Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
File:                     49zJcAGBlA-zHAHqeV7PvDFJKvo.cer (raw, json)
Hash identifier:          RMvATXsdusdGRfBDCwyxykg2Xj9RHk80M2lwGvLEds4=
Subject key identifier:   E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195FBDD2DE7477D1756F1B6F78683F1B820
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 03 Apr 2025 13:35:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 945

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fb:dd:2d:e7:47:7d:17:56:f1:b6:f7:86:83:f1:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  3 13:35:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:b2:62:e2:77:99:6f:ae:26:8f:87:b0:42:
                    3a:18:cb:0d:92:9c:58:b3:d9:1a:e5:83:65:43:8b:
                    e8:ca:94:49:f3:02:fc:b9:a6:8a:68:85:6c:20:f2:
                    4f:bf:a0:9e:d6:35:7f:5e:ad:53:91:1f:1d:f0:01:
                    2e:da:c2:e6:1e:86:7e:8a:31:64:bf:3f:71:4e:d3:
                    1f:ef:1d:d3:a5:b1:34:1c:0b:7b:7e:01:21:38:99:
                    e1:2c:c6:1c:a0:13:b7:1c:f9:75:e7:21:9b:b4:11:
                    d2:2c:0b:db:a0:4d:af:32:a2:66:ec:0a:2a:ba:cd:
                    05:49:96:b5:ed:5f:1f:1e:5d:b5:aa:93:c1:3b:eb:
                    f6:a9:a0:45:e0:f6:af:1e:35:30:7b:70:c5:fb:f0:
                    1e:52:be:1a:75:11:5d:61:00:b8:00:40:68:aa:44:
                    cf:9f:3b:c3:04:70:74:3c:2d:74:e9:67:05:fa:6a:
                    96:69:b4:ed:30:df:b5:ef:ed:38:09:e9:34:44:c4:
                    b6:ef:6d:47:56:97:f2:85:39:3b:dd:f4:52:20:86:
                    e6:51:73:3b:af:99:cb:8b:05:37:80:c6:28:74:cb:
                    64:d3:11:fd:5d:53:37:88:91:a2:94:bb:76:75:bc:
                    45:1e:21:99:11:5f:0e:49:a1:41:0f:c3:79:ee:98:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:b9:f9:d5:ab:bc:1b:39:90:73:71:aa:4b:0e:b1:05:0d:
         1b:19:56:1c:f4:6f:62:02:12:db:e1:79:a9:e1:b7:e2:0d:33:
         54:c3:54:44:48:41:3b:30:f2:1f:1a:ad:6d:55:15:b3:59:ee:
         d9:f1:fb:9d:21:f2:5c:0c:7e:cf:76:88:db:81:20:c1:f7:34:
         2a:5f:03:6e:e3:5b:a8:8a:d8:55:e8:46:76:58:66:49:4a:f9:
         37:f2:85:10:12:25:1d:31:d0:f7:1f:a1:c5:61:8d:3e:d9:8d:
         c1:ab:9b:2d:65:cb:fa:87:b0:2d:cc:90:cc:0f:ef:c3:ba:1f:
         c7:6d:43:82:0f:0c:69:4b:18:f6:6a:dd:3f:25:2c:a1:24:03:
         9b:a2:72:24:8b:fc:03:c4:c9:80:09:83:33:e7:2b:5f:1e:ea:
         bc:68:fc:02:19:1b:21:75:fb:78:f5:44:21:22:b5:dc:24:92:
         8c:0f:40:81:ed:4a:b5:c5:68:89:1b:14:33:71:a1:1a:42:27:
         f0:ca:b2:d3:60:96:78:23:96:58:38:3f:58:a7:58:64:13:ce:
         17:b9:af:2d:aa:11:9c:9c:6e:8b:ab:7d:5e:11:ac:3e:2d:cb:
         75:fc:a4:46:27:cf:0e:43:31:33:a1:7d:e3:2e:94:18:32:d4:
         90:17:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:03 2025 by rpki-client on console.sobornost.net