Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jui-jqv5ec-RehdJR9n2s-DLGX4.cer
File:                     jui-jqv5ec-RehdJR9n2s-DLGX4.cer (raw, json)
Hash identifier:          wVGW6ZSnYWwylQFlzv87PdI5DlINl4Wi6mDt84QC5b4=
Subject key identifier:   8E:E8:BE:8E:AB:F9:79:CF:91:7A:17:49:47:D9:F6:B3:E0:CB:19:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856B637BE91318B4E14118B2B4ED190817
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/jui-jqv5ec-RehdJR9n2s-DLGX4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 03:32:40 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 109.205.62.0/24
                          IP: 2a11:8f80::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:63:7b:e9:13:18:b4:e1:41:18:b2:b4:ed:19:08:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:32:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ee8be8eabf979cf917a174947d9f6b3e0cb197e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:87:16:ce:54:c7:cc:20:d5:c5:c4:61:d7:
                    0d:95:1f:48:1f:0c:eb:f8:96:ce:e1:78:d3:6a:65:
                    2e:75:85:da:8f:77:99:d2:bd:c0:c6:8d:59:f5:b0:
                    d6:cf:cf:9d:5b:ea:d9:71:87:bb:5a:13:3c:18:5e:
                    03:f0:3b:68:8e:5c:24:c3:87:c0:cf:f8:7f:3b:56:
                    66:d9:b2:08:f4:87:f4:5c:85:9c:b3:8e:a1:a6:56:
                    33:f4:12:a5:1b:94:32:c4:fb:8f:b2:89:d7:40:c1:
                    f4:3f:05:6c:a3:75:ae:fe:f4:8a:71:bd:d4:8c:69:
                    51:9e:79:41:3d:75:0a:f0:35:fb:ee:f2:ae:e3:8c:
                    cd:15:5d:ab:a7:5b:29:e9:50:21:50:75:12:50:92:
                    c0:14:ec:68:40:7b:1a:01:39:cf:5a:eb:96:76:3a:
                    6c:68:ac:5d:1f:af:8a:5a:ab:70:d1:5c:d4:dc:c9:
                    ee:ae:1d:a3:a7:4e:68:c2:9b:f5:c8:46:ab:d9:4e:
                    4c:a7:18:40:05:b1:98:95:59:a6:5b:45:85:56:66:
                    b8:58:6a:2a:52:d0:1f:5c:af:2a:96:f5:32:ff:60:
                    c6:54:c2:0d:21:34:53:2e:a5:0c:34:27:e2:5b:4a:
                    f1:6a:51:61:58:8a:bc:9a:83:ed:cb:8b:79:10:e9:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:BE:8E:AB:F9:79:CF:91:7A:17:49:47:D9:F6:B3:E0:CB:19:7E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/jui-jqv5ec-RehdJR9n2s-DLGX4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.62.0/24
                IPv6:
                  2a11:8f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:99:7e:db:8a:c5:ed:a4:3b:68:3b:10:ec:7c:f4:09:95:18:
         4e:23:68:ab:a1:35:8a:1a:76:2b:b2:08:51:f2:3e:90:d6:54:
         72:13:e6:21:c6:bf:19:27:28:3e:b1:b2:24:26:81:19:e3:c9:
         1d:09:2d:2f:2c:d5:c2:32:ca:0b:1a:dc:fc:ee:e3:68:e6:27:
         1a:0f:df:cc:dd:e6:8a:bc:42:eb:bf:c9:37:82:b9:46:a0:d3:
         4b:45:b9:03:1d:ea:d0:5e:43:e2:57:b4:9e:cf:31:58:fc:d6:
         63:11:74:4e:06:41:1c:f8:71:09:34:cd:3c:bd:d5:10:93:28:
         88:ae:7d:c8:f2:47:94:4a:a0:c4:1e:eb:67:be:4f:62:89:ba:
         a4:98:85:94:2b:64:57:f1:12:b5:cf:a0:82:41:3d:5e:4a:e6:
         70:61:d6:fa:87:f6:8c:75:04:66:ea:36:6f:aa:8b:ed:7f:de:
         00:8c:db:70:40:6a:95:76:33:2e:29:fd:0d:9b:9a:46:b7:2e:
         c6:22:af:7a:a3:8b:70:4c:43:92:e6:56:2f:4d:03:8f:92:e3:
         32:8e:a4:8d:57:60:67:ce:10:f5:73:6c:0d:62:43:70:92:44:
         54:39:c2:d0:9a:ab:22:36:41:02:f4:96:9a:57:08:74:51:c1:
         b8:ad:e1:98
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrY3vpExi04UEYsrTtGQgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWU4YmU4ZWFiZjk3OWNmOTE3YTE3NDk0N2Q5ZjZiM2UwY2IxOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXSHFs5Ux8wg1cXEYdcNlR9IHwzr
+JbO4XjTamUudYXaj3eZ0r3Axo1Z9bDWz8+dW+rZcYe7WhM8GF4D8Dtojlwkw4fA
z/h/O1Zm2bII9If0XIWcs46hplYz9BKlG5QyxPuPsonXQMH0PwVso3Wu/vSKcb3U
jGlRnnlBPXUK8DX77vKu44zNFV2rp1sp6VAhUHUSUJLAFOxoQHsaATnPWuuWdjps
aKxdH6+KWqtw0VzU3Mnurh2jp05owpv1yEar2U5MpxhABbGYlVmmW0WFVma4WGoq
UtAfXK8qlvUy/2DGVMINITRTLqUMNCfiW0rxalFhWIq8moPty4t5EOnRlQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFI7ovo6r+XnPkXoXSUfZ9rPgyxl+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzMwMTM3
Mi1kZGUyLTRlZTMtYWFhZC1jZTUxYmJiZTQzMTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMzAxMzcy
LWRkZTItNGVlMy1hYWFkLWNlNTFiYmJlNDMxNy8xL2p1aS1qcXY1ZWMtUmVoZEpS
OW4ycy1ETEdYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAbc0+MA0EAgACMAcDBQMqEY+AMA0GCSqGSIb3
DQEBCwUAA4IBAQAimX7bisXtpDtoOxDsfPQJlRhOI2iroTWKGnYrsghR8j6Q1lRy
E+Yhxr8ZJyg+sbIkJoEZ48kdCS0vLNXCMsoLGtz87uNo5icaD9/M3eaKvELrv8k3
grlGoNNLRbkDHerQXkPiV7SezzFY/NZjEXROBkEc+HEJNM08vdUQkyiIrn3I8keU
SqDEHutnvk9iibqkmIWUK2RX8RK1z6CCQT1eSuZwYdb6h/aMdQRm6jZvqovtf94A
jNtwQGqVdjMuKf0Nm5pGty7GIq96o4twTEOS5lYvTQOPkuMyjqSNV2BnzhD1c2wN
YkNwkkRUOcLQmqsiNkEC9JaaVwh0UcG4reGY
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:22 2025 by rpki-client