Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
File:                     4N8zRFExdiUqLLaQvPcF1kmBEfU.cer (raw, json)
Hash identifier:          DYZU+kK2kYWKr7K+EZmhU0VWoTfEGxLPsP7xHfkouBE=
Subject key identifier:   E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B5F972B52A46BCDBD7ECE7E100A5A3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:24 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 200397

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:f9:72:b5:2a:46:bc:db:d7:ec:e7:e1:00:a5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e0df3344513176252a2cb690bcf705d6498111f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:06:9a:66:c7:e1:57:28:ca:a1:97:f2:6e:
                    f0:b2:e6:e2:c6:59:8f:c1:c6:c4:cb:24:fa:ef:57:
                    eb:7f:43:c2:54:6b:4b:a9:0e:b6:b6:f9:58:1a:6e:
                    30:d7:55:61:fe:db:14:6d:7d:79:90:ac:08:cf:a7:
                    fd:bb:3e:54:97:2c:c1:ea:d0:f2:19:01:13:91:d2:
                    31:9a:9e:45:04:6e:59:5e:48:39:fe:e7:fc:c1:70:
                    1f:18:b7:34:14:e6:9a:71:a4:87:b6:bd:0c:37:17:
                    a7:ef:e7:2f:90:c8:27:85:91:78:fb:fe:60:53:a5:
                    f8:ed:dc:00:30:dc:cf:d5:60:a2:05:7f:2c:d9:33:
                    d4:45:6a:5b:4a:0d:9c:86:8f:16:d9:ce:d9:f1:3e:
                    dc:50:4d:c2:9a:ae:6b:b8:40:5d:3c:08:03:95:c8:
                    d1:7f:31:9e:83:34:c4:cf:a7:f3:05:33:67:df:63:
                    9a:24:3a:f6:2a:22:4f:c3:70:6b:a6:bd:59:3c:e8:
                    dc:ef:a2:0d:db:10:35:76:c4:42:3d:24:c2:b3:fb:
                    e3:29:15:b2:71:5d:17:f4:a2:bf:cb:82:fa:34:a9:
                    9b:00:db:a1:19:fe:04:70:e2:b7:e4:09:5b:f2:29:
                    c8:95:67:84:77:63:45:c2:77:64:d1:a6:fb:f0:6a:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200397

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:a9:d5:cb:53:9b:7d:b7:85:31:02:a5:49:3e:c5:84:db:
         be:ed:14:84:d5:67:62:9a:e7:2d:47:c3:2a:da:c4:79:a6:d2:
         58:d8:4f:22:f4:e5:14:79:c4:86:ad:ae:4f:9e:04:d8:ca:40:
         fa:bc:f9:99:91:03:5c:ae:c1:4c:25:6f:59:4a:9e:e5:bd:b9:
         67:28:8d:52:f2:7c:30:5a:1e:db:d1:3f:13:ba:d0:d9:84:78:
         7e:e4:ba:e9:75:1c:a5:12:f7:d5:a2:7e:14:b1:56:aa:b6:ae:
         fb:ff:5d:ab:07:dd:a9:9d:6b:02:56:b5:dd:fc:b6:82:2c:91:
         2a:ed:3b:56:ce:a4:1f:ef:b0:62:d4:d2:de:8e:09:43:38:1f:
         1c:01:4a:bb:91:11:45:e4:46:dd:c5:cc:78:5f:87:3d:98:58:
         e9:c7:94:3f:80:73:20:f6:de:8d:48:f2:d4:b3:2e:70:97:a4:
         ca:06:98:11:0c:a3:56:58:3e:58:2c:5f:fa:5d:cd:3a:e6:72:
         62:29:a9:91:79:b4:a1:96:6c:75:8c:6d:d8:70:4b:a7:f5:57:
         80:2f:a6:df:3d:3b:f0:50:e4:57:6e:33:5c:52:33:fc:55:4a:
         9a:8a:00:a5:37:02:74:6f:b7:3b:65:37:df:28:2a:3b:94:a4:
         db:9c:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net