Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
File:                     wV59e7ae-ssMc5ApcsdNctKb938.cer (raw, json)
Hash identifier:          SiO9HWZLnyJ/ttopagvLPiBu6wTFVcl/s0X/NIsnA2s=
Subject key identifier:   C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942369D36378D74C70C860F19781D7E7E0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 19:48:45 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56789
                          IP: 45.144.196.0/22
                          IP: 93.190.124.0/24
                          IP: 146.19.192.0/24
                          IP: 185.102.168.0/22
                          IP: 185.238.128.0/22
                          IP: 193.110.189.0/24
                          IP: 2a06:25c0::/29
                          IP: 2a09:4800::/29
                          IP: 2a0f:d440::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:d3:63:78:d7:4c:70:c8:60:f1:97:81:d7:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 19:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:bc:0e:16:86:b8:8e:9c:02:98:a7:f0:16:
                    80:e0:d6:d0:cd:f0:bc:de:c5:91:ef:eb:77:1b:97:
                    a7:36:db:ce:71:ed:f8:5c:bc:46:5e:e7:67:06:09:
                    c2:9f:7b:0b:43:01:17:4d:2d:73:d1:6f:be:b6:f3:
                    89:96:0f:fd:90:61:cd:01:b2:12:ed:41:71:09:72:
                    85:6b:14:94:bf:77:e5:ca:bd:41:7a:a3:f8:19:41:
                    dc:41:cd:80:f4:86:fc:51:35:b1:dc:33:eb:65:22:
                    c2:91:b0:d1:1a:cf:7a:55:13:83:02:6c:bf:b2:02:
                    ef:45:3b:dc:bf:18:2d:5f:9e:8d:27:07:2c:c2:50:
                    e2:4a:a8:9a:31:12:92:fc:dc:87:19:42:32:a1:4b:
                    a0:bf:ed:63:3c:18:6e:d6:b8:72:ba:0e:98:5f:ef:
                    8f:fe:f1:51:a4:a1:f9:59:b3:90:9e:52:2e:18:8f:
                    6d:a8:7d:f8:43:d5:b6:8d:54:87:e6:32:cd:ee:a0:
                    32:34:4e:1e:a4:91:39:54:95:3f:18:5e:28:1d:a0:
                    3e:cd:39:6c:d7:39:e1:1f:34:e7:e1:5c:1f:27:f7:
                    76:2f:83:18:d7:e2:bf:42:34:77:7d:28:80:13:e7:
                    1b:77:42:aa:d2:23:42:4f:d6:0e:18:ff:45:45:e4:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.196.0/22
                  93.190.124.0/24
                  146.19.192.0/24
                  185.102.168.0/22
                  185.238.128.0/22
                  193.110.189.0/24
                IPv6:
                  2a06:25c0::/29
                  2a09:4800::/29
                  2a0f:d440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56789

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:c2:16:0b:35:b1:e2:65:f7:7a:06:78:d8:e2:a4:8b:01:
         c2:ad:8c:98:85:1c:2c:3f:91:23:a6:49:dd:b4:ea:ac:1b:42:
         15:d2:4a:70:01:ea:5d:9b:7a:b6:26:d8:21:46:dc:1f:9d:ce:
         ea:46:72:15:00:b5:cf:e3:39:34:3c:95:d5:03:6e:0a:31:65:
         50:8b:6a:af:f0:22:36:ef:09:fe:43:e9:a7:28:97:fa:60:02:
         bc:31:58:17:4b:1e:9e:54:e6:57:06:6c:c6:88:7e:34:ec:5c:
         b7:20:9e:37:4e:0d:ce:a7:fa:b3:05:2e:2d:60:c4:de:cc:e6:
         a1:fc:ab:0c:eb:de:c0:da:40:03:de:54:cf:bf:36:7a:16:96:
         04:76:ac:46:fd:94:98:02:3b:79:87:7a:49:43:7b:e9:bd:ab:
         97:9b:da:5e:ee:59:f6:ff:ef:0a:e7:e3:69:8e:49:d1:b5:8c:
         ef:4a:36:04:89:c8:4d:4f:f4:e9:a0:5f:62:18:0d:72:82:6c:
         7b:90:36:d3:01:41:b9:14:9a:d3:36:47:81:31:5f:4b:67:b9:
         11:5a:b4:3c:32:36:93:7e:f6:91:76:8e:d2:74:56:ae:a7:77:
         8c:2b:56:a4:93:41:1a:2c:d1:ab:fe:3b:a1:fd:b5:65:d9:c4:
         a6:91:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:57 2025 by rpki-client