Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
File:                     5kdeNHqvK1nU7oU6ilS05L03R-s.cer (raw, json)
Hash identifier:          qewPjf52rxp08DSeiIB6Q7rO1m1CpZuRo6CSHPkdpx8=
Subject key identifier:   E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0195CC5BD13E7AD1C2DE40381EDFAA53B699
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 25 Mar 2025 08:12:04 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 211405

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:cc:5b:d1:3e:7a:d1:c2:de:40:38:1e:df:aa:53:b6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 25 08:12:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:7d:de:c7:0f:4e:a0:3d:32:13:71:6b:76:
                    b6:90:f7:c8:1c:46:36:b7:dc:f6:04:c2:95:ab:ae:
                    77:b3:8e:c8:e5:96:58:67:6f:5d:e3:a3:e9:fd:29:
                    b6:79:d3:23:d4:1e:17:72:ed:fe:9d:62:76:be:5c:
                    d6:1c:20:27:45:2f:2f:51:4a:6a:38:bf:53:c6:e5:
                    93:70:70:c8:9f:97:45:77:54:8f:1b:4f:e5:78:cb:
                    7e:74:df:a3:a3:86:ad:11:5f:68:da:3b:95:5e:23:
                    8a:c7:41:0d:dd:7a:77:72:4c:11:d2:8e:c4:bc:37:
                    e0:70:7d:e0:3b:7e:e7:dd:d3:fc:f1:10:83:fc:74:
                    1d:83:62:2d:0e:80:a4:60:e8:e6:cf:84:67:88:1d:
                    7c:c2:89:a1:b0:12:cd:53:ca:78:ed:d8:da:b2:d5:
                    3b:73:c9:63:d6:0e:fd:63:e1:c7:00:6f:cf:ec:47:
                    ec:fe:c3:9a:84:23:4f:68:9c:72:ea:1e:dc:59:a0:
                    56:97:0d:31:39:6c:bc:66:ed:90:7d:38:26:4e:7c:
                    63:a9:d5:91:a2:ea:d3:3e:2e:e5:2b:96:96:47:da:
                    2f:b5:fa:a5:ef:dd:31:b0:ae:2d:ef:3f:af:9c:03:
                    5a:81:d4:2f:ff:e0:16:39:21:a3:c6:42:f2:6f:9b:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211405

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:83:74:bf:dc:f2:aa:1d:f5:47:69:d7:5c:1f:d0:98:c9:
         72:a1:56:e3:d7:a2:2e:70:8b:80:c7:5f:ca:4b:cb:f0:df:34:
         8c:b1:7d:3b:97:4f:d5:5a:37:20:0c:cb:f9:34:a9:06:b1:d5:
         4c:c6:4e:a3:df:8a:c0:96:28:dd:15:47:cc:2a:0a:60:e3:d4:
         4e:0a:1e:59:a9:8b:8f:06:2c:e7:88:53:05:86:41:da:ee:c6:
         c3:1b:93:45:6b:06:eb:da:49:74:0e:6e:ce:f5:3c:91:45:15:
         56:51:8b:c2:f4:f4:08:ce:6e:5a:66:7e:fd:19:4b:50:52:88:
         cd:53:43:d6:12:1f:04:82:4c:cd:0a:38:38:77:99:f8:01:a4:
         b5:3c:3f:96:58:4a:1e:d2:a6:9c:f9:18:4c:3d:b0:6d:f7:6e:
         29:bc:17:4d:88:6b:38:f3:4a:71:82:f8:7e:2d:68:73:40:3b:
         dd:d0:e3:e2:64:c8:9a:cc:53:c7:43:be:1a:55:4c:b8:45:e3:
         92:2e:e4:93:60:25:0e:f1:18:63:a7:a4:35:42:01:56:1a:3f:
         ef:88:5e:15:53:58:bc:37:e7:85:da:15:28:61:bb:be:11:2a:
         8c:bb:7c:1c:09:26:cd:81:e2:3e:cd:eb:28:b4:b5:2a:54:5f:
         03:1d:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net