Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
File:                     19sTK0fI7dg_7QLVYedQYEwgsfg.cer (raw, json)
Hash identifier:          ILObMMl8CRACEec8y8JKXxMHGr51qMlXmN6PBVg7h7s=
Subject key identifier:   D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194221FE00FE3E85CA8216868569D531EDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 13:48:21 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 59719
                          AS: 199188
                          IP: 176.124.191.0/24
                          IP: 185.97.160.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e0:0f:e3:e8:5c:a8:21:68:68:56:9d:53:1e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 13:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:5e:ca:d4:c8:da:25:6c:35:e2:35:e3:6b:
                    1f:c4:83:db:ff:f2:37:5f:f2:c2:19:fd:ef:73:c0:
                    6b:57:81:f3:0b:e5:58:27:bd:3e:31:be:b5:0d:83:
                    a1:74:76:95:54:e4:e0:96:a7:20:9c:75:26:8f:88:
                    c0:da:16:a5:e1:0c:d3:cc:8d:93:52:f0:47:ec:63:
                    4a:be:01:fd:e0:eb:19:82:18:9c:e8:77:37:f4:ba:
                    48:ed:ac:ef:b4:2b:0c:3e:55:bd:97:da:c9:5c:c9:
                    71:83:f3:99:b1:c9:80:a0:5a:72:6f:31:91:bd:cd:
                    c4:fe:c0:62:67:7d:e4:2b:ea:10:cd:3c:1f:67:7d:
                    8b:74:59:88:b4:4f:fe:0f:ca:94:1e:9d:a1:88:dc:
                    a5:a6:f7:ad:11:96:67:3a:55:59:3f:83:1f:12:0f:
                    af:8e:ef:77:77:4c:0a:e5:c7:27:b8:2d:da:b3:d3:
                    f7:b1:d5:3c:ba:ed:14:2e:f4:17:ce:ed:b0:6e:f7:
                    81:14:62:88:9f:c4:15:ed:84:f9:80:46:0b:a0:2d:
                    ba:87:09:00:9d:ef:75:d4:2d:9f:fb:d3:a2:62:39:
                    fd:b6:5d:aa:3d:26:d0:d4:26:74:7d:8c:8b:39:15:
                    56:76:f7:7e:bb:2e:d4:a2:51:fd:53:1b:de:0a:eb:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.191.0/24
                  185.97.160.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59719
                  199188

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:a9:37:4b:04:dd:4b:d6:04:e2:ed:dd:d0:6f:f5:ec:79:
         d1:53:36:6a:76:92:4e:9f:c8:53:16:b0:a9:c9:38:c4:89:06:
         a8:70:ec:a1:e0:2a:e0:c6:9f:a8:67:66:d9:ee:4b:d2:26:b1:
         31:4e:ee:1e:74:02:ca:0a:62:0e:56:93:02:52:8f:6f:8b:bf:
         dc:63:ec:c6:c7:a1:a0:e0:30:33:30:a2:51:32:36:f3:ce:e6:
         a9:36:43:e7:ed:2d:7a:3c:a0:1d:c4:38:26:1a:f0:e4:0f:b7:
         46:52:5c:79:c6:34:89:56:9e:2b:2b:5a:ac:50:b1:79:38:93:
         53:81:cf:0c:ad:ea:1a:74:f4:dd:47:0b:87:5f:45:44:8d:2f:
         2f:08:75:20:58:68:ed:8e:36:54:b3:7d:61:5b:68:e2:2b:e9:
         26:cc:4a:fa:4f:3c:c4:08:f6:1b:ae:49:8b:41:0d:a0:37:77:
         4d:77:c6:a0:96:4f:85:f0:43:43:a7:69:e9:59:b0:c8:f8:a3:
         b8:78:67:c4:7b:93:03:ee:35:e6:c2:f3:8d:33:fd:06:78:82:
         95:5a:45:49:95:4c:93:38:3d:b8:38:72:f4:a2:0a:f6:44:bb:
         6c:6a:80:6f:ff:b6:fe:ed:0b:10:7a:5c:30:6f:03:7f:14:42:
         74:89:51:b0
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZQiH+AP4+hcqCFoaFadUx7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2RiMTMyYjQ3YzhlZGQ4M2ZlZDAyZDU2MWU3NTA2MDRjMjBiMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgNeytTI2iVsNeI142sfxIPb//I3
X/LCGf3vc8BrV4HzC+VYJ70+Mb61DYOhdHaVVOTglqcgnHUmj4jA2hal4QzTzI2T
UvBH7GNKvgH94OsZghic6Hc39LpI7azvtCsMPlW9l9rJXMlxg/OZscmAoFpybzGR
vc3E/sBiZ33kK+oQzTwfZ32LdFmItE/+D8qUHp2hiNylpvetEZZnOlVZP4MfEg+v
ju93d0wK5ccnuC3as9P3sdU8uu0ULvQXzu2wbveBFGKIn8QV7YT5gEYLoC26hwkA
ne911C2f+9OiYjn9tl2qPSbQ1CZ0fYyLORVWdvd+uy7UolH9UxveCuvqAQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFNfbEytHyO3YP+0C1WHnUGBMILH4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzE4MjYz
Mi02M2M1LTRlOGUtYjI5OS1hMDQ2MDM3MDk1MTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMTgyNjMy
LTYzYzUtNGU4ZS1iMjk5LWEwNDYwMzcwOTUxOS8xLzE5c1RLMGZJN2RnXzdRTFZZ
ZWRRWUV3Z3NmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAsHy/AwQCuWGgMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwDpRwIDAwoUMA0GCSqGSIb3DQEBCwUAA4IBAQAR5Kk3SwTdS9YE4u3d
0G/17HnRUzZqdpJOn8hTFrCpyTjEiQaocOyh4Crgxp+oZ2bZ7kvSJrExTu4edALK
CmIOVpMCUo9vi7/cY+zGx6Gg4DAzMKJRMjbzzuapNkPn7S16PKAdxDgmGvDkD7dG
Ulx5xjSJVp4rK1qsULF5OJNTgc8MreoadPTdRwuHX0VEjS8vCHUgWGjtjjZUs31h
W2jiK+kmzEr6TzzECPYbrkmLQQ2gN3dNd8aglk+F8ENDp2npWbDI+KO4eGfEe5MD
7jXmwvONM/0GeIKVWkVJlUyTOD24OHL0ogr2RLtsaoBv/7b+7QsQelwwbwN/FEJ0
iVGw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net