Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer (raw, json)
Hash identifier:          6Azcu8uEKARWxxA6kPrOHIle1pFxwR0kAw+PyQ2aOHU=
Subject key identifier:   ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019422FBE954B0D21374E70304993A38EBFF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 17:48:42 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.0.224.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:e9:54:b0:d2:13:74:e7:03:04:99:3a:38:eb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 17:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=edd482c2bee8460048d82902cec9867205222997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:1c:9b:0f:d0:58:7f:ab:ba:76:56:1d:3f:
                    df:29:b5:72:78:ed:44:d5:e0:45:88:85:0f:12:1a:
                    c0:f0:2a:60:5f:89:02:38:8b:ec:50:30:4c:2a:bd:
                    54:ba:ad:00:ba:a0:55:39:15:1c:19:bc:ab:67:fb:
                    f9:9e:c8:d2:2c:e9:f6:29:bc:b8:54:e1:05:68:d3:
                    74:26:f8:c7:39:c6:0f:32:2b:31:ff:b5:3a:cf:39:
                    9f:d8:86:fc:93:b7:c1:16:a7:f2:c7:32:cd:8c:9c:
                    bc:d8:e5:39:35:61:21:be:49:9c:2d:a1:7f:bb:03:
                    52:c1:86:95:88:e7:c3:8a:d4:5f:e0:6a:a5:e7:e5:
                    9b:c7:eb:7b:f4:73:ee:a5:d5:4a:f5:3f:dd:10:f3:
                    2f:a0:76:ce:c9:29:6c:b8:12:e0:ad:7f:d0:d9:73:
                    fd:dd:9d:5f:eb:80:3c:b0:90:cc:94:f8:ea:e3:b2:
                    ca:3d:00:73:2e:5a:e6:02:50:b6:47:3b:4e:52:98:
                    9f:bb:ad:56:87:23:2e:8f:7b:03:40:80:fd:6c:49:
                    28:ae:29:17:7e:fb:e2:0e:b6:04:4d:2b:d0:5d:18:
                    7e:6d:94:ed:b2:42:58:af:59:a0:91:e6:f3:f1:8e:
                    9f:8f:ab:1c:77:13:c8:3d:ff:ff:35:19:b5:91:83:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:c6:dd:fc:ae:e5:c2:81:f6:4e:bc:96:c8:66:2b:24:c0:
         ea:3a:71:83:f2:da:49:83:f3:5d:f3:74:bc:bf:da:ae:7e:25:
         d1:b5:eb:3c:7b:38:fc:0d:0d:b8:84:8a:4e:bc:45:18:a9:f3:
         cd:ef:bc:75:ab:7d:39:0c:f0:82:e5:de:39:f1:ca:f8:76:50:
         62:4f:da:56:3a:62:f5:fb:cd:14:03:68:88:12:1d:66:28:81:
         b0:71:13:5b:93:06:a1:9c:9d:89:98:58:34:a9:c9:e1:c1:03:
         bd:45:f6:3e:26:89:ae:2e:f3:2f:f7:9b:b4:ce:d8:f4:7f:b6:
         91:2c:6d:26:f8:c9:6b:da:fb:8d:8d:02:c1:42:30:4c:bf:c5:
         1a:ff:77:76:6b:d5:8c:3d:17:fb:2e:6d:a5:d4:4c:6e:57:4a:
         c6:c8:64:16:21:88:46:c8:5b:51:5b:3e:0f:72:60:4d:51:52:
         f9:d8:60:9f:a7:de:81:c1:f2:67:8d:37:89:28:01:e1:f4:e6:
         35:1d:06:0e:5a:7d:db:d1:e0:71:d8:41:b6:03:4f:69:f1:a2:
         43:18:1a:fa:7b:4f:80:a3:37:7e:ba:7b:e7:79:02:a7:c2:70:
         35:79:03:3e:a0:d2:9b:7a:48:0b:41:69:06:bc:9c:85:eb:79:
         3d:5e:39:8d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQi++lUsNITdOcDBJk6OOv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQ0ODJjMmJlZTg0NjAwNDhkODI5MDJjZWM5ODY3MjA1MjIyOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hAcmw/QWH+runZWHT/fKbVyeO1E
1eBFiIUPEhrA8CpgX4kCOIvsUDBMKr1Uuq0AuqBVORUcGbyrZ/v5nsjSLOn2Kby4
VOEFaNN0JvjHOcYPMisx/7U6zzmf2Ib8k7fBFqfyxzLNjJy82OU5NWEhvkmcLaF/
uwNSwYaViOfDitRf4Gql5+Wbx+t79HPupdVK9T/dEPMvoHbOySlsuBLgrX/Q2XP9
3Z1f64A8sJDMlPjq47LKPQBzLlrmAlC2RztOUpifu61WhyMuj3sDQID9bEkorikX
fvviDrYETSvQXRh+bZTtskJYr1mgkebz8Y6fj6scdxPIPf//NRm1kYN82QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFO3UgsK+6EYASNgpAs7JhnIFIimXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2Y1ZmQ5
NS1kMmYwLTQyOTUtOTZjZS05ZDkwOTFiZWQ4ZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvZjVmZDk1
LWQyZjAtNDI5NS05NmNlLTlkOTA5MWJlZDhkNy8xLzdkU0N3cjdvUmdCSTJDa0N6
c21HY2dVaUtaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwQDgMA0GCSqGSIb3DQEBCwUAA4IBAQARpMbd
/K7lwoH2TryWyGYrJMDqOnGD8tpJg/Nd83S8v9qufiXRtes8ezj8DQ24hIpOvEUY
qfPN77x1q305DPCC5d458cr4dlBiT9pWOmL1+80UA2iIEh1mKIGwcRNbkwahnJ2J
mFg0qcnhwQO9RfY+JomuLvMv95u0ztj0f7aRLG0m+Mlr2vuNjQLBQjBMv8Ua/3d2
a9WMPRf7Lm2l1ExuV0rGyGQWIYhGyFtRWz4PcmBNUVL52GCfp96BwfJnjTeJKAHh
9OY1HQYOWn3b0eBx2EG2A09p8aJDGBr6e0+Aozd+unvneQKnwnA1eQM+oNKbekgL
QWkGvJyF63k9XjmN
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net