Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
File:                     6suWQTrI8sFrlHlWiRdNenIgHvU.cer (raw, json)
Hash identifier:          uzPfWqqTTLgT8HLCWiHluJVwDOIq0vhZZRc+Fdz9cio=
Subject key identifier:   EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266B2C90E45A0E1256CEBBA35895231A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:49:05 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 20634
                          IP: 80.66.224.0/20
                          IP: 80.72.48.0/20
                          IP: 80.248.192.0/20
                          IP: 89.248.144.0/20
                          IP: 185.112.48.0/22
                          IP: 217.173.224.0/20
                          IP: 2a00:ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:2c:90:e4:5a:0e:12:56:ce:bb:a3:58:95:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:84:91:6b:35:39:e2:71:29:e1:1c:8c:d9:
                    51:cb:09:c9:9f:3c:bc:5c:c3:8c:cc:b6:7b:2b:41:
                    be:fc:70:30:d0:9f:2c:99:01:0b:b3:4d:4c:2b:10:
                    67:60:93:ae:03:6d:da:9f:29:f1:aa:a9:e4:ad:62:
                    35:b5:13:73:e3:2b:b9:23:a4:ff:5e:96:c7:68:8d:
                    0a:ef:4f:12:aa:8a:46:2b:69:31:55:1e:e7:6c:89:
                    f3:88:59:33:b9:fe:72:f9:54:c6:47:08:e2:8e:4a:
                    ee:6a:b7:dd:d0:31:ac:e4:f4:93:87:99:c8:ef:66:
                    36:99:6d:8f:72:f6:8b:51:39:e1:e9:c5:b1:7d:cf:
                    2b:5f:b2:4a:e2:1b:9d:3f:19:a8:e9:13:18:0a:65:
                    ad:c3:e9:31:0b:57:e9:8d:13:ad:2f:bb:9c:3b:22:
                    c9:16:9d:79:00:25:79:9c:be:09:70:92:9d:93:84:
                    da:b4:c3:0d:d9:18:02:44:bf:ab:a5:93:1e:e3:93:
                    27:6c:16:ad:cd:f0:a2:02:53:cb:1e:4c:b1:b2:94:
                    bc:93:2b:5a:8c:ab:be:a8:8a:d6:09:6e:98:c2:8a:
                    17:42:ee:ec:3a:3c:2f:e8:e1:60:d4:43:27:70:0c:
                    ce:c7:8f:e4:6a:36:00:cc:3c:89:81:f0:4f:f4:c1:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.224.0/20
                  80.72.48.0/20
                  80.248.192.0/20
                  89.248.144.0/20
                  185.112.48.0/22
                  217.173.224.0/20
                IPv6:
                  2a00:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20634

    Signature Algorithm: sha256WithRSAEncryption
         94:d8:da:e4:24:64:bc:4f:0c:47:12:3e:75:0a:af:d1:ba:dd:
         8a:6d:4a:6b:77:2c:cc:d3:5a:e1:20:d2:76:96:29:a5:ad:1e:
         19:35:f4:f1:61:4f:b4:d2:e6:d8:33:f4:50:35:fa:90:e9:f8:
         fc:1b:53:44:a8:16:e1:23:e5:01:db:db:54:ba:e9:86:8b:da:
         a7:25:25:d7:45:6f:27:30:c9:51:f0:91:b5:01:90:8b:1d:a3:
         15:fd:d2:3f:58:d4:9b:f9:3b:47:16:b0:40:4b:3b:53:84:a2:
         31:e2:52:58:38:95:0b:a5:e7:ad:18:c4:f0:36:2b:21:cd:63:
         3c:36:47:86:5c:9d:37:d0:78:dc:21:93:51:4d:c6:91:7e:8f:
         5b:e2:90:b6:a5:2d:3b:02:a0:4e:ed:7c:fa:7f:42:c6:5b:d7:
         9f:4d:8b:fc:d5:a8:14:52:bb:b2:ac:f7:37:f3:78:3d:da:46:
         47:ec:04:0a:50:f2:c8:e0:31:54:94:a8:64:e0:19:c5:48:46:
         56:b0:64:6b:ce:c0:6e:20:9f:e0:f8:53:f2:ed:e7:48:3a:7b:
         28:f6:d2:72:16:d1:e0:3f:6b:fe:f4:71:fa:0c:2c:a7:45:e5:
         9d:10:7f:11:b4:15:f7:c5:d0:52:33:43:99:13:b8:82:7b:24:
         d7:f9:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net