Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
File:                     zEa__4uQ43SFVboUR_1O3sw0ChM.cer (raw, json)
Hash identifier:          voyfuMfscfTOZMHgNjiKp2+BbAt7d8jpwQV8Lzq+Nu8=
Subject key identifier:   CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258F592E7F23F53F2697AD3A38EE2EA6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 57222
                          IP: 195.162.4.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:59:2e:7f:23:f5:3f:26:97:ad:3a:38:ee:2e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:b1:d1:76:0f:4f:5e:5c:5f:c4:46:e0:8f:
                    d7:bd:96:bc:1a:79:0d:12:9b:2f:e7:a7:23:2f:6a:
                    34:0a:95:59:f1:61:fb:85:c0:f9:fe:54:de:70:25:
                    86:2e:92:0b:93:8e:ec:b3:cc:7b:de:85:f0:64:5d:
                    6b:cc:43:08:67:f3:f2:60:a6:85:2a:97:25:09:6d:
                    cf:ab:35:80:55:31:41:fc:83:ab:d1:68:2b:f8:46:
                    9c:2d:c9:b2:1f:65:7e:2e:1d:d9:e8:ca:f6:57:30:
                    05:88:f3:5e:2d:4d:4e:19:d8:ce:a7:25:95:31:32:
                    7f:b3:be:97:95:d4:a8:c5:fb:cb:3a:9f:22:5a:0a:
                    ef:4e:7c:31:7d:1b:d8:ec:b7:4c:61:43:de:e6:5a:
                    6a:f4:b9:ec:a7:c4:17:f9:38:88:9c:df:3b:ec:47:
                    79:00:c2:02:14:bf:b0:12:6e:f5:73:c7:2d:7c:41:
                    3d:c6:6e:95:9e:04:d4:77:fe:1c:70:c7:20:bf:17:
                    c6:5d:42:87:77:a3:37:b7:54:5f:d5:71:fe:3f:08:
                    66:90:0a:1b:32:89:0d:01:cb:5a:47:1c:50:54:6b:
                    8f:e3:ff:50:df:72:98:6c:67:35:fe:df:48:a2:ef:
                    ea:77:0c:ae:d5:b0:8f:57:d8:f1:a9:62:79:13:fe:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.162.4.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57222

    Signature Algorithm: sha256WithRSAEncryption
         69:22:0c:39:0f:08:a4:5b:f8:f7:92:09:8b:e0:2a:3e:cb:d2:
         31:b0:69:6d:fd:34:e1:98:ea:fa:6a:d9:24:b1:24:6e:82:bf:
         68:3b:f5:a3:40:f0:06:72:72:37:a2:28:84:4c:03:53:30:7b:
         93:eb:26:73:40:38:56:30:ff:47:7c:14:b8:e4:60:2f:c3:f6:
         54:23:05:a8:e2:b8:68:9b:d3:f2:98:3c:49:68:fe:c5:3e:8e:
         0e:c1:97:ce:6e:06:bf:ba:5b:39:3f:76:e8:6a:a2:75:9e:bc:
         0c:3c:92:ce:d7:b9:d7:64:55:5e:45:83:1c:0c:aa:49:4f:fd:
         1a:e8:2d:a3:a5:7b:47:fe:0e:0b:77:61:db:98:9b:80:de:87:
         28:07:34:ad:f2:fa:4b:b9:3c:62:0a:ae:34:65:4a:75:77:40:
         1d:21:4a:55:1c:db:75:fb:90:28:51:a8:fb:ae:ce:38:64:dc:
         1a:63:e8:25:74:18:06:db:c8:3b:57:62:40:57:69:05:a2:c9:
         50:ba:67:b0:d0:c3:ef:f1:31:18:d5:bd:63:89:ee:81:a2:44:
         57:81:28:97:75:cf:1b:e6:96:af:cd:94:da:de:16:3e:6f:86:
         90:24:1b:4f:18:53:60:b0:23:e3:7e:cc:2d:b1:51:10:8e:3e:
         48:82:d5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:17 2025 by rpki-client