Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.cer (raw, json)
Hash identifier:          Jtz91A6H/8Gxned/hu7wK+6RpmJ4YRND7YXZCqr9WMM=
Subject key identifier:   B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FFD335B8F5E38EB702782FE656C15
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:29 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50564
                          IP: 45.66.212.0/22
                          IP: 45.131.28.0/22
                          IP: 45.158.216.0/22
                          IP: 94.158.252.0/22
                          IP: 185.44.24.0/22
                          IP: 185.95.124.0/22
                          IP: 185.104.236.0/22
                          IP: 185.143.136.0/22
                          IP: 185.182.124.0/22
                          IP: 185.184.0.0/22
                          IP: 185.208.20.0/22
                          IP: 185.213.48.0/22
                          IP: 2a04:9900::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:fd:33:5b:8f:5e:38:eb:70:27:82:fe:65:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:10:16:33:b2:92:2a:8e:7d:84:50:de:e5:
                    03:e3:86:a8:b1:52:11:6f:a4:02:21:54:63:82:7b:
                    35:07:39:50:da:93:8e:c0:01:e1:f0:c9:5b:9e:dc:
                    f7:6a:9c:bf:fc:58:52:8b:30:45:b2:43:d8:2e:35:
                    88:f3:3f:d4:37:b2:36:70:8d:d0:a2:7a:74:40:cf:
                    8e:ae:33:03:a5:fb:34:e8:b9:b1:4d:99:ec:56:27:
                    33:ea:d4:7a:d2:38:f8:bb:65:10:30:ed:b1:89:6f:
                    b8:25:6c:c1:9b:99:14:78:fc:2e:b9:62:c5:a2:9d:
                    cf:35:80:c3:1d:6e:54:75:af:da:ef:95:bc:be:a5:
                    0c:1c:58:46:ca:1b:ee:80:19:96:01:64:19:db:cb:
                    b3:9e:0e:39:76:3f:f9:a5:6a:4e:e0:bd:cb:f6:1a:
                    ce:b3:3b:c3:f4:28:d8:13:b6:d0:24:f2:4c:89:aa:
                    63:89:cf:49:85:42:1f:b6:40:5f:89:78:b6:d7:a9:
                    37:ea:b0:af:e8:00:1c:00:cf:60:4d:a4:7d:c8:66:
                    2b:24:ba:ff:55:1e:e2:01:f2:67:f7:7d:d4:4f:55:
                    76:b3:b5:62:4d:8c:e4:35:5b:e2:6c:e0:7b:8a:5f:
                    bc:32:88:f8:ba:1a:b3:28:f2:53:3d:24:23:7b:e0:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.212.0/22
                  45.131.28.0/22
                  45.158.216.0/22
                  94.158.252.0/22
                  185.44.24.0/22
                  185.95.124.0/22
                  185.104.236.0/22
                  185.143.136.0/22
                  185.182.124.0/22
                  185.184.0.0/22
                  185.208.20.0/22
                  185.213.48.0/22
                IPv6:
                  2a04:9900::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50564

    Signature Algorithm: sha256WithRSAEncryption
         82:44:eb:79:65:04:7d:77:bc:83:89:81:3b:18:65:59:3e:0a:
         bb:9e:a4:70:c4:03:8f:22:ca:35:42:06:6d:e0:cc:50:6e:1a:
         0b:e7:25:43:4b:5e:35:5a:dd:d4:92:00:ac:02:0c:1a:3c:28:
         b3:6b:90:16:98:fe:01:84:db:3e:f5:ee:04:09:c8:59:09:2b:
         0c:9b:6f:fb:2e:0a:69:ed:67:02:58:01:7f:a8:78:2a:a0:3e:
         b5:af:85:b3:ad:06:4a:91:11:25:82:f0:40:b3:b4:d3:4c:c9:
         af:90:e6:71:8e:71:85:45:ea:ec:4a:ca:d6:44:51:08:1f:ed:
         13:99:5f:be:cf:65:64:de:4c:50:a2:0c:fc:59:65:f7:79:6d:
         d8:4a:e6:39:3a:02:9e:fc:82:24:1d:a7:e9:6e:42:65:1e:9d:
         b2:0a:37:3b:08:55:9e:7d:d4:08:db:ad:54:18:79:17:8f:ca:
         27:8c:ea:e8:00:6e:0f:b8:53:0b:7b:96:56:8a:69:f7:82:86:
         11:d1:1b:71:00:fd:42:b9:2b:1e:84:53:50:4b:1d:88:44:35:
         96:16:6e:58:bd:48:10:48:1c:1a:78:56:2d:69:4a:75:c0:71:
         f5:66:c1:43:89:04:88:cf:fd:57:50:d1:86:e4:c6:9b:f6:ff:
         0c:40:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:05 2025 by rpki-client