Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.cer (raw, json)
Hash identifier:          V5Qts7TOkq52J3DPaqijodG3iR7U+Dfm5x7bxnmSvo0=
Subject key identifier:   EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FB0970FB4D1E5F35D4A3F58CCDF6F7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:47:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.201.20.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:09:70:fb:4d:1e:5f:35:d4:a3:f5:8c:cd:f6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5a:27:b5:de:ca:e4:04:e6:4c:9b:bb:75:45:
                    b2:85:ae:3a:cb:f8:56:a4:a8:68:f2:4e:ed:09:60:
                    35:3b:a5:c7:5a:f3:d7:d1:ee:ed:79:43:56:9d:79:
                    4b:8e:e9:38:7e:41:76:37:b9:15:7b:20:f1:e2:22:
                    fe:9b:a8:4d:6f:54:b8:13:a2:26:80:db:3f:1a:83:
                    ed:4f:f7:67:fd:f0:15:d5:70:63:6d:b9:2e:c1:81:
                    99:9e:c0:f2:3e:15:4f:ad:23:0c:76:6e:ee:39:2f:
                    72:be:1e:dd:e6:46:ee:02:b4:2d:32:52:0d:e4:71:
                    91:cf:2d:90:d8:e8:98:a0:51:c1:5f:c8:06:09:e8:
                    a3:01:3f:31:e7:ce:a0:6c:97:d3:20:20:e3:43:b2:
                    76:2d:2a:25:46:c6:9f:35:0e:8c:16:06:0c:8b:c5:
                    6c:f4:f8:48:cf:f4:d3:6d:a0:8a:f5:89:06:89:df:
                    34:b7:83:69:2e:31:66:f9:93:ea:08:5f:17:6f:69:
                    a3:03:a1:92:22:ad:8b:e3:f5:6c:34:57:1a:e8:f0:
                    7c:48:d6:a6:95:d2:86:e9:34:89:1f:87:f2:84:55:
                    b5:cf:f1:46:61:49:62:76:5d:27:61:11:b5:fa:e2:
                    a6:a6:46:01:88:5a:0d:01:30:5a:52:d5:de:e8:69:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:66:ff:3a:f5:61:43:59:2e:cd:3b:86:2a:db:5d:a4:78:28:
         a2:dc:8a:94:10:ca:23:1c:2c:fe:22:81:9b:55:cf:4b:a3:5f:
         b2:3d:ab:55:f3:96:42:c6:cc:10:82:fd:58:10:6f:37:ee:bd:
         ce:7b:78:f1:85:d1:f1:5b:7f:57:a7:35:08:bb:5b:6c:da:3e:
         eb:5e:f9:65:c5:f5:50:8d:a3:4e:94:70:54:43:ec:d8:7a:6f:
         c2:12:51:9a:c2:b2:ef:cd:9b:86:f1:ef:86:13:29:75:f5:0c:
         43:73:42:34:3d:13:2c:86:a0:a6:7c:37:4c:c4:01:d9:4d:03:
         79:56:63:61:72:26:34:09:a2:8b:6a:f5:63:e4:c3:db:cd:2a:
         8c:fe:6b:81:3b:54:b3:ad:56:3a:37:a4:49:b1:50:9e:09:73:
         8b:8c:8e:f2:be:ab:be:86:5e:20:93:f2:85:12:2e:e7:fa:90:
         e2:f0:db:d9:43:02:3a:4f:f2:02:33:38:3d:ce:16:2f:15:7f:
         8c:fb:6b:c7:7f:38:7b:f3:73:3b:44:ab:6a:75:31:97:6e:1f:
         20:0e:5b:b4:af:ec:7d:26:5a:63:0d:2a:14:9a:09:4b:d9:f9:
         93:b1:9f:3d:60:14:a7:29:c6:7f:c6:cc:78:8e:37:0d:c2:32:
         9f:3c:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net