Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
File:                     5-aiybui7N1AdLMVN1mDXoI6uOQ.cer (raw, json)
Hash identifier:          H5GBrFp0qRQKTOltwjzLZL+4wzvNWTvU0bpdZGiOnGQ=
Subject key identifier:   E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D71492A2053A4658371A86CB8531C4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:48:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62306

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:14:92:a2:05:3a:46:58:37:1a:86:cb:85:31:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:40:7b:84:43:9b:d0:97:7c:c7:02:ee:6e:
                    c2:15:2c:86:8c:de:84:39:37:cb:ab:31:ab:10:e1:
                    9e:c2:70:79:cf:76:bd:f8:4d:a3:ba:07:1e:2f:11:
                    14:eb:d4:14:d3:4a:0a:3f:4d:9e:ce:d4:38:54:ff:
                    cb:88:74:06:47:f5:79:80:a3:82:90:90:5d:06:f9:
                    e5:d6:f0:a2:0e:62:e2:0b:80:57:e0:32:94:40:a8:
                    14:3b:2e:bf:5d:20:73:9c:ec:f7:bd:2e:d4:2a:bc:
                    af:1e:fa:9b:04:ab:f6:06:be:7c:90:50:86:a1:f8:
                    5e:25:26:20:6d:d3:d7:33:7d:2c:43:20:25:9f:99:
                    db:e3:ca:fc:14:92:43:07:d3:34:49:54:cd:a7:a1:
                    20:42:7d:88:fb:45:17:54:77:9d:be:b1:3d:7f:b8:
                    32:20:b4:97:9e:4b:9e:e0:97:b5:06:7c:e0:d1:dc:
                    0b:1d:9c:76:1c:23:70:bc:d4:b5:bb:3c:f1:6b:b6:
                    7c:f8:1f:78:87:f0:6d:3f:f4:bc:0f:76:bf:77:8d:
                    4a:e8:9f:93:ac:8b:ff:ea:3a:d7:9a:72:4c:11:ec:
                    90:dc:25:a1:30:01:e3:47:c3:df:d0:6e:9c:38:24:
                    40:43:88:d7:6c:06:de:d3:de:2f:0d:30:9e:99:5a:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62306

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:9d:ec:df:a6:41:44:81:79:b9:d0:4b:e8:c6:53:34:fb:
         20:c2:28:21:bb:6c:55:e2:69:05:08:de:bc:27:d3:64:61:0b:
         77:8f:4c:37:14:11:92:f3:7d:40:1d:76:23:e2:e8:53:89:46:
         59:30:f7:46:6f:95:a1:f8:cf:49:f1:4c:6f:68:62:5e:91:4a:
         de:d8:22:6c:1d:c8:11:63:a3:fa:92:68:3b:c4:85:02:b8:0b:
         01:15:a5:48:c3:3a:b5:b3:d8:8b:a3:91:f3:f0:b9:e7:90:db:
         1e:1e:72:e2:cb:e6:7e:4e:bb:f6:5a:70:46:a7:b2:61:fe:ed:
         e1:d6:cb:4c:d7:4b:4c:2f:d4:36:ed:f1:b8:36:f9:71:f6:ef:
         b4:5a:db:55:b0:64:eb:33:05:90:71:3f:22:1d:5c:c3:3c:d8:
         4e:5e:a0:5d:69:a4:bb:18:63:10:88:90:00:f2:b4:63:1a:2a:
         2d:81:ea:2e:1a:0b:f5:7c:28:06:61:99:61:ab:e6:68:1a:14:
         f3:5c:9d:ca:2a:4b:29:69:a2:54:55:4f:95:48:e2:ae:e8:83:
         57:51:e6:8a:81:f3:13:0b:96:d3:08:64:0f:26:a8:96:36:05:
         13:4a:e5:62:49:b8:ac:7f:9c:6a:0b:c8:90:39:32:a5:4b:db:
         14:14:96:a6
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQj1xSSogU6Rlg3GobLhTHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2U2YTJjOWJiYTJlY2RkNDA3NGIzMTUzNzU5ODM1ZTgyM2FiOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tFAe4RDm9CXfMcC7m7CFSyGjN6E
OTfLqzGrEOGewnB5z3a9+E2jugceLxEU69QU00oKP02eztQ4VP/LiHQGR/V5gKOC
kJBdBvnl1vCiDmLiC4BX4DKUQKgUOy6/XSBznOz3vS7UKryvHvqbBKv2Br58kFCG
ofheJSYgbdPXM30sQyAln5nb48r8FJJDB9M0SVTNp6EgQn2I+0UXVHedvrE9f7gy
ILSXnkue4Je1Bnzg0dwLHZx2HCNwvNS1uzzxa7Z8+B94h/BtP/S8D3a/d41K6J+T
rIv/6jrXmnJMEeyQ3CWhMAHjR8Pf0G6cOCRAQ4jXbAbe094vDTCemVqZcwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOfmosm7ouzdQHSzFTdZg16COrjkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzM1YjU5
ZS1iYzI3LTQyMDYtYTdkOS01MzU2OWFjYTNhNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMzViNTll
LWJjMjctNDIwNi1hN2Q5LTUzNTY5YWNhM2E1Zi8xLzUtYWl5YnVpN04xQWRMTVZO
MW1EWG9JNnVPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDzYjANBgkqhkiG9w0BAQsFAAOCAQEAgSyd7N+mQUSB
ebnQS+jGUzT7IMIoIbtsVeJpBQjevCfTZGELd49MNxQRkvN9QB12I+LoU4lGWTD3
Rm+VofjPSfFMb2hiXpFK3tgibB3IEWOj+pJoO8SFArgLARWlSMM6tbPYi6OR8/C5
55DbHh5y4svmfk679lpwRqeyYf7t4dbLTNdLTC/UNu3xuDb5cfbvtFrbVbBk6zMF
kHE/Ih1cwzzYTl6gXWmkuxhjEIiQAPK0YxoqLYHqLhoL9XwoBmGZYavmaBoU81yd
yipLKWmiVFVPlUjiruiDV1HmioHzEwuW0whkDyaoljYFE0rlYkm4rH+cagvIkDky
pUvbFBSWpg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net