Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
File:                     5QxErpgedJLTuiHihHIIAYA5jWQ.cer (raw, json)
Hash identifier:          8s4SEk0IwnZkINl9OGZTihnF+Pn9/ei1flQvhLxVL7o=
Subject key identifier:   E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FC2A732B274A04374DE135D833FDF1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 20932
                          AS: 39381
                          IP: 185.68.204.0/22
                          IP: 194.11.221.0/24
                          IP: 194.147.245.0/24
                          IP: 217.169.128.0/19
                          IP: 2001:67c:2fe0::/48
                          IP: 2001:41e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:2a:73:2b:27:4a:04:37:4d:e1:35:d8:33:fd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e50c44ae981e7492d3ba21e28472080180398d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:e7:bc:97:52:7b:4b:30:f6:d6:b7:cf:a1:
                    60:7e:46:42:01:84:33:d9:47:2c:dc:84:ba:55:51:
                    c0:a4:56:cb:f2:95:9d:56:c0:de:54:55:be:88:1f:
                    81:76:94:92:c2:13:8b:d4:cd:52:15:82:88:64:8e:
                    8b:c7:4b:31:79:08:ac:4a:53:f1:d8:42:74:c6:b2:
                    bc:d1:24:8a:4a:87:bf:b1:8d:c8:7b:7b:54:12:bb:
                    d8:3a:8c:69:67:5d:a8:c7:fb:27:4b:b0:c1:e0:16:
                    27:46:1c:4a:ae:54:2a:0b:c9:60:a1:28:d1:95:16:
                    82:93:25:87:1d:c6:47:72:b6:b9:87:b5:96:65:b5:
                    7d:29:e7:8e:87:43:1a:bc:0c:41:44:f1:1b:31:57:
                    30:cd:b8:b8:fc:09:b1:68:42:34:56:78:db:93:2a:
                    cc:e9:14:e7:8e:d9:41:c5:75:c0:9a:ec:32:a9:ec:
                    5e:b1:57:68:2e:33:3a:a4:ce:50:71:f5:38:68:2a:
                    b6:0e:02:ab:5c:6a:d0:eb:3d:f2:0d:07:05:95:99:
                    7b:28:46:ec:bd:91:c9:1f:df:df:15:53:b8:db:8b:
                    20:0a:3b:ea:35:04:67:47:3e:04:e9:1e:7b:f1:e4:
                    bf:76:6d:87:dd:53:01:e0:b8:2d:d9:6a:c2:42:f0:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.204.0/22
                  194.11.221.0/24
                  194.147.245.0/24
                  217.169.128.0/19
                IPv6:
                  2001:67c:2fe0::/48
                  2001:41e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20932
                  39381

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:3a:e7:5c:7b:c4:a1:27:d9:a6:09:a7:85:eb:64:e0:54:
         b3:04:73:c0:a8:47:92:1f:63:8a:c1:fb:03:9a:0d:5d:05:27:
         57:b9:59:22:62:ab:1e:80:01:f4:08:1c:ce:6b:7e:03:f6:9c:
         f0:5f:6c:db:2c:d6:16:25:8e:c1:32:8f:47:2d:2f:d0:3a:3f:
         cb:bc:5a:a4:1b:de:8a:6d:15:58:01:d4:fe:18:b1:6b:90:0d:
         df:24:66:26:f7:21:59:b8:c8:c8:fd:4c:45:53:10:0f:31:86:
         b6:d8:ec:77:9d:88:d0:52:9f:88:90:d7:19:19:df:c6:93:a8:
         65:6b:0c:fa:f2:6f:cc:d8:d0:2a:73:84:0d:f9:02:b6:3a:56:
         12:62:35:d8:06:8f:d6:fd:bf:c4:63:96:77:59:2a:37:9e:c8:
         8f:aa:0e:e2:f2:c9:6c:89:e3:48:78:1c:1a:3d:c8:ed:8a:67:
         ab:83:11:72:ed:be:57:e1:bc:d9:8f:15:ba:9b:1d:f9:90:32:
         b9:cd:be:d7:85:d1:7c:77:69:bc:7d:34:c6:01:80:d9:90:75:
         3c:24:3c:1a:c0:27:8c:55:fc:26:b2:5a:a7:7f:2f:46:72:2f:
         9d:d1:0f:db:a6:e8:19:d0:0c:3d:48:99:4b:91:fd:94:79:18:
         98:57:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net