Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.cer (raw, json)
Hash identifier:          +iCov4wOkg1JuaeAVsq4Gt9ykbTIVgmqFhgoRunjfK0=
Subject key identifier:   F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019425FC4BC35B775B1BD5A4DD3B0E5CF3CB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 07:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 25352
                          IP: 91.212.48.0/24
                          IP: 195.190.128.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:4b:c3:5b:77:5b:1b:d5:a4:dd:3b:0e:5c:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 07:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:37:47:47:5c:20:1e:e2:5c:5d:89:dd:e0:
                    32:2d:8d:45:20:46:5f:b2:bc:f5:77:ec:9f:21:a9:
                    af:10:6b:ec:56:79:9c:38:7c:d3:ad:a8:f4:3d:7a:
                    a3:2f:d9:11:70:ab:39:44:70:5d:d8:21:ec:61:8a:
                    2d:71:9b:f6:75:74:3d:20:26:df:f8:48:4b:52:40:
                    ae:1a:fc:f5:36:ca:5b:1d:ac:95:f9:ee:3b:7b:2e:
                    1e:ea:bc:81:90:81:67:f3:68:42:d1:18:0e:65:c4:
                    12:27:a3:52:7a:f8:25:a0:23:b1:8c:a4:6b:89:11:
                    19:04:c5:3f:35:8a:37:d5:1d:dc:e2:7f:d2:08:dc:
                    a8:e2:21:7a:e7:6d:b1:bd:0b:1f:f8:a3:85:8a:2e:
                    45:9f:16:7f:ff:6f:4a:22:2e:ba:c4:c1:d9:91:7e:
                    8c:13:7a:38:2e:dd:b8:a3:25:d0:5f:bc:30:e4:e5:
                    3f:12:3e:45:28:9e:ed:92:c1:af:99:b2:be:89:0f:
                    8f:7f:b7:02:8c:a0:3e:5b:de:52:7f:69:83:c7:17:
                    39:70:15:61:e3:44:ae:bb:ce:b1:7b:bd:33:af:e8:
                    20:d8:92:70:5f:32:1a:8f:f0:0c:85:20:40:18:69:
                    39:05:d2:ff:52:3b:b4:78:3b:35:27:15:65:41:7e:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.48.0/24
                  195.190.128.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25352

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:05:f5:24:2f:01:4d:86:c3:42:f6:c3:fa:cc:35:ab:03:
         e3:97:3d:d9:37:dc:7a:04:86:b0:40:73:79:79:3a:2c:1a:b3:
         ef:7d:0e:57:ea:91:72:ff:9f:db:ba:b4:21:37:ea:ee:0d:0e:
         8d:8b:37:63:ca:87:af:a1:72:60:05:10:84:af:2f:b5:7d:e3:
         52:58:e7:03:69:49:b4:eb:85:81:63:ad:5a:e8:80:50:18:75:
         0b:70:4e:5e:c2:14:d0:80:bb:47:b0:b6:17:a2:d1:af:0a:6e:
         b0:b3:5c:70:0a:c6:04:01:e9:00:83:15:2d:1b:fd:98:5a:ce:
         60:0c:46:8a:0f:83:9c:74:6a:ef:8b:30:1e:91:e8:fd:38:f5:
         d9:9b:8f:76:36:95:3b:58:86:aa:14:19:da:a9:2d:f9:8d:5c:
         9a:e8:89:75:d2:ea:5b:46:03:0a:86:c3:aa:8b:3a:de:b0:b0:
         6e:a4:1d:d2:bd:64:d8:fe:9f:76:f2:ae:b1:ea:60:a9:0c:18:
         95:77:f2:ec:fa:a4:0b:71:3e:e4:55:12:ca:ee:8e:e0:9e:4e:
         de:bc:92:4f:c9:bd:bc:bb:0a:9b:17:50:d4:55:8d:dd:5f:b3:
         e6:f5:ec:70:b2:39:fb:2a:3a:cf:13:be:2e:60:10:fd:f1:71:
         04:6e:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net