Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.cer (raw, json)
Hash identifier:          LMtsiyFEQ0WJaw2iPL5wh5/VgqrzDYFLJrfckqT1YGg=
Subject key identifier:   E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194206843D8DEC7CA15C1F855735AD2A23B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 05:48:11 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 34640
                          AS: 34693
                          AS: 34900
                          AS: 56365
                          AS: 59529
                          IP: 176.123.58.0/23
                          IP: 185.186.4.0/22
                          IP: 193.164.11.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:43:d8:de:c7:ca:15:c1:f8:55:73:5a:d2:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:72:49:88:91:9a:86:f5:d7:b7:ab:77:d4:
                    6c:32:3c:16:10:1b:5a:8e:91:2f:aa:0e:e6:96:ef:
                    c4:e1:d9:08:4c:3c:d6:07:b5:8a:56:81:30:3f:d6:
                    d2:e0:f8:ad:35:bf:fb:db:c9:e3:4d:0a:de:bc:f2:
                    9b:ad:66:46:65:29:a3:df:9d:30:ef:7e:ab:1b:76:
                    ab:9e:27:6c:82:37:b2:08:bd:5e:bf:75:dd:77:b2:
                    31:c2:82:12:74:bb:c1:b7:26:69:99:8a:97:9f:23:
                    76:66:a8:4a:61:12:4d:a2:59:f5:e8:04:21:67:87:
                    c1:11:69:8e:9c:48:a5:fc:e7:54:17:9e:3f:78:7f:
                    e2:d1:44:1a:dd:a9:56:56:78:f1:b1:38:13:53:0f:
                    af:aa:c1:f3:91:f6:64:0f:40:e4:c9:52:05:1b:b0:
                    06:c8:05:ff:e1:9b:ea:41:71:63:da:ce:08:a4:c7:
                    d5:ff:c1:5f:49:a9:3c:3f:d0:42:6b:73:65:aa:8d:
                    aa:43:9f:bf:2a:32:1a:fd:48:db:c2:63:e6:76:ad:
                    18:6f:83:99:c9:e4:31:0b:51:df:4a:0e:53:40:c7:
                    38:69:a3:ee:bb:be:6c:69:51:2e:ac:7f:69:02:41:
                    b9:c8:a3:c7:4c:dc:e2:c0:3d:e0:70:6f:a9:94:c8:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.123.58.0/23
                  185.186.4.0/22
                  193.164.11.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34640
                  34693
                  34900
                  56365
                  59529

    Signature Algorithm: sha256WithRSAEncryption
         29:51:51:a2:1a:ec:0a:d3:2a:8a:a7:15:11:28:16:1a:78:c1:
         c0:61:ec:58:1f:aa:22:09:6e:d1:04:85:fd:0d:26:d2:26:1f:
         6f:83:ae:74:a2:e8:b2:f6:21:4c:b3:f5:e4:cc:e3:22:f3:c8:
         8d:b1:2b:42:1b:7d:e8:cf:7f:d1:b9:ad:9b:7c:ec:f1:5b:93:
         53:6d:df:4b:dd:ec:af:50:e1:6b:22:12:54:d4:e5:d0:89:1e:
         e6:f3:19:12:15:a8:f2:bd:3d:6b:a5:77:fe:a1:84:a0:c3:e9:
         63:5b:e6:93:3b:c7:41:07:cd:f5:3d:1d:96:f4:2b:48:8b:51:
         5f:6b:60:92:c3:7d:f8:9a:a3:90:c5:ab:3a:28:da:9e:b3:85:
         04:bc:56:24:78:f8:12:95:73:fb:d5:74:b3:33:e4:87:f6:33:
         62:35:91:d8:d2:1a:41:03:2d:3e:9d:3c:62:db:95:28:95:c3:
         05:f4:70:bc:f4:b8:6f:b2:a4:95:e0:22:4a:73:bb:c0:63:9a:
         42:c5:36:f4:5a:9d:77:74:5b:14:fe:b4:62:92:0d:18:3f:60:
         fb:a3:b4:c1:a9:cd:65:89:bf:57:a0:0c:4f:52:c4:68:c0:15:
         d1:34:f6:c1:43:b8:10:c9:e7:f5:25:49:48:fb:6a:f6:9c:d7:
         74:b0:74:de
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZQgaEPY3sfKFcH4VXNa0qI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNhMmNjZTkwODNlOGMxNWExZDMyNWNmNDg3Njc1NTlmOTJiNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mZySYiRmob117erd9RsMjwWEBta
jpEvqg7mlu/E4dkITDzWB7WKVoEwP9bS4PitNb/728njTQrevPKbrWZGZSmj350w
736rG3arnidsgjeyCL1ev3Xdd7IxwoISdLvBtyZpmYqXnyN2ZqhKYRJNoln16AQh
Z4fBEWmOnEil/OdUF54/eH/i0UQa3alWVnjxsTgTUw+vqsHzkfZkD0DkyVIFG7AG
yAX/4ZvqQXFj2s4IpMfV/8FfSak8P9BCa3Nlqo2qQ5+/KjIa/UjbwmPmdq0Yb4OZ
yeQxC1HfSg5TQMc4aaPuu75saVEurH9pAkG5yKPHTNziwD3gcG+plMjEewIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFOg6LM6Qg+jBWh0yXPSHZ1WfkrYjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2ViNDIy
Yi1jNzllLTRmYmUtYWU4Zi0zNTYzZjk1NDM0ODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZWI0MjJi
LWM3OWUtNGZiZS1hZThmLTM1NjNmOTU0MzQ4Ny8xLzZEb3N6cENENk1GYUhUSmM5
SWRuVlotU3RpTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQBsHs6AwQCuboEAwQAwaQLMC4GCCsGAQUFBwEI
AQH/BB8wHaAbMBkCAwCHUAIDAIeFAgMAiFQCAwDcLQIDAOiJMA0GCSqGSIb3DQEB
CwUAA4IBAQApUVGiGuwK0yqKpxURKBYaeMHAYexYH6oiCW7RBIX9DSbSJh9vg650
ouiy9iFMs/XkzOMi88iNsStCG33oz3/Rua2bfOzxW5NTbd9L3eyvUOFrIhJU1OXQ
iR7m8xkSFajyvT1rpXf+oYSgw+ljW+aTO8dBB831PR2W9CtIi1Ffa2CSw334mqOQ
xas6KNqes4UEvFYkePgSlXP71XSzM+SH9jNiNZHY0hpBAy0+nTxi25UolcMF9HC8
9LhvsqSV4CJKc7vAY5pCxTb0Wp13dFsU/rRikg0YP2D7o7TBqc1lib9XoAxPUsRo
wBXRNPbBQ7gQyef1JUlI+2r2nNd0sHTe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net