Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
File:                     57M-njyTL3pULrAhBWzpSx6Ljws.cer (raw, json)
Hash identifier:          5zLmtgPkUdqJfbM5zOwpDIjqVAgO88ADHJct/ppvHeE=
Subject key identifier:   E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB7C75C3976D04464E2842FEC6CB93
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:14 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 210246
                          IP: 109.196.32.0/20
                          IP: 193.31.76.0/22
                          IP: 2a0d:6040::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:7c:75:c3:97:6d:04:46:4e:28:42:fe:c6:cb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:27:2d:f1:73:ec:9b:79:40:41:fb:28:e2:
                    fb:18:13:cf:34:7c:c5:34:85:a1:09:eb:93:2f:c1:
                    ba:bc:74:c4:b2:90:aa:9a:4e:29:b3:5b:26:ac:9a:
                    be:aa:99:82:06:4b:77:75:1b:05:e8:4a:4e:76:b5:
                    64:54:df:e7:ad:bc:29:cd:9d:4b:06:ec:23:0b:9d:
                    bb:73:a3:57:78:7d:30:e6:91:57:cd:5c:83:00:ad:
                    27:a3:72:be:a7:12:12:98:a7:65:f3:d3:48:84:b7:
                    da:3a:1b:9f:26:89:5f:94:8e:93:70:2d:31:32:1a:
                    75:72:f1:d9:85:6f:ad:d1:a4:df:b3:e6:bb:dd:6a:
                    f3:e8:e9:cd:c5:6f:65:55:a5:e9:4b:5f:78:d7:a4:
                    99:45:77:03:b3:23:7a:57:0c:2c:76:16:20:dc:87:
                    30:24:4b:9e:7f:1d:cc:f9:31:39:be:a1:60:fd:f5:
                    d8:61:cc:5f:58:69:cc:c4:86:38:0b:36:83:cd:66:
                    0f:2c:85:36:60:6b:7d:b6:94:80:1c:97:7c:29:fa:
                    6c:db:e6:2a:c7:01:87:21:bb:28:11:46:8a:50:0f:
                    d8:af:d0:63:e0:31:19:bb:d8:74:1f:89:64:78:42:
                    60:be:e2:df:b0:75:29:98:4d:48:a0:a4:02:df:04:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.196.32.0/20
                  193.31.76.0/22
                IPv6:
                  2a0d:6040::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210246

    Signature Algorithm: sha256WithRSAEncryption
         34:74:4b:cd:67:38:56:e0:d1:0c:84:17:d6:5f:13:6c:80:78:
         d9:8a:b3:23:7d:0c:6d:8b:b8:b9:d6:41:d8:64:62:ad:cd:56:
         98:88:0b:31:95:11:bb:4c:5d:14:cd:34:02:d7:ab:d9:43:3c:
         97:7d:5e:48:15:fc:41:a4:4c:2e:1b:fb:23:61:a5:f2:64:d6:
         ca:71:12:f9:c8:5c:c0:fa:8d:4c:a8:f3:55:3c:7e:f1:29:b3:
         77:23:1f:ca:fa:a1:b5:a9:bc:65:a4:90:cf:a4:b0:bb:b4:b7:
         71:95:b7:e8:07:1c:dc:f3:21:7c:32:4e:5d:54:6b:3f:14:e1:
         f2:44:fa:30:82:67:55:b3:82:7c:05:31:32:88:27:6c:54:58:
         42:55:94:11:2e:3b:b8:2e:a1:10:73:85:77:d9:fd:89:c8:1c:
         f5:d5:93:d8:70:32:2c:c5:08:6c:8a:e9:a1:35:04:47:e0:da:
         83:1d:05:54:28:e7:eb:18:d0:85:46:2e:d5:27:43:93:22:c1:
         d9:9c:45:88:25:33:e0:b6:e9:9f:96:e7:1d:67:4b:4b:e3:48:
         5d:1b:20:3d:bd:c0:48:85:66:ad:13:63:c4:3c:48:e0:d7:de:
         62:27:c6:8a:d4:31:c7:9b:32:3f:e2:d3:4e:3f:10:fa:4b:89:
         64:18:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net