Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
File:                     4KE7ki7n67muzeGacNDiW3d1DQI.cer (raw, json)
Hash identifier:          j9RWAD8RO/ZMTNxrjVpiCTlUcxi2Nz/TYN4EvlInexA=
Subject key identifier:   E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D970E7954CD8316EAA12DD33406027
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:49:31 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 50592
                          IP: 193.105.115.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:70:e7:95:4c:d8:31:6e:aa:12:dd:33:40:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:31:45:1e:f9:e4:d7:73:73:8e:cb:d9:28:
                    fe:69:7f:51:2c:14:a0:17:62:a1:32:8e:f2:6c:34:
                    54:5e:95:e2:69:ad:81:2f:9b:1d:a8:a4:5e:ad:97:
                    98:07:35:36:f2:1c:4b:32:7a:42:3b:67:e6:da:b0:
                    fd:08:ef:ba:77:5a:30:12:10:3a:08:31:3f:fe:5f:
                    8f:6b:a3:ea:e5:52:3b:70:04:ec:ed:30:f8:bc:47:
                    38:a8:a8:ae:78:fb:e1:b3:60:7c:ea:b5:52:49:3d:
                    7d:f5:e9:d3:dc:3d:5d:47:c9:f2:c7:a5:0a:48:8f:
                    95:7b:08:48:8a:ce:c6:04:7d:23:bc:e2:d6:99:42:
                    87:9f:c8:ee:19:0f:07:34:e4:6a:a8:67:34:96:dc:
                    01:2d:bc:bd:82:e2:9f:36:6a:cb:40:f9:e1:cd:81:
                    a5:f2:55:af:3c:46:2a:22:ef:a3:57:46:b3:db:40:
                    ba:f8:ca:9c:73:fa:de:0d:d5:33:5d:31:21:ac:bf:
                    7d:3d:8a:e1:a0:83:5d:08:4a:7a:da:c0:45:83:4a:
                    f3:83:d8:2c:88:a4:34:05:aa:e2:90:3e:b5:ce:6f:
                    b8:bc:37:2d:cf:74:b4:65:e3:e5:3e:84:1a:14:81:
                    0c:f0:45:f8:ad:1e:94:f6:52:38:66:a4:87:17:87:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.115.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50592

    Signature Algorithm: sha256WithRSAEncryption
         31:07:79:da:67:67:6e:0a:26:95:b1:7b:05:6c:b6:be:21:36:
         13:b5:34:82:db:9b:3b:d4:e8:cb:cb:19:49:11:67:db:e4:1b:
         8d:67:ed:cd:d2:a2:69:8b:4c:fc:17:5d:c8:53:30:28:f5:fc:
         20:7f:cf:f5:c2:9a:e7:48:6f:e2:6d:4d:a8:96:5d:ef:5e:e0:
         4d:f5:7b:6c:73:f0:d5:f6:58:9a:89:57:44:4b:f2:e4:aa:ea:
         3a:c1:47:99:35:04:0d:77:ef:c2:06:2e:e7:e2:2d:97:06:d3:
         44:2d:31:ba:46:0f:b5:85:46:a6:15:b1:d5:35:ac:37:f6:12:
         0a:40:c8:13:6d:ee:88:b7:55:8a:6e:47:4b:29:fe:bc:cd:98:
         d6:79:72:f7:d0:a2:95:11:c5:ba:7a:93:52:f2:5b:c7:81:27:
         14:4a:79:e3:6a:a2:77:d3:a0:ea:bc:29:f4:3e:29:da:34:53:
         7b:e8:65:d3:bc:3e:fe:44:59:28:91:56:9e:5f:34:86:e2:4e:
         75:b0:54:62:85:e7:82:59:3c:e5:3e:9c:45:35:05:1d:16:77:
         49:b2:d6:93:67:14:c6:58:a3:8a:9d:25:e9:39:37:93:ed:9a:
         60:3d:20:ea:70:07:12:18:9b:20:5a:9c:5a:9c:5a:08:ca:9e:
         5c:55:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net