Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
File:                     0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer (raw, json)
Hash identifier:          16DfwYF7oxi54KzNdaETReHyMVsukyd1tHovhLRIFTU=
Subject key identifier:   D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D728BDE2AC47435076DBC13CB0F6E1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 207788
                          IP: 195.43.159.0/24
                          IP: 195.47.210.0/24
                          IP: 195.47.212.0/24
                          IP: 195.47.216.0/24
                          IP: 2a0f:b6c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:28:bd:e2:ac:47:43:50:76:db:c1:3c:b0:f6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d248185956e443b55b062200f964537bc10bc130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:a3:4b:37:7b:0a:a5:e8:e4:d1:0b:a1:36:
                    66:92:51:60:fb:8e:7e:ad:46:98:fb:35:0d:2b:c6:
                    2f:c6:2a:e5:f1:3b:6e:83:e5:91:9b:1b:3a:b1:91:
                    d0:b3:4d:1b:ab:6d:c0:ce:58:e2:b7:34:79:2e:35:
                    d0:48:4d:af:d5:56:f4:56:d9:67:65:97:e1:c7:0d:
                    a2:79:7e:c4:5d:6f:73:e0:91:64:99:5a:eb:db:15:
                    e1:a3:e7:3a:9a:e6:8a:fc:07:93:da:65:9e:cf:f8:
                    a7:ee:bd:55:f6:9a:38:6f:13:0a:56:c7:34:66:53:
                    f6:5e:11:7a:49:d3:4a:06:1a:e9:18:de:e7:59:60:
                    a0:09:7e:57:44:01:9f:e6:ea:72:21:98:63:73:9f:
                    1c:e1:8d:89:0d:76:57:b2:c1:d2:5a:91:54:ec:f0:
                    02:2c:4b:80:4d:eb:6a:3b:13:e5:b3:21:60:0a:3b:
                    9b:84:90:be:94:40:ed:29:ca:93:04:67:38:63:ca:
                    72:3a:b7:a7:70:a5:a2:e7:7e:80:0a:3f:2b:43:0b:
                    2a:9d:63:2e:51:6f:03:70:b0:bf:17:64:a2:fc:e3:
                    a5:d7:ca:67:98:dc:3a:ef:de:66:eb:5e:13:e8:fd:
                    35:0a:46:00:22:fe:26:ec:d5:7d:fc:58:99:e8:c8:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.43.159.0/24
                  195.47.210.0/24
                  195.47.212.0/24
                  195.47.216.0/24
                IPv6:
                  2a0f:b6c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207788

    Signature Algorithm: sha256WithRSAEncryption
         90:46:ab:b4:4e:3b:b8:fa:eb:18:c8:59:82:ef:df:4d:ca:81:
         ec:4e:91:04:94:19:de:69:f2:8c:82:ca:95:75:f8:42:3a:b5:
         3d:74:b9:e5:73:d2:ad:c7:bf:ac:78:0a:ad:64:0e:3a:a0:4e:
         cd:6c:dc:6b:a5:4d:e2:62:dc:28:b4:e8:71:32:f9:b4:52:4a:
         23:9d:69:76:2d:cb:3e:23:de:d5:ff:f7:75:17:30:de:01:bc:
         24:c2:c3:f3:7c:3f:4b:a6:20:d2:36:91:26:b3:4d:b0:be:7b:
         98:4a:64:4d:fc:4e:17:ca:e8:64:f6:e6:57:40:3b:ab:a9:df:
         1e:2e:2b:20:d7:4d:d9:fc:a3:34:67:37:b6:80:c7:1f:70:4e:
         35:95:52:cd:8a:3e:47:6f:29:6d:d7:85:f0:49:81:54:49:f3:
         d6:6c:9c:6a:86:24:a2:e0:98:fd:b4:e7:98:b5:85:d4:5e:99:
         ff:34:95:9f:28:72:df:af:9c:7b:48:4f:c6:a9:62:5f:34:68:
         bb:a0:f9:ea:73:4b:0a:4d:49:f5:7a:d4:7e:c4:23:37:f6:a0:
         bd:fc:29:ba:a4:e8:15:58:92:3a:39:bb:ce:79:0e:ca:8e:ad:
         6b:e0:ad:6d:97:1f:9d:d5:07:80:51:df:83:df:31:d3:00:91:
         e8:ce:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net