Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
File:                     5cN18687kSQJ3YNgp0CRNVaTcUE.cer (raw, json)
Hash identifier:          gMC1JO7B199w98M58qoyPpKL/CHqKqPHEw7qNqpsLBk=
Subject key identifier:   E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427482B6D66BE21902CEE91AF2474D79C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 13:50:28 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 215532

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:2b:6d:66:be:21:90:2c:ee:91:af:24:74:d7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 13:50:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5c375f3af3b912409dd8360a740913556937141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:9d:c5:4b:0b:2c:29:03:fc:f4:bd:bd:05:
                    e5:b6:2a:f9:3a:ba:99:4c:ee:5f:f0:e2:23:9d:76:
                    36:fc:e9:96:ac:99:08:0f:f6:5d:5d:51:ab:ba:85:
                    52:02:6e:48:3c:31:7d:81:0d:51:e9:06:f8:14:4c:
                    cb:01:3d:2e:b1:d4:6e:38:87:f5:ce:01:7c:ea:ef:
                    1e:c7:2b:58:f9:8a:45:48:99:29:d1:ce:71:1a:be:
                    ba:9a:c1:82:70:83:fa:4a:71:51:cd:67:8a:b6:4d:
                    67:5e:bb:96:61:64:46:60:d5:98:84:69:d2:67:bc:
                    08:db:7a:77:d2:71:ff:71:c1:62:b4:71:03:b3:58:
                    4f:de:f5:ca:2c:75:10:b2:fd:02:dc:e3:45:0d:1b:
                    cc:6a:b1:9b:b2:e0:59:d8:97:2c:b0:5f:e0:76:5e:
                    ad:86:7a:c9:cb:06:18:26:5b:08:91:23:2f:6a:18:
                    ce:7c:85:f4:9a:c8:e6:a7:f4:7f:6d:49:1f:b0:30:
                    54:76:61:bd:06:64:40:06:d0:78:f1:5b:95:30:f9:
                    c5:47:82:17:06:ae:40:4b:53:c1:96:eb:44:f5:21:
                    a6:32:4f:e1:d7:ec:c9:15:60:b8:ce:56:6a:e7:3b:
                    24:04:bb:e3:be:49:85:fd:09:2d:45:50:bf:2e:ab:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215532

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:56:17:33:56:c0:07:21:1d:66:9e:64:14:9a:c1:d8:f6:
         4d:fd:64:a8:62:fb:55:48:d0:f6:9e:fb:06:e3:e5:c3:50:bc:
         7f:9b:cf:08:21:26:36:48:c3:c1:20:a3:81:e2:dd:a0:92:44:
         4d:e4:9f:b5:12:c0:e5:8d:02:d3:2e:31:45:db:c1:9d:87:88:
         bc:56:62:37:ec:85:9a:53:9e:f4:30:f9:19:59:57:96:59:eb:
         d2:23:7c:5a:42:56:63:43:91:b2:d1:29:19:06:35:e9:0b:94:
         bf:6a:b6:43:d1:d1:34:06:1f:76:69:61:e5:68:26:e9:9a:99:
         c8:da:03:b1:93:6b:cd:1d:af:e8:d2:71:a8:e3:9a:84:07:08:
         e7:c3:20:97:fe:ba:51:f0:98:58:a3:fe:da:a8:6c:62:75:4b:
         b4:ea:28:d8:54:c3:3e:58:46:43:5b:31:fc:7c:e3:38:b3:21:
         3c:68:c1:14:93:36:fa:d3:95:f8:d8:ac:ef:06:5e:bf:58:d5:
         aa:86:66:a1:f5:77:43:a9:a0:41:cc:b4:21:17:c2:37:e8:b0:
         fa:f7:eb:e4:1d:6c:06:6c:7c:18:fb:ae:d5:20:b2:8b:c3:a9:
         ec:67:6a:d7:04:a2:3b:8b:35:4d:0f:04:6e:00:76:6c:75:b4:
         c6:2a:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net