Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.cer (raw, json)
Hash identifier:          omBYKh/vOea5lpGm89j/3hqAD38FNaZM4VIRpb+6T40=
Subject key identifier:   D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C83DC73F279DE38B701E4362FECBD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:10 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 43673
                          IP: 91.198.98.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:83:dc:73:f2:79:de:38:b7:01:e4:36:2f:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:98:db:be:e0:f2:3d:1c:5b:fc:a2:4a:f0:
                    07:b3:df:44:d8:3b:04:b0:2d:a6:ee:8f:32:c0:7f:
                    2b:71:bb:ad:94:9a:77:d9:53:0d:f2:f0:46:6d:f3:
                    b7:34:63:3b:a6:0d:ad:fa:58:9d:5a:98:a4:d4:4b:
                    1f:9d:5f:ae:34:48:07:ad:ef:74:56:82:08:dd:a2:
                    60:a3:ca:1f:4c:df:8c:7c:9d:ef:9a:62:b7:a1:5a:
                    2f:2e:32:70:bf:01:7a:d9:58:df:bd:1f:ee:76:2e:
                    2c:77:f9:b2:b2:94:ac:82:10:92:29:e5:d0:a6:da:
                    fd:da:d2:2b:24:95:1f:72:7f:49:ba:74:ae:59:10:
                    5f:f0:81:39:ef:89:ed:06:3d:35:45:ea:28:18:af:
                    51:9d:7b:81:06:04:62:4c:54:81:12:3f:9c:21:b8:
                    e5:2b:78:0c:3a:ba:72:64:82:4c:e0:c3:b9:9c:5a:
                    f9:42:94:63:37:e2:88:6f:f3:94:d0:56:17:f2:b7:
                    e4:a8:1b:f7:f6:14:7f:84:24:44:61:ca:02:1c:e3:
                    a5:77:d3:6d:bf:37:e9:65:67:8c:aa:6c:86:c4:39:
                    4f:01:b6:1b:4c:d4:42:e7:66:1c:00:68:77:89:f3:
                    02:d6:a1:9d:d7:51:1e:d7:dc:af:85:a8:17:36:1a:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.98.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43673

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:1c:42:eb:74:56:1e:be:63:79:9f:c5:88:29:81:2e:4a:
         9a:5d:95:d0:6c:e3:2a:fe:78:ba:27:b3:01:9b:27:bc:c5:34:
         a9:6c:52:e0:30:17:45:3f:79:b1:95:62:e2:dc:a9:f4:b6:3d:
         d2:3e:f2:7d:90:42:4f:44:50:b5:0d:8a:bf:18:06:ef:6a:3e:
         5a:56:72:1b:8a:5b:3a:0f:37:f3:65:2f:ca:5b:38:3d:5a:ba:
         59:20:1b:ec:d2:c3:d7:5a:da:fb:12:dd:f7:c9:6a:cb:f7:d5:
         16:2a:01:f3:68:39:32:3c:2d:24:37:fc:e2:c6:5c:f0:bd:da:
         ba:61:db:fd:17:f4:af:5b:9b:f2:da:28:b2:ce:4b:a3:61:e3:
         b4:a2:ed:a0:1c:c5:44:80:d7:12:29:d6:4e:75:44:7c:b9:f6:
         e0:a6:c2:af:e3:5c:fb:87:cd:ad:60:e5:4b:e1:a8:47:ec:b8:
         47:24:67:fc:c2:b8:1b:52:5f:ba:50:88:c8:f7:19:aa:e4:73:
         96:5b:17:b0:8a:1e:f9:89:fd:b6:90:e8:d2:71:db:76:bc:be:
         1f:25:74:cd:df:d6:30:72:82:47:4a:34:6c:02:94:fc:39:fe:
         0f:ba:7c:b4:e2:89:f7:cf:c3:8d:9c:61:e1:58:ae:68:d7:c4:
         c9:c1:9b:46
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQfjIPcc/J53ji3AeQ2L+y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTVlNTYxMTc4ODE0MmIzMTU0MjhhZTUxZjY3Y2JiYWNmODBiN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9+Y277g8j0cW/yiSvAHs99E2DsE
sC2m7o8ywH8rcbutlJp32VMN8vBGbfO3NGM7pg2t+lidWpik1EsfnV+uNEgHre90
VoII3aJgo8ofTN+MfJ3vmmK3oVovLjJwvwF62VjfvR/udi4sd/myspSsghCSKeXQ
ptr92tIrJJUfcn9JunSuWRBf8IE574ntBj01ReooGK9RnXuBBgRiTFSBEj+cIbjl
K3gMOrpyZIJM4MO5nFr5QpRjN+KIb/OU0FYX8rfkqBv39hR/hCREYcoCHOOld9Nt
vzfpZWeMqmyGxDlPAbYbTNRC52YcAGh3ifMC1qGd11Ee19yvhagXNhpcuwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNVeVhF4gUKzFUKK5R9ny7rPgLfoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzIzZGZi
Mi03NDlkLTQ3MWQtYjExNC04M2M3ZGI3NTk2ZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMjNkZmIy
LTc0OWQtNDcxZC1iMTE0LTgzYzdkYjc1OTZmZS8xLzFWNVdFWGlCUXJNVlFvcmxI
MmZMdXMtQXQtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCqmTANBgkqhkiG9w0BAQsFAAOCAQEALTscQut0Vh6+Y3mfxYgpgS5Kml2V0Gzj
Kv54uiezAZsnvMU0qWxS4DAXRT95sZVi4typ9LY90j7yfZBCT0RQtQ2KvxgG72o+
WlZyG4pbOg8382Uvyls4PVq6WSAb7NLD11ra+xLd98lqy/fVFioB82g5MjwtJDf8
4sZc8L3aumHb/Rf0r1ub8tooss5Lo2HjtKLtoBzFRIDXEinWTnVEfLn24KbCr+Nc
+4fNrWDlS+GoR+y4RyRn/MK4G1JfulCIyPcZquRzllsXsIoe+Yn9tpDo0nHbdry+
HyV0zd/WMHKCR0o0bAKU/Dn+D7p8tOKJ98/DjZxh4ViuaNfEycGbRg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net