Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.cer (raw, json)
Hash identifier:          WbN7gUFkeWGVH9PVdzklkz4dkkCYoFD4ODSXvWA7PIA=
Subject key identifier:   E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194228D7027029792A3E4446A38E0E74D11
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 15:48:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 2832
                          AS: 2835
                          AS: 2844
                          IP: 37.156.192.0/20
                          IP: 77.238.32.0/19
                          IP: 86.104.48.0/20
                          IP: 86.104.152.0/21
                          IP: 86.104.200.0/21
                          IP: 86.105.112.0/21
                          IP: 86.106.160.0/21
                          IP: 89.32.32.0/21
                          IP: 89.32.72.0/21
                          IP: 89.33.136.0/21
                          IP: 89.34.184.0/21
                          IP: 89.34.240.0/21
                          IP: 89.37.176.0/21
                          IP: 89.41.160.0/21
                          IP: 89.43.232.0/21
                          IP: 89.44.0.0/21
                          IP: 89.44.248.0/21
                          IP: 89.45.232.0/21
                          IP: 89.46.16.0/21
                          IP: 89.47.184.0/21
                          IP: 91.250.192.0/19
                          IP: 93.115.160.0/21
                          IP: 94.176.224.0/21
                          IP: 130.28.0.0/16
                          IP: 188.211.240.0/21
                          IP: 188.240.144.0/20
                          IP: 188.241.160.0/20
                          IP: 193.10.0.0/15
                          IP: 194.47.0.0/16
                          IP: 212.25.128.0/19
                          IP: 212.119.60.0/22
                          IP: 2001:6b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:70:27:02:97:92:a3:e4:44:6a:38:e0:e7:4d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e801f23ce821c264d67727536ec183537594c5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:83:e4:0f:34:5b:dd:38:fe:84:65:1b:c0:
                    5a:db:da:2c:27:73:4f:36:bc:9f:2f:4e:49:7f:b5:
                    f7:77:90:82:5d:c8:bd:e5:e3:c6:94:13:0e:19:c9:
                    a5:0b:01:53:8a:42:81:50:6a:5d:8c:b9:9b:04:b8:
                    ae:19:56:57:97:c3:a5:cd:70:02:57:07:96:57:48:
                    2e:cb:a2:8c:9a:ab:2b:28:64:27:37:ac:fb:ba:eb:
                    85:00:ed:5d:38:12:51:fb:33:4c:49:7f:62:3c:c3:
                    af:f4:73:64:3e:2b:f9:b6:70:3f:db:3f:4a:fb:84:
                    f1:7e:48:90:d9:2e:cb:61:65:ff:0c:25:2b:22:4d:
                    bf:69:cc:41:ed:b8:40:98:e4:ab:38:92:61:3f:ce:
                    df:31:07:2c:61:b5:2c:8d:09:28:41:f4:06:e7:e2:
                    a6:8a:80:4d:a4:2b:10:87:76:32:19:10:66:14:65:
                    3b:8d:25:5d:09:b5:30:ca:d5:3c:c9:f1:f5:b3:06:
                    18:3e:d8:8f:86:9a:d0:59:fb:a6:b6:86:c2:9a:3c:
                    59:74:67:aa:06:24:7f:14:13:a6:44:82:80:a7:10:
                    d7:9c:e2:6c:72:b6:a6:1b:c3:d7:de:76:13:65:bb:
                    78:56:68:12:27:f8:98:b9:52:64:b7:b9:a0:a9:23:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.156.192.0/20
                  77.238.32.0/19
                  86.104.48.0/20
                  86.104.152.0/21
                  86.104.200.0/21
                  86.105.112.0/21
                  86.106.160.0/21
                  89.32.32.0/21
                  89.32.72.0/21
                  89.33.136.0/21
                  89.34.184.0/21
                  89.34.240.0/21
                  89.37.176.0/21
                  89.41.160.0/21
                  89.43.232.0/21
                  89.44.0.0/21
                  89.44.248.0/21
                  89.45.232.0/21
                  89.46.16.0/21
                  89.47.184.0/21
                  91.250.192.0/19
                  93.115.160.0/21
                  94.176.224.0/21
                  130.28.0.0/16
                  188.211.240.0/21
                  188.240.144.0/20
                  188.241.160.0/20
                  193.10.0.0/15
                  194.47.0.0/16
                  212.25.128.0/19
                  212.119.60.0/22
                IPv6:
                  2001:6b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2832
                  2835
                  2844

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:8b:0d:2e:4c:fe:56:9d:e7:d0:cb:17:ea:4b:a1:f7:81:
         21:f1:0b:f9:be:d4:5f:be:6d:14:33:97:fc:2f:60:30:cb:55:
         e5:b1:79:57:0c:9c:80:ff:03:c0:1d:33:bf:59:58:c1:7d:31:
         9c:70:b0:1d:83:2b:74:83:3a:2f:15:49:e3:37:b7:26:c9:42:
         9d:eb:95:99:47:1b:03:4e:79:74:30:23:a4:84:85:15:78:04:
         b9:eb:8d:2c:d0:f5:3b:6e:f7:d3:c0:9b:d4:37:83:b3:b8:be:
         5c:d9:bb:12:90:d8:25:2c:4b:ed:4d:a1:b7:21:5f:b6:67:dd:
         8a:5e:73:b4:4f:3e:8d:38:41:e5:93:d3:e3:4e:c6:ed:6c:83:
         7f:6e:e5:aa:e4:8a:6c:64:24:fe:bd:a9:90:04:c2:f7:e4:37:
         8e:4d:f3:99:51:07:a9:a2:4b:ed:1e:e3:70:20:e7:5e:52:92:
         06:09:2d:63:ea:a2:60:92:b5:3c:17:3b:74:58:2e:d7:c6:64:
         40:9f:e9:97:fc:4e:58:21:48:cb:53:de:71:dd:f7:b7:8e:8b:
         bf:a1:2b:de:fa:cd:59:79:31:b2:b1:a5:c7:fc:75:fd:f5:80:
         f0:e7:88:a6:f0:dc:f2:28:69:0b:e6:f1:5d:6c:41:e5:3f:5c:
         a8:2d:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net