Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
File:                     6vlt8xs_QE31t345nOeTcbT0REM.cer (raw, json)
Hash identifier:          jxZ4RyQecMv219a3LKGyOqdvDbBJudkDRMlufbHJotI=
Subject key identifier:   EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0194266ABB2E6D8EA82649DBB7FC0BC853D0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 09:48:36 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 56886
                          IP: 91.229.233.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:bb:2e:6d:8e:a8:26:49:db:b7:fc:0b:c8:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:83:3b:cb:f2:bf:b9:7a:8a:b7:32:bf:c4:
                    e7:24:45:b6:84:cc:4b:4f:41:a0:8a:70:3a:08:01:
                    21:5b:9b:92:d2:89:6c:af:de:2f:ce:bc:52:63:b0:
                    86:84:56:08:e9:d5:1b:15:23:3c:df:d7:30:60:4e:
                    00:57:89:d0:4b:bf:44:ab:ad:3b:b0:57:94:16:3d:
                    0a:dc:ba:d0:2e:34:a1:7a:3d:80:9d:c4:e3:b5:e2:
                    37:7a:ef:42:16:a8:11:f1:b0:4e:e9:e3:8b:e8:3e:
                    fd:c4:41:dc:16:63:c3:d7:d5:ce:89:2f:6b:e6:34:
                    1d:15:e5:6b:08:b8:3e:d9:fb:05:4f:43:04:b9:15:
                    bc:6e:52:74:d6:8f:c2:16:8e:68:63:41:c0:db:b1:
                    5c:cc:6d:5d:f5:9b:97:1f:59:32:fc:c8:fb:89:56:
                    b8:1a:07:54:76:b6:8e:25:11:51:83:77:39:20:55:
                    73:25:60:cd:09:8a:82:fe:8b:24:a9:67:3f:45:b4:
                    81:d0:b4:de:a0:26:54:e6:0a:44:8c:0f:df:e8:f8:
                    01:f3:0a:90:b0:53:7c:2f:c9:c0:05:c1:f1:e0:84:
                    d4:28:4f:86:d7:4a:b3:e9:57:b8:c4:21:7e:4d:95:
                    e1:65:af:13:cc:32:0e:52:15:0d:34:cf:54:0a:60:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.233.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56886

    Signature Algorithm: sha256WithRSAEncryption
         4d:13:b4:89:9f:56:2d:d1:44:75:d0:9e:64:90:df:d5:a0:0d:
         27:8f:2d:17:80:e2:d9:86:1f:08:80:d8:a4:09:d1:69:a2:40:
         88:5e:f4:6a:4f:30:39:32:5e:32:f6:83:05:43:22:f1:96:45:
         5c:ac:74:40:20:3a:0e:d7:2f:b2:33:93:c3:74:d3:ed:6f:8c:
         75:58:88:37:09:93:e0:11:8b:15:6d:1b:73:f1:45:3a:13:12:
         0b:e7:05:f1:b0:c9:2c:a3:9c:18:49:39:0e:3c:ab:f3:fa:64:
         2e:5c:d5:93:af:5a:ff:e7:98:b3:92:11:c3:aa:b3:74:05:4a:
         2b:97:23:89:8e:46:b5:b4:30:c5:23:3b:13:1d:33:e4:4e:7f:
         4d:d0:01:d5:56:25:1a:a6:04:4b:be:f1:84:4f:dd:ca:0d:b8:
         26:c8:cf:20:11:6f:ea:30:4e:48:45:29:f7:05:b2:b2:7f:53:
         70:51:61:57:47:00:8c:29:ef:91:75:a0:53:e6:65:61:76:82:
         d8:ec:ce:5f:ed:9e:35:f0:10:43:ae:e6:48:67:21:6c:b2:b0:
         0f:01:1f:11:a8:b8:31:6e:6e:ea:99:bd:90:58:5d:ad:d8:4d:
         ca:cb:34:ec:34:f3:1f:30:d3:f1:c1:8c:35:52:48:cc:db:9e:
         77:1f:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net