Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
File:                     5OIv9yeFHntJFhTwetExVxQcwwk.cer (raw, json)
Hash identifier:          /1FiFY9IzOEgTzvGzqCv3Axp7mr8NCDSBShz+KqLFCU=
Subject key identifier:   E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB88FB0F09B7D251D2024B2F114054
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:17 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 213268

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:88:fb:0f:09:b7:d2:51:d2:02:4b:2f:11:40:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e4e22ff727851e7b491614f07ad13157141cc309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:54:2a:08:67:6d:b4:ad:cc:b4:b3:02:48:
                    2e:9f:d2:ce:8f:2c:4d:b7:d4:8c:a6:d2:c5:0c:3d:
                    72:75:67:91:b9:87:a6:b5:59:48:ff:e1:62:e7:30:
                    e8:e6:1f:8b:7b:14:6f:de:83:1f:46:23:0d:a7:dc:
                    4d:c5:a2:20:9a:56:45:9c:26:9d:19:21:5a:ad:58:
                    8d:bd:37:ea:7f:6a:b4:d2:96:84:98:23:0a:46:00:
                    86:da:82:8b:a5:4d:c4:11:56:10:e3:12:4a:7e:cd:
                    1e:be:2c:bf:41:28:e7:f1:aa:04:65:54:7b:75:c3:
                    13:bd:83:de:23:ac:a6:4f:3e:33:b8:58:32:f4:17:
                    05:bb:92:aa:c6:d0:73:47:c7:bb:d4:e3:4c:78:7e:
                    72:96:65:9c:c4:c7:6c:5b:32:f9:26:1b:1a:bb:08:
                    9f:7b:52:eb:c2:c5:b3:a3:2a:f3:65:c1:60:6f:45:
                    e7:c3:bd:9a:ea:1c:7c:b9:66:4e:a9:26:8b:11:27:
                    19:6a:33:69:b9:32:9a:0c:a2:7a:c3:8e:62:11:9f:
                    2f:a7:2f:38:a8:6d:eb:cd:94:26:25:35:d4:00:b9:
                    b3:f5:8f:34:74:d8:2f:7d:05:b9:ba:e8:85:aa:05:
                    e8:dc:e2:4f:7c:a0:27:95:a6:75:86:e9:8f:05:2a:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213268

    Signature Algorithm: sha256WithRSAEncryption
         70:df:ff:76:c1:e0:95:10:98:87:23:54:bc:cb:d6:5e:02:46:
         93:4e:e4:58:e0:52:d6:08:87:3a:4e:80:7e:f1:48:a8:d5:83:
         d2:43:1e:74:e8:72:5c:db:9d:a8:5c:e3:bc:4f:41:ca:f5:5b:
         77:39:96:08:01:7d:82:06:20:21:63:13:44:3d:9a:b8:b3:67:
         0f:c8:fb:e7:bb:46:b2:ca:cd:a5:c2:b4:e3:43:e7:31:ba:a0:
         f8:a3:96:de:57:b4:01:28:7c:d4:f8:95:f8:dd:22:4c:bf:d3:
         ee:f8:ec:bc:32:71:27:53:e2:e2:b4:57:8d:43:a6:5a:6c:f5:
         69:da:16:cf:5e:af:44:4e:2a:8c:e3:a3:89:1b:3d:74:d7:9f:
         a0:b2:39:07:c7:63:00:4a:ea:a8:7f:af:d4:8d:d0:27:a6:65:
         52:ab:fe:99:6d:d8:97:d8:80:5e:f2:e7:42:fe:25:3c:5e:02:
         38:0f:30:5e:58:c1:af:a0:4d:0b:39:9b:cb:06:ec:b9:94:99:
         93:3f:89:7e:54:b6:e4:9e:bd:8a:92:49:a1:a1:21:69:2f:6b:
         02:74:7f:36:54:a1:5e:07:9d:6c:0c:c0:64:4f:8f:c6:db:9e:
         6e:01:09:2f:de:8d:30:3a:a5:9e:9f:d0:0f:aa:98:eb:a7:aa:
         e1:81:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net