Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
File:                     8runwtAt4Uiqno-gmhx6K3cKGdw.cer (raw, json)
Hash identifier:          LPOfDtLGIny3iE64pXNy8puHf7fYdSdQGlH0KJmlbtA=
Subject key identifier:   F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019424B3EE4184D8EEE61A06C1E1E03FDFC6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 01:49:19 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 51080
                          IP: 178.249.176.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ee:41:84:d8:ee:e6:1a:06:c1:e1:e0:3f:df:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:aa:0a:f8:bf:69:2a:39:33:28:20:8e:c5:
                    57:a7:29:2e:0c:78:14:10:2a:76:db:d5:7b:a8:de:
                    4c:7f:90:d0:7a:4a:f3:61:ec:7c:5a:90:21:1e:8f:
                    dd:57:e1:10:85:d9:43:58:4c:36:19:93:18:97:35:
                    b6:0a:79:c7:b1:28:18:58:c0:4c:16:69:5d:5a:f1:
                    cb:0a:cc:fc:08:6f:8e:4b:1e:f3:2d:8d:13:08:d3:
                    f5:f7:0f:29:6a:bf:f3:06:28:33:67:fc:57:28:7b:
                    39:fb:b1:e6:4c:31:2f:6d:b0:d3:31:a3:1c:92:09:
                    24:fa:95:62:2b:63:e2:60:6a:d5:a0:7a:9d:14:5a:
                    cb:e3:84:96:1c:b1:89:37:be:4d:f3:c1:e6:ce:49:
                    79:d8:83:40:79:23:2b:32:60:44:de:99:45:48:58:
                    dd:87:08:30:43:70:bc:2c:4f:a4:41:f5:83:ed:0d:
                    4f:54:8c:32:86:ed:09:88:51:11:f2:5b:09:fa:03:
                    e1:3e:c1:88:e0:14:42:ee:38:56:27:3e:16:47:38:
                    02:e6:ea:59:9a:b1:78:19:76:a6:47:63:43:3b:97:
                    b9:8c:36:c5:e8:5b:31:38:cc:bb:56:99:c7:03:57:
                    1c:5d:56:89:e3:8c:3b:63:37:82:86:9b:c8:0f:8a:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.249.176.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51080

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:c8:09:db:bc:9a:1a:23:6d:0b:d5:35:0d:38:cd:f9:f3:
         11:52:ed:d8:2c:dd:ab:a1:07:39:2c:a0:4d:37:da:95:f0:f3:
         39:84:a8:e0:76:57:ce:b5:a9:63:35:f0:ac:3c:7f:f4:0f:3b:
         12:8d:62:ec:ee:d6:91:ef:37:32:2e:6b:28:70:02:6e:73:2c:
         9c:66:56:3c:3e:af:7e:c0:14:60:1d:56:71:ee:6c:e2:0b:1a:
         b7:7e:31:9a:84:73:8e:a3:b6:3a:91:1f:73:aa:a9:25:6f:05:
         c1:cf:21:71:64:5a:01:d8:29:72:6f:5e:08:a0:8d:7d:72:43:
         1d:7e:ef:89:7d:a5:f4:b4:e4:f5:63:6f:fd:6b:6e:81:e3:33:
         9f:ab:83:87:44:d4:e9:36:8e:b1:b7:db:7b:89:ec:8d:2d:73:
         30:0e:8f:61:75:f9:04:74:98:e9:a7:9c:ad:30:06:9f:80:15:
         06:a0:20:55:ba:97:e9:08:06:50:cd:32:a1:60:26:b5:ec:73:
         90:15:a0:8a:16:6b:ba:a4:bb:1b:30:b8:12:e8:39:9d:47:76:
         27:f1:db:f1:25:58:fe:65:f9:61:b8:fb:22:ae:f9:ee:47:c9:
         18:f9:1c:35:de:8f:d7:fa:73:d8:58:e3:9c:f4:b8:06:bb:6d:
         ab:d2:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net