Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
File:                     3virX3TckOn_uo1CmI7Vp3SMHQU.cer (raw, json)
Hash identifier:          O3duCH3KaGU9ba+nvUiPXLhpMwGSUpo9s7cjRSBmfzA=
Subject key identifier:   DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258FC54C14A3B6136DD262DD5583A2F2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:49:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210041

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:c5:4c:14:a3:b6:13:6d:d2:62:dd:55:83:a2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:49:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:54:f2:72:44:e4:a4:56:79:4a:31:2e:86:
                    f8:0a:30:db:8a:b9:63:2e:f2:be:92:56:0a:65:52:
                    a4:5c:6f:da:04:da:f3:4d:62:a1:70:c3:cd:50:32:
                    d1:0a:a0:d2:bd:8a:2f:bb:08:2f:36:0d:48:93:f6:
                    3d:f9:71:7b:6a:21:e4:72:78:29:f2:eb:5d:34:96:
                    cd:f1:eb:ba:41:21:80:5a:c6:db:e1:20:82:2b:04:
                    82:9f:e4:be:9e:e8:c2:bc:44:1e:03:9a:d6:27:2c:
                    8b:e8:2e:45:d5:a0:28:15:c0:e7:45:7d:3d:01:ad:
                    cb:d9:c4:7c:38:1e:66:2d:67:74:26:8d:98:48:0f:
                    90:14:f7:a8:3c:d0:cd:cd:5c:49:c8:d8:34:4c:c6:
                    70:fb:93:ca:7d:fb:2f:c5:28:f1:cc:e6:ca:bc:09:
                    31:3e:f7:8d:33:5f:02:1a:ba:e0:87:42:56:8e:e2:
                    cc:93:df:91:39:be:31:7b:6b:e7:9b:f7:c4:45:ac:
                    26:a2:c5:89:f6:05:f4:a0:73:7e:9e:11:b0:72:33:
                    33:61:1c:1c:f8:95:2b:1d:8e:da:e9:86:7c:14:65:
                    c2:0e:68:70:c0:48:15:dd:46:b5:56:d1:fc:a8:f0:
                    cc:54:01:f3:96:e9:87:86:de:5b:ab:26:c9:ac:aa:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210041

    Signature Algorithm: sha256WithRSAEncryption
         a1:de:c0:e5:92:ff:21:11:24:8a:8f:90:84:2b:01:3c:63:86:
         01:b0:0a:b8:5e:15:d9:43:2a:4c:22:16:1a:a6:e8:00:6c:74:
         3e:b3:4f:6d:1e:46:5c:76:8a:53:23:ff:5f:9d:57:07:73:77:
         d7:09:35:c4:e3:b5:f3:51:ac:81:36:23:de:ec:5a:2e:0f:0d:
         45:30:ee:fb:6d:a4:96:2a:54:01:bd:d2:a9:25:13:e1:02:ec:
         21:e5:00:e0:e1:f1:33:76:30:e6:9a:3a:fc:10:c8:03:94:ef:
         9b:ce:61:78:04:a1:ad:c6:46:ce:b2:c0:a7:54:2e:57:b1:80:
         b9:ec:5f:bd:62:21:0c:40:56:b3:37:e7:aa:fe:6b:c1:8a:2b:
         06:4b:f3:03:48:13:81:2b:49:a4:82:2e:c5:8a:24:a2:6b:2f:
         48:27:2f:ca:6a:be:52:46:60:d4:2e:52:09:54:b7:d9:1a:b6:
         83:08:fb:29:25:75:2b:af:fb:a2:83:80:f9:36:ab:d3:71:3f:
         eb:57:69:d4:dc:7b:d8:bb:cd:5e:87:bb:36:a8:85:14:05:d5:
         86:3a:e6:ea:15:5c:22:f7:43:43:fb:17:5e:be:f8:a8:b2:1c:
         46:f1:5e:05:f1:18:76:15:9e:42:3b:8c:77:c1:e8:07:c7:fb:
         6d:14:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net