Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
File:                     6WTScFqbJv1IKpwQ6Sbq572kHps.cer (raw, json)
Hash identifier:          7wj6uj2tOnNGFVOgJX2DpWjHBG6sjH8r8O7DpH9E5NE=
Subject key identifier:   E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019426D9F36FBCD2E83F478900B1E11CEA37
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 11:50:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.198.112.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:f3:6f:bc:d2:e8:3f:47:89:00:b1:e1:1c:ea:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:0e:8e:f8:88:35:90:28:a0:56:8c:27:bd:
                    fb:ec:02:7d:8a:20:9a:21:8f:45:49:1f:82:27:8c:
                    92:79:88:72:59:31:6f:b2:34:28:d7:01:9f:ce:b2:
                    19:fc:33:73:80:01:06:f3:cf:2b:cb:75:ff:a8:2a:
                    51:7f:ae:34:ca:dd:a1:71:da:af:5e:40:f9:77:c0:
                    b6:ec:cf:0c:6b:fe:35:ac:73:e6:82:00:fd:33:12:
                    b5:a6:f0:12:be:85:f5:2b:b7:de:e0:40:61:a3:c1:
                    82:76:ee:52:2c:f8:0c:9a:d0:6c:2c:96:66:69:d6:
                    36:5e:eb:7f:fc:ef:62:f1:db:be:40:21:44:b7:92:
                    ac:e0:25:cb:63:71:6b:ba:dc:a6:64:a6:f5:e6:d3:
                    81:1e:0a:b7:02:73:90:b1:ee:51:38:d3:56:09:83:
                    33:56:be:1e:df:35:76:e8:77:6b:4f:48:4e:34:f0:
                    85:d0:4a:ae:da:b0:28:ec:66:fa:ba:f1:17:4a:38:
                    87:fb:f0:51:9f:0d:a6:f9:05:9d:63:ef:d0:ce:a6:
                    aa:9c:91:2c:ea:d6:09:40:d1:fc:80:fa:83:66:1b:
                    47:f2:f9:e6:33:08:70:9d:9d:f0:97:31:51:d2:ab:
                    b1:fb:c2:86:c1:8b:0c:80:30:e8:b9:f9:9c:52:56:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:74:98:70:d0:e6:42:52:ce:30:66:a4:cc:ff:f0:42:98:11:
         25:8b:4c:3e:ff:63:22:5a:8d:f3:33:9c:d5:da:af:e9:7d:4b:
         9a:3f:40:f3:b4:ae:34:07:48:7d:37:3f:92:2c:19:e3:e3:e7:
         e3:1b:77:83:c7:d4:e4:ec:cf:d7:fa:af:8f:f6:a7:af:a8:41:
         97:0d:32:ef:5a:22:62:96:a2:5a:fa:6f:60:f7:70:52:00:29:
         b7:54:65:98:ad:b2:4e:be:72:31:7e:65:17:8b:d9:2e:10:a2:
         b3:9f:4b:e1:cf:3f:27:22:6f:df:88:3d:4c:49:7c:dc:93:ed:
         d6:ba:42:75:f5:47:3f:41:99:7c:69:1f:2f:f3:43:70:6b:1b:
         fd:eb:a9:11:21:24:22:84:ff:e6:0c:4c:a0:da:7d:5e:c7:e9:
         c3:e1:6d:af:99:27:82:b5:98:64:90:d8:5d:11:77:d5:f5:8a:
         f4:b6:89:67:69:e7:1f:2e:71:64:b2:da:1a:70:bf:2b:11:be:
         ac:02:8e:f0:86:e0:1e:b7:8f:91:ed:38:f9:aa:23:c7:96:a2:
         6e:57:e7:07:57:b8:06:34:d1:7c:6a:27:75:64:77:54:a2:33:
         af:2d:9c:f0:01:7e:ae:0a:cc:26:cc:6b:06:d7:78:4f:6a:94:
         37:ce:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net