Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer (raw, json)
Hash identifier:          nzOjddEChEy5yCpp1HBS6XPSy7oyQYvFGKMGxyHdw5A=
Subject key identifier:   E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EE9A46DE53D75D7CE8C075CBAC2FC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:30 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 199481
                          IP: 185.10.88.0/22
                          IP: 185.113.16.0/22
                          IP: 2a03:5bc0::/32
                          IP: 2a06:6600::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:e9:a4:6d:e5:3d:75:d7:ce:8c:07:5c:ba:c2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e33779b8388d001fdcbddc48ace227f009850660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:69:9f:3a:83:d0:5c:10:e3:10:e3:db:66:
                    eb:fc:e9:88:b9:9a:ff:88:18:bc:45:f1:15:88:1d:
                    ee:da:8b:8e:93:3e:3b:c5:1f:a4:97:ef:0d:85:b7:
                    8e:fe:fd:77:ce:aa:fd:b7:29:21:ab:0c:15:fa:5e:
                    88:8a:d6:79:3f:5e:67:29:6e:7b:c1:50:77:e8:74:
                    87:b6:39:ac:ad:c4:04:aa:a3:51:bb:9b:68:0f:18:
                    c9:b4:ed:ea:86:79:43:41:7a:aa:73:89:d9:98:df:
                    4e:f1:f9:82:55:0e:a6:40:cf:b9:51:17:3e:96:f0:
                    af:37:1f:12:ce:f6:52:65:f5:0f:cf:f9:95:3f:d8:
                    b8:24:cd:94:f4:ef:9a:d1:eb:8b:67:fe:4c:20:ad:
                    e0:38:4c:ed:92:08:97:4e:e7:4a:a0:ae:ce:12:0d:
                    4d:54:2e:f8:28:90:61:11:73:03:ea:9b:9b:bc:09:
                    63:e0:76:8a:02:22:c9:6f:8a:8b:24:8c:ae:6a:e9:
                    00:b7:dd:66:40:42:53:7a:82:24:fd:21:21:95:1d:
                    1d:48:6c:88:ed:1d:60:e5:97:d2:c1:f4:52:5c:c7:
                    3d:79:35:96:dc:32:99:56:a9:f4:56:5e:9f:89:27:
                    be:71:b4:77:7a:a5:58:df:7b:27:a9:6a:af:77:71:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.10.88.0/22
                  185.113.16.0/22
                IPv6:
                  2a03:5bc0::/32
                  2a06:6600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199481

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:e0:bb:28:3b:db:b4:a7:c9:25:2e:bd:48:d4:36:39:b6:
         3c:ee:f7:b9:f6:db:bf:0e:81:18:33:24:b6:8f:e3:aa:49:6a:
         55:e2:a1:53:55:85:69:a1:70:6f:fd:43:cc:3b:b1:89:24:70:
         31:62:f1:be:db:9d:05:d8:fc:94:ae:3b:6c:d7:8f:27:2a:fc:
         dc:69:5f:a5:10:47:15:5f:de:24:b2:6c:82:8b:b8:79:33:4a:
         c5:37:a3:7d:bf:17:1f:e6:53:3b:31:a4:30:ec:cd:8b:ad:b8:
         e5:c8:08:12:b8:6e:a9:e7:c8:25:52:c1:13:ea:02:42:af:39:
         a7:92:f7:cb:06:94:cb:b4:f4:55:ac:80:81:4f:92:54:11:b5:
         73:bc:c3:5f:ac:16:59:2c:0e:00:6f:c8:90:1c:a5:7e:5f:a3:
         75:6c:10:f6:ac:36:d4:09:c1:0a:fe:ad:9a:23:12:69:8a:4b:
         66:63:9d:b4:5a:57:66:56:e9:98:77:a4:a0:f6:8c:bc:21:1a:
         97:a6:85:3c:b8:f5:d1:0e:42:e4:f5:03:62:5a:9c:1d:19:f3:
         40:52:85:46:44:df:b0:5a:e3:cc:a0:f8:df:a8:43:42:00:5b:
         af:43:6b:3a:a9:1d:fb:06:c3:59:a5:9e:4a:59:85:93:aa:17:
         29:88:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net