Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer
File:                     1-N164S0qN_IarG-Btq9n1mF8oo4.cer (raw, json)
Hash identifier:          RT6EC20qYoeI8YHZ+l5gx4t13PAUh9oKcjcbTZJ/oj8=
Subject key identifier:   F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195D1C80D5F1424C2302F88539D63602FD9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 26 Mar 2025 09:28:23 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59889
                          IP: 87.236.96.0/21
                          IP: 91.199.58.0/24
                          IP: 185.145.60.0/22
                          IP: 185.186.148.0/22
                          IP: 195.93.238.0/23
                          IP: 2a02:cc8::/30
                          IP: 2a0b:7d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d1:c8:0d:5f:14:24:c2:30:2f:88:53:9d:63:60:2f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 26 09:28:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:96:8a:de:fd:4e:7b:3d:f3:48:5e:72:3b:2b:
                    cc:a1:53:17:c7:b5:c5:47:71:9a:f2:33:03:cc:4f:
                    2f:9e:77:91:ae:85:76:01:aa:6e:ed:24:f6:6d:f2:
                    f4:86:76:81:93:df:d8:13:85:31:20:a9:e5:1b:9b:
                    0d:12:3e:48:a1:b9:84:27:45:87:64:16:ff:df:da:
                    d1:91:7f:f3:25:cc:88:fe:0d:b7:3c:82:25:86:7b:
                    ce:c9:c0:62:c7:8e:2b:5f:28:8a:78:76:32:36:1f:
                    4b:ed:ab:f7:17:c8:aa:ed:0c:53:12:31:71:9b:6f:
                    27:0e:d0:0d:ae:3e:41:5a:1c:a0:89:2b:68:8b:81:
                    0c:7a:ff:ac:12:34:58:6f:90:ae:08:d0:92:ce:9a:
                    26:c0:9d:93:19:f1:a9:78:45:d1:77:9f:e5:3d:12:
                    8a:3e:9f:ec:72:90:40:b3:27:f8:df:87:53:f5:d5:
                    e1:4b:e5:df:2a:ec:16:f7:e8:58:f1:0f:e3:af:13:
                    36:ac:f9:07:d7:8a:70:27:d7:e4:47:0e:02:9d:1d:
                    9c:bb:a6:20:a4:ba:58:d6:8a:14:5b:56:b8:5e:81:
                    7f:4f:16:40:d8:85:8f:0b:4c:eb:be:a4:12:af:28:
                    ad:ee:45:c3:86:1e:ad:d7:bd:69:a3:37:42:5d:5a:
                    da:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.96.0/21
                  91.199.58.0/24
                  185.145.60.0/22
                  185.186.148.0/22
                  195.93.238.0/23
                IPv6:
                  2a02:cc8::/30
                  2a0b:7d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59889

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:83:9a:f4:74:59:47:7b:4f:85:71:38:99:29:37:d5:6e:
         ba:d3:99:76:68:bf:f7:78:b1:7f:7f:18:e3:1d:96:09:51:81:
         7f:2e:5c:76:c4:a3:2b:ee:aa:67:16:34:43:1b:96:1f:ae:f1:
         b9:41:ba:b0:8a:b9:cc:55:ed:bd:ec:3c:66:e5:bf:71:df:a4:
         80:37:97:08:7e:34:2c:95:0b:51:28:44:45:fb:5a:b7:82:4c:
         a0:60:df:34:0f:15:14:e6:d4:b7:9c:da:7d:41:60:47:74:18:
         28:a7:f2:53:71:c8:60:ae:07:42:e3:c1:d7:45:d7:92:ce:bd:
         f5:9c:ee:a7:66:57:50:a3:ee:7b:d7:93:5d:85:3b:a2:99:4c:
         1b:d1:e6:6c:60:96:19:9e:21:ec:fa:01:83:92:0f:4d:28:8c:
         3d:64:e4:a6:26:cf:7c:23:c9:75:ec:1c:28:fd:b5:3a:34:c9:
         e2:f3:83:24:9e:0a:1f:50:0f:5e:f6:9e:c6:87:11:38:6e:25:
         4e:8f:fd:6b:69:6f:e0:d5:af:d7:3d:46:8d:c8:27:6e:81:38:
         0d:a4:ca:35:79:7e:ee:b8:d4:9d:bb:5f:03:c9:87:db:c2:bb:
         0a:dc:00:c3:3b:94:68:3a:c1:eb:45:ec:c9:87:f9:e2:67:3b:
         5b:52:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net