Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
File:                     5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer (raw, json)
Hash identifier:          WerG2/QBmF2DRbtERHITR2Cz0P4r8iaFUV1vc38yc1g=
Subject key identifier:   E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194258EBACDCF400DD59E259E66B4D1CD95
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 05:48:18 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 202704

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:ba:cd:cf:40:0d:d5:9e:25:9e:66:b4:d1:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 05:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:5a:30:0e:ff:14:77:9a:ec:3a:7e:56:bd:
                    4b:5d:f3:2c:f5:b2:23:34:f2:a0:61:7b:63:72:e8:
                    a1:1f:7c:43:ff:e0:c9:a3:62:b7:8e:6e:ea:87:dd:
                    69:99:89:be:68:08:d1:4a:d4:2e:0c:e5:af:2b:6b:
                    9d:8c:3e:82:91:3c:6f:5a:5a:8f:5c:b7:49:9a:e6:
                    0d:e7:89:bc:bc:40:51:ac:11:81:97:ca:45:ab:43:
                    7a:3a:43:39:2b:76:59:e1:8f:81:6f:e1:dc:ba:0d:
                    42:77:45:5e:c5:48:8f:80:4c:71:38:4f:83:2a:e5:
                    c0:21:bc:ec:0f:ab:c8:af:9f:25:fe:5a:53:d4:cf:
                    2f:3f:a2:dc:a8:e5:51:1b:f3:2c:88:ca:9e:75:40:
                    b0:26:5d:31:f5:ae:0b:1b:b6:f5:8d:df:b4:16:cf:
                    ff:fd:76:c4:25:f7:5b:eb:37:62:ba:b6:09:aa:89:
                    3d:7e:fa:e5:4e:9a:ba:25:c7:e2:50:fc:e9:97:f3:
                    35:d0:fc:d4:7b:90:ad:92:2b:a0:cd:6f:06:f1:5e:
                    1f:04:67:aa:fd:b2:9e:b2:64:d6:7c:23:db:38:45:
                    3c:0e:71:a8:fa:7d:ea:5e:7a:b1:d2:ec:f8:05:07:
                    7f:43:eb:a1:c0:44:70:3f:86:fb:62:d6:51:e1:a3:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202704

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:69:90:da:e3:51:33:47:78:69:52:53:10:b0:5a:a8:c0:
         67:b2:7f:9e:a3:11:38:33:6c:ff:0b:0d:7f:7c:fd:ca:0e:15:
         01:fc:b4:db:34:19:29:7a:5b:89:6d:79:dd:0b:67:05:1b:98:
         60:4d:7d:5b:35:76:e8:ca:8f:76:89:e3:53:5e:7d:b3:54:0a:
         e3:9f:39:10:de:cd:9a:f1:e2:ff:e0:30:7b:e8:c6:dc:ee:18:
         f4:0e:ba:ac:23:87:8a:11:ee:94:30:ab:e8:1a:60:76:d9:b6:
         20:a9:27:e2:d7:27:8a:5d:50:a2:02:f3:5e:c4:99:c3:3d:a4:
         95:a7:5d:d0:bf:3d:3d:5e:ed:56:2d:1b:b8:bf:d1:50:47:ca:
         07:17:dc:ac:2a:70:96:74:33:74:54:99:6e:22:30:08:1e:11:
         d4:2e:84:88:87:b9:f8:4a:98:53:71:1d:03:0d:34:91:d4:f9:
         87:b7:90:f1:6f:b1:0c:fe:f9:db:a7:b9:99:16:65:01:36:9f:
         b8:46:af:0d:e5:f8:20:6d:e4:ba:22:4a:29:09:d5:44:cd:0f:
         39:10:54:e3:b8:7c:34:77:d0:a7:b4:ca:18:8e:b5:54:28:89:
         f3:6a:c9:02:74:7d:9e:ae:92:82:75:8e:a2:78:38:23:8d:63:
         e7:60:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net