:97:93:38:a5:5b:bd:4a:14:ca:59:30:eb:ca:c8:68:35:1f:
         52:92:06:14:93:6c:87:ed:0e:74:23:39:69:97:2a:b0:18:0a:
         a4:8c:70:37:5b:27:1c:85:46:db:55:33:17:24:36:55:a2:61:
         f4:fc:43:6c:44:91:b8:ef:46:08:ff:d6:37:bc:20:c4:83:b1:
         20:39:f2:85:4d:68:e6:54:7a:70:80:4f:a0:bb:e1:0e:fe:a4:
         4b:f3:27:f9:4e:f1:33:97:47:13:ff:00:0e:31:d2:eb:c8:d4:
         13:2f:1a:aa:9b:d8:03:64:6b:de:2b:8e:1d:d6:e9:c3:e4:b6:
         e0:6c:35:58:04:39:92:02:d2:91:1e:98:e8:3f:2c:a0:06:88:
         c6:a0:6b:7e:a8:2e:e7:ad:75:ef:06:1d:6a:98:73:16:69:12:
         e2:fa:31:9e:a4:33:b1:bb:61:9e:2b:65:4d:b0:c4:2e:15:8f:
         72:b1:61:61:90:46:2c:65:4f:30:e2:9a:64:26:a0:c8:e5:8b:
         d7:09:5e:e7:00:4e:2d:69:63:c5:0b:21:53:e1:2e:e4:8f:d1:
         ed:22:09:d7:10:4a:ee:ca:cd:e1:97:8a:af:5e:3f:09:8a:12:
         c2:66:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:13 2025 by rpki-client