Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
File:                     15dPQ3RodlWDV_H7kcOFKlg6FFM.cer (raw, json)
Hash identifier:          3BCktcU6VNWeeqwxWkpSuZjqtGfqFU8qyXjo/eEhtJo=
Subject key identifier:   D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3A9A97E49EC0657A75ECCF57CFA0A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:01 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 44418
                          IP: 81.161.59.0/24
                          IP: 91.199.104.0/24
                          IP: 91.220.75.0/24
                          IP: 195.189.155.0/24
                          IP: 195.210.4.0/23
                          IP: 2001:67c:eb4::/48
                          IP: 2001:67c:1438::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:a9:a9:7e:49:ec:06:57:a7:5e:cc:f5:7c:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7974f43746876558357f1fb91c3852a583a1453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:0c:0f:b1:5d:fd:c6:68:e2:94:2b:88:5c:
                    9c:af:30:cd:1a:e6:87:7f:60:22:09:ad:86:cb:88:
                    e3:30:f3:77:fb:ea:ae:1b:4a:1f:c7:6e:c1:dc:55:
                    d2:a9:8f:d5:ac:eb:0b:ae:ce:1e:cc:ab:4a:7e:c2:
                    49:5b:28:b1:9b:ae:df:c2:88:59:0e:b9:8a:c0:13:
                    e6:24:ba:da:d9:c9:ea:a1:b0:01:73:84:8d:69:f2:
                    10:d5:da:0b:42:bd:61:8a:b5:67:d3:40:f3:a2:1f:
                    0b:96:f3:03:1e:ea:94:ca:94:81:72:10:b3:ce:aa:
                    e7:55:51:32:a8:b4:39:6f:e0:45:bc:f7:b2:ed:57:
                    e6:e8:0b:bb:89:3c:03:a2:83:78:d2:ac:01:94:d3:
                    8c:cc:81:d8:07:2e:72:1c:9c:d1:45:35:4f:be:f6:
                    6a:d3:a2:cf:fa:5e:aa:59:a8:b7:2c:5c:dd:26:30:
                    69:22:ba:f7:a8:1c:17:5d:7a:3a:90:17:47:9f:77:
                    d3:d6:6e:78:3b:2b:20:06:75:58:15:1a:cd:1a:99:
                    7e:51:05:47:91:bc:e7:62:7a:f4:ae:30:74:18:8d:
                    89:2e:1a:4d:b2:90:41:2b:6e:ef:91:6d:a4:6c:01:
                    8d:7e:81:3e:1e:06:00:28:36:87:b1:83:87:7a:f9:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.59.0/24
                  91.199.104.0/24
                  91.220.75.0/24
                  195.189.155.0/24
                  195.210.4.0/23
                IPv6:
                  2001:67c:eb4::/48
                  2001:67c:1438::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44418

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:6c:52:e7:5a:ba:19:64:1c:77:14:4c:f5:8b:4e:18:a8:
         fd:1b:c1:35:a6:63:b1:cf:de:56:76:cb:7f:b5:a3:70:09:f4:
         8e:16:db:30:0f:08:d5:cc:fe:e1:ff:ae:1a:f3:f5:91:54:bb:
         1b:71:0a:2d:b3:8a:13:f0:5b:19:4d:c4:c0:05:08:dc:99:99:
         c0:f9:69:96:d2:69:7b:b6:b3:23:71:36:1d:e4:cf:1a:df:61:
         3c:97:cf:ec:6d:ca:25:07:4f:6f:94:c8:7f:21:da:b5:c6:cd:
         d1:0b:c4:af:8c:68:78:26:a5:29:8b:26:3a:04:d4:3e:98:d1:
         fb:55:b3:a4:42:3e:2c:d0:0a:ee:74:9c:f7:b9:fd:f5:fe:2c:
         7b:bf:e3:70:59:4e:ce:1f:05:40:37:d6:8a:e6:79:e1:c2:62:
         2c:c7:a1:29:85:e1:fa:43:60:47:3b:b9:5b:80:db:7f:fb:4a:
         84:ec:8a:bf:c1:e6:ed:64:c7:2d:31:27:83:a2:df:56:48:8a:
         68:aa:05:ff:eb:9d:ca:da:67:55:9c:f6:de:6e:a2:90:98:a7:
         51:eb:e1:a6:c9:7b:2a:a8:5f:36:49:f4:b9:41:ac:a8:e4:9b:
         c4:34:c9:e4:5a:af:f8:83:3c:04:6a:f4:db:50:8c:82:a1:a8:
         72:0e:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net