Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
File:                     hUyBdtnELHBLMQkTMJRwNRu1meU.cer (raw, json)
Hash identifier:          u56E+sohGPK80ITXwxoPveiGW2R70GwnKkNfCbUlYqY=
Subject key identifier:   85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194274781D17F4DEF5E73E3E67CB45EE699
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:49:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 6768
                          IP: 45.14.108.0/22
                          IP: 2a01:4a60::/32
                          IP: 2a0e:c080::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:81:d1:7f:4d:ef:5e:73:e3:e6:7c:b4:5e:e6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=854c8176d9c42c704b310913309470351bb599e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:66:63:a1:aa:b5:75:40:e6:7c:4d:32:5d:
                    ea:de:ba:e5:1a:47:d6:48:fb:86:90:11:1b:0a:2d:
                    28:6c:b2:2d:fa:42:63:ba:ef:82:fe:45:1a:4f:cf:
                    d3:39:d7:80:c4:b2:3c:d5:5f:b3:15:13:1c:53:5b:
                    79:a7:44:41:0c:60:85:06:c6:e3:25:a4:43:5a:02:
                    d9:e6:0d:a9:57:25:df:43:f4:6c:e3:4f:61:12:a4:
                    a9:23:e6:06:7a:56:af:5b:40:40:af:ce:a3:a8:bd:
                    a2:c7:fe:57:11:cd:e1:af:f3:00:66:3d:b5:64:0a:
                    9a:a3:1d:5e:85:b3:77:f6:6e:e2:d1:6e:de:ad:9d:
                    2b:0e:a9:67:04:86:e4:d1:f3:b3:62:3a:0f:2f:c1:
                    5a:c0:5d:b2:c6:6a:0f:9d:f5:54:a7:d2:6f:74:b9:
                    05:6f:38:fc:af:a2:45:4f:66:18:69:af:9e:7c:f7:
                    bc:73:d8:3b:aa:98:43:49:bd:2a:8d:b5:52:ce:82:
                    ae:96:23:7c:89:ed:21:9e:ae:2a:a2:36:a9:3a:72:
                    5f:02:40:1e:de:24:7f:db:32:36:db:26:52:ad:49:
                    9c:04:aa:f2:3b:ef:ce:98:78:35:09:d3:e2:f3:9b:
                    b4:dc:99:4f:18:7c:f5:45:fd:d5:d0:89:38:df:7e:
                    a8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.108.0/22
                IPv6:
                  2a01:4a60::/32
                  2a0e:c080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6768

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:5c:87:c7:c6:67:68:21:d9:d2:ee:48:ae:a3:d3:c9:fa:
         cc:fb:90:c1:b4:82:8f:66:c4:4d:51:95:0a:39:d9:dd:3b:11:
         7d:38:b2:23:c7:66:a6:0f:af:0a:5d:24:7d:98:07:46:05:15:
         bd:7c:76:ae:f9:74:f8:c5:bb:9e:dc:41:ab:bb:36:a7:48:18:
         da:89:1e:d8:d6:f7:de:c6:c3:70:29:5e:bf:61:b2:53:4e:00:
         af:e7:61:f7:d5:82:fb:56:1e:79:4d:0e:e2:0c:b5:16:9a:9d:
         e2:3a:05:4d:1d:a2:f3:bd:5b:4e:18:ac:cd:5d:1a:68:3c:8a:
         7d:41:53:90:c7:c8:c6:0c:77:f9:2a:4f:6d:6c:ec:85:32:b5:
         6e:1a:9c:7d:7c:c1:53:54:c2:09:c3:1e:9f:31:21:da:cc:8d:
         fb:41:d3:51:46:80:b0:12:8c:47:bf:33:b5:5c:79:a6:6b:98:
         77:b6:bb:72:ac:6d:35:36:a4:05:1f:6e:5b:b9:ff:cb:c4:aa:
         83:41:f5:ac:a9:d1:fc:86:89:44:ed:75:e0:7a:18:43:18:b2:
         20:7f:03:74:0b:59:07:80:ca:b8:2e:0a:7a:6c:ca:50:b1:83:
         4d:21:b9:b6:42:7d:3a:6a:64:93:63:51:58:b0:f4:ee:74:d2:
         96:03:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----